last executing test programs: 16.392464583s ago: executing program 1 (id=490): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200000000000000000200000009000200"], 0x64}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20004084}, 0x8044) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f00000006c0)={0x2, 0x1, 0x1c, 0x14, 0x43, 0x0}) 15.017767049s ago: executing program 1 (id=495): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x24}}], 0x20, 0x24000010}}], 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40010062, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) 12.520895838s ago: executing program 3 (id=500): ioperm(0x1, 0x9, 0x2) syz_usbip_server_init(0x4) 10.62836201s ago: executing program 2 (id=504): bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}}, 0x18) r0 = getpid() syz_pidfd_open(r0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000180)={0x5, 0x81, 0xfffffff7, {0x7, 0x1c}, 0x1, 0x3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x20) fcntl$setlease(r5, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') 10.582710443s ago: executing program 3 (id=505): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xd0, 0x10, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xb, 0xd, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x81, 0x8}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x81, 0x0, 0x3, 0x20, 0xf8}, 0x1a, &(0x7f0000000080)={0x5, 0xf, 0x1a, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x30, 0x2, 0x6, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x2, 0xb6, 0xd, 0x80}]}, 0x3, [{0xa7, &(0x7f0000000880)=ANY=[@ANYBLOB="a70335dcd2444cb42241f275469cf318ed21af088b9afc172e293c59ef7596fe23d7e242d520a7ccbd2f0ad2ee616b6803dbbfec9a69cd33b8f4b249fc5b8199b5bce79fdda6d14d78731ba57d50dee17c850fcec57e37ab9e4a292090f4d017c4fcc457dae61fa3135710786c59bbf26e10688dca539322c9b627e601e97348bf759a403c2ef144414d14328dedc6172f7e847023607dc29d7c5ff5850b67e1bf05ae059cda5edc53eb302d2530a11018e6cf37b5fa8679df7a6b0a1332b23dcd3c959385e337142478bf32e70f680f4dff3f2fdf67a0a5978ce3282cec9bdecf039d64508fec06190912c0c1fc12fc358ed92ae0b6a2486bc85b2b72131ed37af6d2932b6a671ddd6c67605a7af3d007036a4612a3c4d5247091891906e50d47feeed4659374a1282fcb0070a3f3c3a4752c8310637a235632733b7005fce6c6e7572ddb7db1479fff6a1f94541cf5f420bc56e7b9208a6ba19825d3112161a17465941ffacb142aff730b2bee328c7c96f72b693d44208d89e4ce459b9a1aa175f90a87e529cc99abe062"]}, {0xfb, &(0x7f0000000180)=@string={0xfb, 0x3, "f09dfe5df5fc8113c721f25cf1e0340f2821171630fef35f7a68d7cc17858bd00aedecfed3bb153fa51c05d322b4da1bab0623d86b0facc98360a60ad99288a74f229f48b5c97767fc8dcac44553f8ff0a044953464eaca88c3ea9933f797662fc1e3701388945c08b5bcb156a964a03579809aebe1e8eccfed99befbd6bbc8c2d66c15c131f3afac2a90dfa8e687e050894383f491485f56488759a07d26a3f6a1696243ac555e58e080a333d030098e53d26482b8ef3dfaefe8be55420890f4663a5ca7c91ffeb561e872d6334faa6f0bd1267b755b2e7fb6fdf60113c4deb05fb138c00e4756bef453207e710188798c62f01985792867b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x437}}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000980)=""/194, 0x2c, 0xc2, 0x1}, 0x28) syz_usb_control_io$printer(r0, &(0x7f0000000540)={0x14, &(0x7f00000003c0)={0x0, 0x0, 0x100, {0x100, 0xe, "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"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}}, &(0x7f0000000840)={0x34, &(0x7f0000000580)={0x20, 0x0, 0xdf, "beb6145275a58b11caab703d3391e00d97a9d0eb8c8797d59533aef23017ae26b39c0ef87f4e119a210898660f395bbfd28a6e3e4e0837aaef20b3218290e8796e6180f69ae5c7571b20c31994a8adebc94ec3351e58a962a49922a2361de30ab3ee4a144c00ec9bb6fe8e50d4ed4b70feffd1f060b68672238a1d9e4e703511083c175832dbd97f891a4c2acbd26bc16151858c84e7bf55a0824e0ee830ef5dc4193cd40639b80ed10a8949c0190dc2284e36ebcd7053bd69984761cc91728ef0887927f7fe44e5824659ae7e86b77196a3591d53c8548380f211fa2b31d0"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xa3}, &(0x7f0000000700)=ANY=[@ANYBLOB="200081000000007fd11254b1f97a073159823c19090e1391499c3390e2bcb4dd442193b739658a1c2aa559857c8c9b2a5244366d342a389f1e2597ca8599b16a604ae299f2a4af6a6e59bc3eebae0ff65ef3c73decb2893bc2908076a23361fe527f04969c61d7759158a010884ff505bcd7f5041c34f0daf5d59cc757127e3543de0a2337a0de"], &(0x7f00000007c0)={0x20, 0x1, 0x1, 0x49}, &(0x7f0000000800)={0x20, 0x0, 0x1, 0xf}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, 0x0) 9.605931509s ago: executing program 2 (id=508): bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}}, 0x18) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000180)={0x5, 0x81, 0xfffffff7, {0x7, 0x1c}, 0x1, 0x3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x20) fcntl$setlease(r6, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x2) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) close_range(r1, 0xffffffffffffffff, 0x0) 8.848295121s ago: executing program 2 (id=509): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="c721149f0dbb753d91", @ANYRESDEC=r1], 0x34}, 0x1, 0x0, 0x0, 0x44870}, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 7.509191358s ago: executing program 3 (id=513): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) (fail_nth: 2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newlink={0x20, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f, 0x2}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x42, &(0x7f00000006c0)={@local, @broadcast, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x2, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @empty, {[@ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x9f1}}}}}}, 0x0) accept4$nfc_llcp(r4, &(0x7f0000000300), &(0x7f0000000100)=0x58, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') readv(r5, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/176, 0xb0}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x7a00}, 0x4000000) syz_usb_connect(0x3, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100005864e6082c105162687e0102030109"], 0x0) socket(0x10, 0x3, 0x0) 6.484733131s ago: executing program 2 (id=515): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x2, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0xffe0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x24004010) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001114100026bd7000fcdbdf25080003000300080008004f000400000008004f000000000008004b002800000008004b0000000000080003000400000008004a0000800000080001000100000042f6bcad46f43d8fe21c7f0deb299462bbff6413350bb98c1c3ba0fc51f75ab503fa75f5ab676c57f2191f4d016e6628d5290e49d39c5aecb4eb895041a50501b919daea37bf184877551a0e48c61e39afaf956bff82b43b050e26393541efdee34f557d8b035132476bd6979a74c950da262ebc0755f5"], 0x50}, 0x1, 0x0, 0x0, 0x40400c5}, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_open_dev$sndmidi(0x0, 0x2, 0x141581) r5 = dup(0xffffffffffffffff) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000140)={&(0x7f0000329000/0x4000)=nil}) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0xfffffb07, @local, 0x680}, 0x1c) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socket(0x10, 0x3, 0x0) 6.317268301s ago: executing program 1 (id=516): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec85"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) recvmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f00000004c0), 0x80, &(0x7f0000000a80)=[{&(0x7f0000000540)=""/129, 0x81}, {&(0x7f0000000600)=""/234, 0xea}, {&(0x7f0000000700)=""/21, 0x15}, {&(0x7f00000009c0)=""/181, 0xb5}], 0x4, &(0x7f0000000ac0)=""/99, 0x63}, 0x2110) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x1f, 0x4001, @local}, 0x10, 0x0}, 0x30004001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r7, r2, 0x0, 0x7ffffffd) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r8, &(0x7f0000000080), 0x0, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r9, 0x8917, &(0x7f0000000480)={'ip6_vti0\x00', {0x2, 0x0, @multicast2}}) 5.865218988s ago: executing program 0 (id=518): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000000), 0x3, r3, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000300)={0x24, r5, r3}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7fff, 0xfa11, 0xffffffff}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') read$FUSE(r6, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) futimesat(r6, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x5, 0x0) (async) r9 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x7, &(0x7f0000000180), 0x43) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003b1500000000000000000000007b", @ANYRES32=0x0, @ANYBLOB="00000000015001001800128008000100677470000c000280", @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x14008084}, 0x20000040) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) write$P9_RGETLOCK(r6, &(0x7f00000001c0)={0x28, 0x37, 0x2, {0x1, 0x8, 0x2bc0, r7, 0xa, 'syzkaller\x00'}}, 0x28) (async) write$P9_RGETLOCK(r6, &(0x7f00000001c0)={0x28, 0x37, 0x2, {0x1, 0x8, 0x2bc0, r7, 0xa, 'syzkaller\x00'}}, 0x28) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001500010300000040f8dbdf2505"], 0x14}}, 0x0) (async) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001500010300000040f8dbdf2505"], 0x14}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 5.75637958s ago: executing program 0 (id=519): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0)={0x23, 0x0, 0x8}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') memfd_create(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) socket$kcm(0x10, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1, 0xfffffa16}, 0x28) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) 5.37039636s ago: executing program 4 (id=520): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xffffffff80000000, 0x0, 0x5b) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r1, @ANYBLOB="040029bd7000fdf7df255a00003778c057f5700b44000c009900"], 0x20}, 0x1, 0x0, 0x0, 0x83e615bf14d66a53}, 0x4000) syz_emit_ethernet(0xca, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@end, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0xe, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@multicast1, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknod(&(0x7f0000000200)='./file0\x00', 0x800d520, 0xdc000000) open$dir(0x0, 0x2, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x101000, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000073d8692e43df32a31633de29e000360a020000000000180100002020782500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000108000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000009000000010000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)="9e6c4d5aeb37236a123e8d8892bfddc512094eabf07f13d117b24b4b210f3feaac4fd37e901f4baa0c42ed3fbca58516da9dc58b6b62d47c29903d639ff8df215bfe983690c4fd5f53daa31cac95c91ec5ac99f29ef943f2a8d92f40287fa64996a512", 0x0, 0xc, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) 5.139664398s ago: executing program 1 (id=521): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8050}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'rose0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000200000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8, @ANYBLOB="0a0001000000648a63ff"], 0x48}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @rand_addr, @local}, &(0x7f0000000340)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x8, 0x8, 0x1, 0x4, {{0x6, 0x4, 0x1, 0x38, 0x18, 0x67, 0x0, 0x4, 0x29, 0x0, @private=0xa010101, @loopback, {[@end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x1, 0x80, 0x1, 0x5, {{0x15, 0x4, 0x0, 0x7, 0x54, 0x66, 0x0, 0xfd, 0x29, 0x0, @rand_addr=0x64010101, @empty, {[@timestamp_addr={0x44, 0x2c, 0xa6, 0x1, 0xb, [{@empty, 0x3}, {@remote, 0x5}, {@multicast2, 0x10}, {@empty, 0x21}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @noop, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0xc, 0x34, 0x1, 0x2, [{@loopback, 0x36feddf7}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x4, 0x42, 0x5, 0x1, 0x0, @loopback, @remote, 0x8000, 0x7800, 0x7, 0x7fffffff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x7, 0x1, 0x2, 0xfff, {{0x2a, 0x4, 0x0, 0x5, 0xa8, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x3c, 0xcc, 0x1, 0x1, [{@empty, 0x1ff}, {@multicast2, 0x7}, {@local, 0xff}, {@rand_addr=0x64010101, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@empty, 0x4}, {@multicast1, 0x22a}]}, @noop, @lsrr={0x83, 0x17, 0x2a, [@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x69, 0x3, 0x7, [{@private=0xa010102}, {@multicast1, 0x3}]}, @cipso={0x86, 0x25, 0x3, [{0x1, 0x2}, {0x1, 0xe, "ebcd849ca98e26a4b1a26d40"}, {0x1, 0x6, 'MzIA'}, {0x5, 0x4, "aea0"}, {0x6, 0x5, "1fb44e"}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="b8010000", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedbdf25060000002000018008000300020000001400020076657468305f746f5f626f6e64000000440001801400020070696d7265673100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f62726964676500080003000100000048000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000300000000001400020070696d7265673000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="6800018008000100", @ANYRES32=r8, @ANYBLOB="08000300010000001400020073797a6b616c6c6572300000000000001400020070696d3672656731000000000000000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="0800030001000000140002007465616d3000000000000000000000002000018014000200766972745f776966693000000000000008000300000000001c00018008000100", @ANYRES32=r11, @ANYBLOB="08000300d05ecf02000000080001000a083090f466c71679cd00f57d35fd38f928169c086dab8f09d736a91abe91c0eb314c7fdb50ef4fa615a6b7c550197cd30603c9d6dd72e7e8f506250861399b59ff4189df4728908298b1f0b6e77900dc1370f04fec38fdac4a5721fd077a796325d46752572857532d02296035ad3a4b489ab0e03a303044b9f33f2059bcbab6bea1c62e436eb4f4cef6454029a96a7a50e09847ea97a4970dee1525a56045000000", @ANYRES32=0x0, @ANYBLOB="340001801400020064756d6d79300000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="14000200776732000000000000000000000000000c00018008000100", @ANYRES32=r13, @ANYBLOB], 0x1b8}}, 0x0) getpriority(0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_route(0x10, 0x3, 0x0) 4.66379844s ago: executing program 4 (id=522): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6bb0c8c}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0xfffffffffffffeff, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r0, 0x2285, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r2, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='7', 0x1}], 0x1}}], 0x1, 0x1) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {0x0}], 0x2) 4.105408306s ago: executing program 3 (id=523): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0)={0x23, 0x0, 0x8}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') memfd_create(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) socket$kcm(0x10, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xd0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1, 0xfffffa16}, 0x28) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) 4.052185832s ago: executing program 0 (id=524): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0xd4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)}], 0x2) 3.658295046s ago: executing program 4 (id=525): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') (fail_nth: 1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc2c45513, 0x0) 3.314512972s ago: executing program 0 (id=526): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000040003"], 0x24}}, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000040)={0x2, @sliced={0xc, [0x1, 0xc8, 0x7, 0x3, 0x8, 0x7a, 0x1, 0x7, 0x9, 0x4000, 0x0, 0x3d, 0x81, 0x7, 0x2, 0x7fff, 0x0, 0x4, 0xffff, 0x4, 0x3, 0x1, 0x8, 0x9, 0x7, 0x3a, 0x7, 0x6396, 0x25, 0x7fff, 0x0, 0x3, 0xfffd, 0x2, 0xca78, 0x2, 0x0, 0xe833, 0x1, 0x3, 0x3, 0x4dd, 0x4, 0xffff, 0x2, 0x5, 0x1, 0xd], 0x7}}) r3 = fsmount(r1, 0x0, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x6000, 0x0) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000000)=""/166, 0xa6}, {&(0x7f0000000240)=""/251, 0xfb}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f00000000c0)=""/64, 0x40}], 0x4, 0x7, 0xff) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc2c45513, 0x0) 3.311261238s ago: executing program 3 (id=527): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x33, 0x0, &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc7923", 0x2, 0x0, 0x10000}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socket$kcm(0x2d, 0x2, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(0xffffffffffffffff, 0x0, 0x0) timer_settime(r0, 0x1, 0x0, 0x0) timer_delete(r0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) 3.160292867s ago: executing program 1 (id=528): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1100020, &(0x7f0000005380)={[{@gid}, {}]}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}) recvmmsg(0xffffffffffffffff, &(0x7f0000003300), 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000006100), 0x49f, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x80) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r3, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x4, 0x3b5f91, 0x203bac}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731136000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 3.117497734s ago: executing program 4 (id=529): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000040)=0xd) (fail_nth: 1) 2.222738112s ago: executing program 1 (id=530): mount$nfs(&(0x7f0000000000)='*}-\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000002180)=ANY=[@ANYBLOB="283a2c5e287d7d5b2c0df90de0821fcb04dbebe1612400419bd3174c288eecaa4d42af9bdf127f16b4227ff1facded2c5c242c7365636c6162656c2c00"]) ioperm(0x0, 0x7, 0xfffffff7) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x89901) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = memfd_secret(0x80000) dup2(r4, r5) setsockopt$packet_fanout_data(r5, 0x113, 0x16, 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f00000021c0)={0xd62e}, 0x4) read$FUSE(r3, &(0x7f0000000140)={0x2020}, 0x2020) ioperm(0x3, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 2.156068042s ago: executing program 0 (id=531): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec85"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) recvmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f00000004c0), 0x80, &(0x7f0000000a80)=[{&(0x7f0000000540)=""/129, 0x81}, {&(0x7f0000000600)=""/234, 0xea}, {&(0x7f0000000700)=""/21, 0x15}, {&(0x7f00000009c0)=""/181, 0xb5}], 0x4, &(0x7f0000000ac0)=""/99, 0x63}, 0x2110) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x1f, 0x4001, @local}, 0x10, 0x0}, 0x30004001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r7, r2, 0x0, 0x7ffffffd) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r8, &(0x7f0000000080), 0x0, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r9, 0x8917, &(0x7f0000000480)={'ip6_vti0\x00', {0x2, 0x0, @multicast2}}) 1.669159725s ago: executing program 4 (id=532): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000"], 0x64}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20004084}, 0x8044) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f00000006c0)={0x2, 0x1, 0x1c, 0x14, 0x43, 0x0}) 1.527248426s ago: executing program 3 (id=533): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0xdc) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={@none, 0x9}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x14, r3, 0xba960a2220112c19, 0x70bd2f, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x840) r4 = socket(0x2, 0x2, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) ioctl$NBD_DO_IT(r5, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x5) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x14, 0x0) 1.482880469s ago: executing program 2 (id=534): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_macvtap\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002000)=ANY=[@ANYBLOB="4001000010003306000000000400", @ANYRES32=0x0], 0x140}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r6, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4a}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x3b91b54cec0633d2) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) setsockopt$sock_attach_bpf(r4, 0x6, 0x25, &(0x7f0000000040), 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') mount$nfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x0) 37.269978ms ago: executing program 4 (id=535): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000206d0494c2000000000001090224000100000003090400000103000300092134b40001220600090581030002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000340)={0x40, 0x8, 0x6, {0x6, 0xd, "85050000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) open(0x0, 0x0, 0x0) 18.532567ms ago: executing program 2 (id=536): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0xd4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)}], 0x2) 0s ago: executing program 0 (id=537): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) kernel console output (not intermixed with test programs): ckdep_hardirqs_on+0x7c/0x110 [ 84.021481][ T6115] do_syscall_64+0xcd/0x4c0 [ 84.021502][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.021521][ T6115] RIP: 0033:0x7f8948d8eb69 [ 84.021534][ T6115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.021547][ T6115] RSP: 002b:00007f8949b22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 84.021562][ T6115] RAX: ffffffffffffffda RBX: 00007f8948fb5fa0 RCX: 00007f8948d8eb69 [ 84.021571][ T6115] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 84.021580][ T6115] RBP: 00007f8949b22090 R08: 0000000000000000 R09: 0000000000000000 [ 84.021588][ T6115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.021595][ T6115] R13: 0000000000000000 R14: 00007f8948fb5fa0 R15: 00007ffcbd0e8168 [ 84.021614][ T6115] [ 84.271761][ T6117] tipc: Started in network mode [ 84.276667][ T6117] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 84.296362][ T6117] tipc: Enabled bearer , priority 10 [ 84.402608][ T6123] fuse: Bad value for 'rootmode' [ 84.409043][ T6117] No source specified [ 84.616430][ T6129] fuse: Unknown parameter '0x0000000000000005' [ 84.746311][ T92] tipc: Node number set to 10922666 [ 85.415851][ T5905] tipc: Node number set to 10922666 [ 85.570136][ T6136] SELinux: ebitmap: truncated map [ 85.589241][ T6136] SELinux: failed to load policy [ 86.761774][ T5873] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.283862][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 87.418599][ T5905] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.520681][ T5873] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 87.535500][ T5873] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 87.546344][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 87.546358][ T30] audit: type=1400 audit(1754045793.609:185): avc: denied { create } for pid=6148 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.573412][ T5873] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.621818][ T5873] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.654181][ T5873] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.661239][ T5905] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 87.670998][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.781596][ T6155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.60'. [ 87.809459][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.863999][ T30] audit: type=1400 audit(1754045793.929:186): avc: denied { rename } for pid=6148 comm="syz.2.58" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 87.872702][ T5905] usb 4-1: Product: syz [ 88.040498][ T5873] usb 2-1: GET_CAPABILITIES returned 0 [ 88.046255][ T5873] usbtmc 2-1:16.0: can't read capabilities [ 88.069213][ T5905] usb 4-1: Manufacturer: syz [ 88.084093][ T5905] usb 4-1: SerialNumber: syz [ 88.103422][ T5905] usb 4-1: config 0 descriptor?? [ 88.109653][ T6157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.60'. [ 88.145930][ T5905] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 88.354413][ T5905] usb 4-1: USB disconnect, device number 3 [ 88.496246][ T6170] fuse: Bad value for 'rootmode' [ 88.611526][ T5946] usb 2-1: USB disconnect, device number 3 [ 88.664980][ T5838] udevd[5838]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 88.715567][ T5821] udevd[5821]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 89.038505][ T6184] fuse: Unknown parameter '0x0000000000000005' [ 89.305781][ T6178] syz.4.62 (6178): drop_caches: 2 [ 89.485200][ T30] audit: type=1400 audit(1754045795.519:187): avc: denied { create } for pid=6189 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.672974][ T30] audit: type=1400 audit(1754045795.529:188): avc: denied { connect } for pid=6189 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.700646][ T30] audit: type=1400 audit(1754045795.759:189): avc: denied { create } for pid=6191 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 90.089370][ T30] audit: type=1400 audit(1754045795.759:190): avc: denied { setopt } for pid=6191 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 90.185312][ T30] audit: type=1400 audit(1754045796.139:191): avc: denied { getopt } for pid=6198 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 90.207671][ T6192] syz.2.66 (6192): drop_caches: 2 [ 90.310012][ T30] audit: type=1400 audit(1754045796.139:192): avc: denied { read write } for pid=6198 comm="syz.3.70" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 90.340927][ T30] audit: type=1400 audit(1754045796.139:193): avc: denied { open } for pid=6198 comm="syz.3.70" path="/14/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 91.368568][ T6210] team0: Device gtp0 is of different type [ 91.375053][ T30] audit: type=1400 audit(1754045797.099:194): avc: denied { mount } for pid=6215 comm="syz.3.73" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 92.060278][ T6224] fuse: Bad value for 'rootmode' [ 92.912667][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 92.912681][ T30] audit: type=1400 audit(1754045798.979:204): avc: denied { read } for pid=6230 comm="syz.4.77" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.164041][ T30] audit: type=1400 audit(1754045798.979:205): avc: denied { open } for pid=6230 comm="syz.4.77" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 93.264895][ T6229] ======================================================= [ 93.264895][ T6229] WARNING: The mand mount option has been deprecated and [ 93.264895][ T6229] and is ignored by this kernel. Remove the mand [ 93.264895][ T6229] option from the mount to silence this warning. [ 93.264895][ T6229] ======================================================= [ 93.455881][ T6236] fuse: Unknown parameter '0x0000000000000005' [ 93.611326][ T30] audit: type=1400 audit(1754045799.289:206): avc: denied { create } for pid=6230 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 93.699628][ T30] audit: type=1400 audit(1754045799.409:207): avc: denied { write } for pid=6230 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.762112][ T30] audit: type=1400 audit(1754045799.829:208): avc: denied { write } for pid=6230 comm="syz.4.77" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 94.654988][ T30] audit: type=1400 audit(1754045800.679:209): avc: denied { create } for pid=6243 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.854149][ T30] audit: type=1400 audit(1754045800.909:210): avc: denied { read } for pid=6249 comm="syz.1.84" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.901166][ T6251] FAULT_INJECTION: forcing a failure. [ 94.901166][ T6251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.914281][ T6251] CPU: 1 UID: 0 PID: 6251 Comm: syz.1.84 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 94.914308][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.914318][ T6251] Call Trace: [ 94.914324][ T6251] [ 94.914330][ T6251] dump_stack_lvl+0x16c/0x1f0 [ 94.914360][ T6251] should_fail_ex+0x512/0x640 [ 94.914390][ T6251] strncpy_from_user+0x3b/0x2e0 [ 94.914417][ T6251] getname_flags.part.0+0x8f/0x550 [ 94.914446][ T6251] getname_flags+0x93/0xf0 [ 94.914463][ T6251] do_sys_openat2+0xb8/0x1d0 [ 94.914487][ T6251] ? __pfx_do_sys_openat2+0x10/0x10 [ 94.914512][ T6251] ? __fget_files+0x20e/0x3c0 [ 94.914540][ T6251] __x64_sys_openat+0x174/0x210 [ 94.914564][ T6251] ? __pfx___x64_sys_openat+0x10/0x10 [ 94.914586][ T6251] ? ksys_write+0x1ac/0x250 [ 94.914611][ T6251] do_syscall_64+0xcd/0x4c0 [ 94.914637][ T6251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.914655][ T6251] RIP: 0033:0x7f3330d8d4d0 [ 94.914670][ T6251] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 94.914687][ T6251] RSP: 002b:00007f3331bbcb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 94.914705][ T6251] RAX: ffffffffffffffda RBX: 0000000000008401 RCX: 00007f3330d8d4d0 [ 94.914716][ T6251] RDX: 0000000000008401 RSI: 00007f3331bbcc10 RDI: 00000000ffffff9c [ 94.914726][ T6251] RBP: 00007f3331bbcc10 R08: 0000000000000000 R09: 0000000000000000 [ 94.914737][ T6251] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 94.914747][ T6251] R13: 0000000000000001 R14: 00007f3330fb6080 R15: 00007fff6b335a08 [ 94.914770][ T6251] [ 95.090213][ T30] audit: type=1400 audit(1754045800.909:211): avc: denied { open } for pid=6249 comm="syz.1.84" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 95.119914][ T30] audit: type=1400 audit(1754045800.909:212): avc: denied { ioctl } for pid=6249 comm="syz.1.84" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 95.256008][ T6257] hub 6-0:1.0: USB hub found [ 95.262184][ T6257] hub 6-0:1.0: 1 port detected [ 95.843696][ T30] audit: type=1400 audit(1754045801.909:213): avc: denied { read } for pid=6262 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.104842][ T6278] sp0: Synchronizing with TNC [ 98.062240][ T6286] binder: 6281:6286 ioctl c018620c 200000000100 returned -1 [ 98.232503][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 98.232522][ T30] audit: type=1400 audit(2000000000.900:222): avc: denied { ioctl } for pid=6281 comm="syz.1.91" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 98.338766][ T30] audit: type=1400 audit(2000000000.900:223): avc: denied { set_context_mgr } for pid=6281 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 98.460852][ T30] audit: type=1400 audit(2000000001.200:224): avc: denied { append } for pid=6281 comm="syz.1.91" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.631141][ T30] audit: type=1400 audit(2000000001.200:225): avc: denied { getopt } for pid=6281 comm="syz.1.91" laddr=::1 lport=53362 faddr=::1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.733795][ T30] audit: type=1400 audit(2000000001.440:226): avc: denied { sys_module } for pid=6281 comm="syz.1.91" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 98.838620][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'. [ 98.863333][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 99.483218][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'. [ 99.609691][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 99.742364][ T6305] bridge1: entered promiscuous mode [ 99.747596][ T6305] bridge1: entered allmulticast mode [ 99.757352][ T6305] team0: Port device bridge1 added [ 100.043223][ T6283] syz.3.88 (6283): drop_caches: 2 [ 100.253990][ T30] audit: type=1400 audit(2000000003.040:227): avc: denied { write } for pid=6306 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.541106][ T30] audit: type=1400 audit(2000000003.040:228): avc: denied { nlmsg_write } for pid=6306 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.304437][ T6325] fuse: Unknown parameter '0x0000000000000005' [ 101.985248][ T6336] FAULT_INJECTION: forcing a failure. [ 101.985248][ T6336] name failslab, interval 1, probability 0, space 0, times 1 [ 101.998034][ T6336] CPU: 0 UID: 0 PID: 6336 Comm: syz.2.105 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 101.998059][ T6336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.998069][ T6336] Call Trace: [ 101.998075][ T6336] [ 101.998081][ T6336] dump_stack_lvl+0x16c/0x1f0 [ 101.998110][ T6336] should_fail_ex+0x512/0x640 [ 101.998135][ T6336] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 101.998166][ T6336] should_failslab+0xc2/0x120 [ 101.998186][ T6336] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 101.998213][ T6336] ? __alloc_skb+0x2b2/0x380 [ 101.998240][ T6336] __alloc_skb+0x2b2/0x380 [ 101.998261][ T6336] ? __pfx___alloc_skb+0x10/0x10 [ 101.998285][ T6336] ? security_socket_getpeersec_dgram+0xac/0x290 [ 101.998308][ T6336] ? security_socket_getpeersec_dgram+0xcc/0x290 [ 101.998339][ T6336] netlink_alloc_large_skb+0x69/0x130 [ 101.998366][ T6336] netlink_sendmsg+0x6a1/0xdd0 [ 101.998394][ T6336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.998422][ T6336] ? ____sys_sendmsg+0x871/0xc70 [ 101.998442][ T6336] ____sys_sendmsg+0xa95/0xc70 [ 101.998459][ T6336] ? copy_msghdr_from_user+0x10a/0x160 [ 101.998482][ T6336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.998505][ T6336] ? __lock_acquire+0xb8a/0x1c90 [ 101.998534][ T6336] ___sys_sendmsg+0x134/0x1d0 [ 101.998558][ T6336] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.998578][ T6336] ? __lock_acquire+0x622/0x1c90 [ 101.998631][ T6336] __sys_sendmsg+0x16d/0x220 [ 101.998655][ T6336] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.998676][ T6336] ? __pfx___schedule+0x10/0x10 [ 101.998712][ T6336] do_syscall_64+0xcd/0x4c0 [ 101.998739][ T6336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.998756][ T6336] RIP: 0033:0x7f3859b8eb69 [ 101.998770][ T6336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.998786][ T6336] RSP: 002b:00007f385a997038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.998804][ T6336] RAX: ffffffffffffffda RBX: 00007f3859db6080 RCX: 00007f3859b8eb69 [ 101.998815][ T6336] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 101.998824][ T6336] RBP: 00007f385a997090 R08: 0000000000000000 R09: 0000000000000000 [ 101.998834][ T6336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.998844][ T6336] R13: 0000000000000000 R14: 00007f3859db6080 R15: 00007ffd3f4aa2b8 [ 101.998866][ T6336] [ 102.628965][ T6265] syz.4.85 (6265): drop_caches: 2 [ 102.682237][ T30] audit: type=1400 audit(2000000005.530:229): avc: denied { ioctl } for pid=6339 comm="syz.2.106" path="socket:[10488]" dev="sockfs" ino=10488 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.813134][ T6356] bridge1: entered promiscuous mode [ 103.818389][ T6356] bridge1: entered allmulticast mode [ 103.826131][ T6356] team0: Port device bridge1 added [ 104.159445][ T30] audit: type=1400 audit(2000000007.000:230): avc: denied { write } for pid=6357 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.241226][ T30] audit: type=1400 audit(2000000007.030:231): avc: denied { read } for pid=6357 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.414691][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.893126][ T30] audit: type=1400 audit(2000000007.350:232): avc: denied { create } for pid=6359 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.959995][ T30] audit: type=1400 audit(2000000007.760:233): avc: denied { ioctl } for pid=6359 comm="syz.3.110" path="socket:[9530]" dev="sockfs" ino=9530 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.984268][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.234616][ T6379] fuse: Unknown parameter 'fd0x0000000000000005' [ 105.591942][ T5905] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.393215][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 106.401899][ T5905] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 106.418319][ T30] audit: type=1400 audit(2000000009.260:234): avc: denied { connect } for pid=6390 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.451191][ T5905] usb 2-1: config 0 has no interface number 0 [ 107.217396][ T6395] geneve2: entered promiscuous mode [ 107.222779][ T6395] geneve2: entered allmulticast mode [ 107.910234][ T6373] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.935891][ T6373] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.945358][ T6373] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.955192][ T6373] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.047578][ T30] audit: type=1400 audit(2000000010.780:235): avc: denied { read } for pid=6393 comm="syz.0.120" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 108.070250][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.192456][ T5905] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 108.207892][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.226642][ T30] audit: type=1400 audit(2000000010.780:236): avc: denied { open } for pid=6393 comm="syz.0.120" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 108.236592][ T5905] usb 2-1: config 0 descriptor?? [ 108.358899][ T6402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.121'. [ 108.368657][ T6402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.121'. [ 108.728979][ T30] audit: type=1400 audit(2000000010.780:237): avc: denied { ioctl } for pid=6393 comm="syz.0.120" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 108.754039][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.787508][ T6402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.121'. [ 108.830408][ T6402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.121'. [ 108.869876][ T5905] usb 2-1: can't set config #0, error -71 [ 108.906609][ T5905] usb 2-1: USB disconnect, device number 4 [ 109.003716][ T6402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.121'. [ 109.018503][ T6402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.121'. [ 109.893627][ T30] audit: type=1400 audit(2000000012.690:238): avc: denied { read } for pid=6413 comm="syz.3.125" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 109.917717][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.244177][ T30] audit: type=1400 audit(2000000012.690:239): avc: denied { open } for pid=6413 comm="syz.3.125" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 110.268731][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.392543][ T30] audit: type=1400 audit(2000000012.740:240): avc: denied { ioctl } for pid=6413 comm="syz.3.125" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 111.303065][ T30] audit: type=1400 audit(2000000014.010:241): avc: denied { read write } for pid=6420 comm="syz.4.127" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 111.558592][ T30] audit: type=1400 audit(2000000014.010:242): avc: denied { open } for pid=6420 comm="syz.4.127" path="/20/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 111.858857][ T5900] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.961041][ T5905] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 112.121084][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 112.128056][ T5900] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 112.147099][ T5900] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.179654][ T5900] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.197584][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.200056][ T5900] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.232540][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.297635][ T5900] usb 4-1: Product: syz [ 112.321145][ T5905] usb 5-1: config 0 has no interfaces? [ 112.323174][ T5900] usb 4-1: Manufacturer: syz [ 112.341228][ T5905] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 112.350377][ T5900] usb 4-1: SerialNumber: syz [ 112.350392][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.372250][ T5905] usb 5-1: config 0 descriptor?? [ 113.200284][ T30] audit: type=1400 audit(2000000016.040:243): avc: denied { ioctl } for pid=6431 comm="syz.3.129" path="socket:[10727]" dev="sockfs" ino=10727 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.263451][ T30] audit: type=1400 audit(2000000016.110:244): avc: denied { mounton } for pid=6431 comm="syz.3.129" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 113.287818][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.297231][ T5900] usb 4-1: 0:2 : does not exist [ 113.855244][ T5859] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.907970][ T30] audit: type=1800 audit(2000000016.750:245): pid=6432 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.129" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 113.949367][ T30] audit: type=1400 audit(2000000016.790:246): avc: denied { read write } for pid=6456 comm="syz.0.134" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 113.962284][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'. [ 113.973991][ T30] audit: type=1400 audit(2000000016.790:247): avc: denied { open } for pid=6456 comm="syz.0.134" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 114.030273][ T6457] block nbd0: Unsupported socket: shutdown callout must be supported. [ 114.071174][ T5859] usb 3-1: Using ep0 maxpacket: 16 [ 114.081960][ T5859] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 114.096777][ T5859] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 114.110683][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.134313][ T5859] usb 3-1: Product: syz [ 114.138598][ T5859] usb 3-1: Manufacturer: syz [ 114.149871][ T5859] usb 3-1: SerialNumber: syz [ 114.385114][ T5859] usb 3-1: config 0 descriptor?? [ 114.400158][ T5859] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 114.421742][ T5859] usb 3-1: Detected FT232R [ 114.602460][ T5859] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 114.637405][ T5873] usb 5-1: USB disconnect, device number 2 [ 114.706166][ T5859] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 114.722332][ T5859] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 114.738648][ T5859] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 114.768754][ T5859] usb 3-1: USB disconnect, device number 2 [ 114.794278][ T5859] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 114.820445][ T5859] ftdi_sio 3-1:0.0: device disconnected [ 114.827840][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.014988][ T24] usb 1-1: config 0 has no interfaces? [ 115.024112][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.034532][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.048894][ T24] usb 1-1: config 0 descriptor?? [ 115.626078][ T5900] usb 4-1: 1:0: cannot get min/max values for control 2 (id 1) [ 115.783655][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 115.783669][ T30] audit: type=1400 audit(2000000018.630:252): avc: denied { mounton } for pid=6476 comm="syz.3.141" path="/30/file0" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.878137][ T5900] usb 4-1: USB disconnect, device number 4 [ 115.950623][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.418692][ T30] audit: type=1400 audit(2000000020.250:253): avc: denied { setopt } for pid=6492 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 117.720700][ T6499] fuse: Bad value for 'user_id' [ 117.725643][ T6499] fuse: Bad value for 'user_id' [ 117.818886][ T6501] bridge1: entered promiscuous mode [ 117.824265][ T6501] bridge1: entered allmulticast mode [ 117.833537][ T6501] team0: Port device bridge1 added [ 118.431635][ T30] audit: type=1400 audit(2000000021.283:254): avc: denied { write } for pid=6502 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.875530][ T5873] usb 1-1: USB disconnect, device number 2 [ 119.032333][ T30] audit: type=1400 audit(2000000021.883:255): avc: denied { create } for pid=6516 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 119.512902][ T30] audit: type=1400 audit(2000000022.343:256): avc: denied { setopt } for pid=6516 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 119.585506][ T30] audit: type=1400 audit(2000000022.423:257): avc: denied { write } for pid=6516 comm="syz.4.152" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 120.663253][ T30] audit: type=1400 audit(2000000023.513:258): avc: denied { create } for pid=6531 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.955051][ T6536] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 120.961853][ T6536] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 121.054052][ T6542] fuse: Bad value for 'user_id' [ 121.058938][ T6542] fuse: Bad value for 'user_id' [ 121.083071][ T6536] vhci_hcd vhci_hcd.0: Device attached [ 121.462194][ T5829] vhci_hcd: vhci_device speed not set [ 121.490887][ T6550] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 121.498699][ T6550] audit: out of memory in audit_log_start [ 121.531772][ T30] audit: type=1400 audit(2000000024.363:259): avc: denied { write } for pid=6545 comm="syz.3.160" path="socket:[10883]" dev="sockfs" ino=10883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.771057][ T5829] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 121.818172][ T30] audit: type=1400 audit(2000000024.373:260): avc: denied { create } for pid=6545 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 121.910924][ T6538] vhci_hcd: connection reset by peer [ 121.937585][ T13] vhci_hcd: stop threads [ 121.945035][ T13] vhci_hcd: release socket [ 121.957868][ T13] vhci_hcd: disconnect device [ 122.796257][ T5873] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.000752][ T30] audit: type=1400 audit(2000000025.843:261): avc: denied { shutdown } for pid=6564 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.011679][ T6566] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.121159][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 123.373344][ T30] audit: type=1400 audit(2000000026.213:262): avc: denied { ioctl } for pid=6563 comm="syz.3.165" path="socket:[9976]" dev="sockfs" ino=9976 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.398111][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.443764][ T30] audit: type=1400 audit(2000000026.273:263): avc: denied { setopt } for pid=6554 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.463487][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.506009][ T30] audit: type=1400 audit(2000000026.353:264): avc: denied { read } for pid=6570 comm="syz.3.168" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 123.538584][ T30] audit: type=1400 audit(2000000026.373:265): avc: denied { open } for pid=6570 comm="syz.3.168" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 123.561599][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.593382][ T30] audit: type=1400 audit(2000000026.383:266): avc: denied { create } for pid=6568 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 125.049983][ T5873] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.072955][ T5873] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 125.091289][ T5873] usb 3-1: can't read configurations, error -71 [ 125.423425][ T6602] netlink: 'syz.3.174': attribute type 2 has an invalid length. [ 126.529821][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 126.529836][ T30] audit: type=1400 audit(2000000029.373:273): avc: denied { add_name } for pid=6577 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.645132][ T30] audit: type=1400 audit(2000000029.403:274): avc: denied { create } for pid=6577 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 126.671160][ T30] audit: type=1400 audit(2000000029.403:275): avc: denied { write } for pid=6577 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=2627 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 126.697213][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.986328][ T5829] vhci_hcd: vhci_device speed not set [ 127.109069][ T30] audit: type=1400 audit(2000000029.403:276): avc: denied { append } for pid=6577 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2627 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.133287][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.595817][ T30] audit: type=1400 audit(2000000029.923:277): avc: denied { mount } for pid=6623 comm="syz.2.180" name="/" dev="autofs" ino=11061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 127.658678][ T30] audit: type=1400 audit(2000000029.933:278): avc: denied { read write } for pid=6623 comm="syz.2.180" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 127.682162][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.312229][ T30] audit: type=1400 audit(2000000029.933:279): avc: denied { open } for pid=6623 comm="syz.2.180" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 128.480655][ T30] audit: type=1400 audit(2000000029.933:280): avc: denied { ioctl } for pid=6623 comm="syz.2.180" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 128.730228][ T30] audit: type=1400 audit(2000000029.953:281): avc: denied { remove_name } for pid=6625 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2627 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.324126][ T30] audit: type=1400 audit(2000000029.953:282): avc: denied { unlink } for pid=6625 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2627 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.463863][ T6676] tipc: Enabling of bearer rejected, failed to enable media [ 132.354744][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.361190][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.016448][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 134.016467][ T30] audit: type=1400 audit(2000000036.863:291): avc: denied { write } for pid=6708 comm="syz.0.196" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.382527][ T5873] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.664703][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.759813][ T5873] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 134.795094][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.935288][ T5873] usb 1-1: config 0 descriptor?? [ 134.981514][ T30] audit: type=1400 audit(2000000037.823:292): avc: denied { bind } for pid=6706 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 135.759211][ T6736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.789893][ T5873] itetech 0003:258A:6A88.0001: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.0-1/input0 [ 135.807051][ T6736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.945444][ T5873] usb 1-1: USB disconnect, device number 3 [ 136.138296][ T6743] tipc: Enabled bearer , priority 0 [ 136.189580][ T6743] syzkaller0: MTU too low for tipc bearer [ 136.207162][ T6743] tipc: Disabling bearer [ 136.237071][ T30] audit: type=1400 audit(2000000039.083:293): avc: denied { create } for pid=6742 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 136.270735][ T30] audit: type=1400 audit(2000000039.113:294): avc: denied { ioctl } for pid=6742 comm="syz.3.203" path="socket:[11381]" dev="sockfs" ino=11381 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.511037][ T5886] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.671264][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 136.679548][ T6756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.204'. [ 136.697325][ T5886] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 136.708589][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.739981][ T5886] usb 4-1: Product: syz [ 136.760299][ T5886] usb 4-1: Manufacturer: syz [ 136.778822][ T5886] usb 4-1: SerialNumber: syz [ 137.073771][ T5946] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.400073][ T5886] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 137.519624][ T5886] mxuport 4-1:254.0: probe with driver mxuport failed with error -5 [ 137.706379][ T5886] usb 4-1: USB disconnect, device number 5 [ 137.863222][ T6768] syz.1.207: attempt to access beyond end of device [ 137.863222][ T6768] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 137.911107][ T5946] usb 1-1: Using ep0 maxpacket: 16 [ 137.928966][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.939998][ T30] audit: type=1400 audit(2000000040.763:295): avc: denied { read write } for pid=6772 comm="syz.2.208" name="mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 137.940050][ T30] audit: type=1400 audit(2000000040.763:296): avc: denied { open } for pid=6772 comm="syz.2.208" path="/dev/input/mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 137.987860][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.995592][ T6768] qnx6: unable to read the first superblock [ 138.029304][ T6774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.031222][ T6768] syz.1.207: attempt to access beyond end of device [ 138.031222][ T6768] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 138.061130][ T6768] qnx6: unable to read the first superblock [ 138.074779][ T6768] qnx6: unable to read the first superblock [ 138.136878][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.161118][ T5946] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.174435][ T5946] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.183543][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.194090][ T5946] usb 1-1: config 0 descriptor?? [ 138.634749][ T30] audit: type=1400 audit(2000000041.483:297): avc: denied { getopt } for pid=6759 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 138.637689][ T5946] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 138.721653][ T5946] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 138.745034][ T5946] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 138.918155][ T5946] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 138.927850][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 138.997453][ T5946] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 139.004943][ T5829] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 139.054482][ T5946] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 139.116060][ T5946] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 139.161155][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 139.185482][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.208259][ T5946] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 139.240368][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 139.256761][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.274084][ T5946] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 139.312234][ T5829] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 139.322565][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.330701][ T5946] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 139.379911][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.484703][ T9] usb 4-1: config 0 descriptor?? [ 139.525965][ T5946] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 139.614937][ T5829] usb 5-1: config 0 descriptor?? [ 139.642781][ T5946] microsoft 0003:045E:07DA.0002: no inputs found [ 139.694082][ T5946] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 139.777701][ T5946] usb 1-1: USB disconnect, device number 4 [ 139.799476][ T30] audit: type=1400 audit(2000000042.643:298): avc: denied { watch watch_reads } for pid=6787 comm="syz.3.212" path="pipe:[12359]" dev="pipefs" ino=12359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 139.849946][ T6789] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 139.868785][ T6815] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 140.154866][ T5829] nintendo 0003:057E:200E.0003: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.4-1/input0 [ 140.312918][ T6818] FAULT_INJECTION: forcing a failure. [ 140.312918][ T6818] name failslab, interval 1, probability 0, space 0, times 0 [ 140.350355][ T6818] CPU: 1 UID: 0 PID: 6818 Comm: syz.1.219 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 140.350381][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.350391][ T6818] Call Trace: [ 140.350397][ T6818] [ 140.350404][ T6818] dump_stack_lvl+0x16c/0x1f0 [ 140.350434][ T6818] should_fail_ex+0x512/0x640 [ 140.350460][ T6818] ? fs_reclaim_acquire+0xae/0x150 [ 140.350486][ T6818] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 140.350508][ T6818] should_failslab+0xc2/0x120 [ 140.350528][ T6818] __kmalloc_noprof+0xd2/0x510 [ 140.350550][ T6818] tomoyo_realpath_from_path+0xc2/0x6e0 [ 140.350575][ T6818] ? tomoyo_profile+0x47/0x60 [ 140.350627][ T6818] tomoyo_path_number_perm+0x245/0x580 [ 140.350644][ T6818] ? tomoyo_path_number_perm+0x237/0x580 [ 140.350665][ T6818] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 140.350684][ T6818] ? find_held_lock+0x2b/0x80 [ 140.350727][ T6818] ? find_held_lock+0x2b/0x80 [ 140.350747][ T6818] ? hook_file_ioctl_common+0x145/0x410 [ 140.350776][ T6818] ? __fget_files+0x20e/0x3c0 [ 140.350803][ T6818] security_file_ioctl+0x9b/0x240 [ 140.350826][ T6818] __x64_sys_ioctl+0xb7/0x210 [ 140.350854][ T6818] do_syscall_64+0xcd/0x4c0 [ 140.350881][ T6818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.350899][ T6818] RIP: 0033:0x7f3330d8eb69 [ 140.350913][ T6818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.350928][ T6818] RSP: 002b:00007f3331bde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.350944][ T6818] RAX: ffffffffffffffda RBX: 00007f3330fb5fa0 RCX: 00007f3330d8eb69 [ 140.350954][ T6818] RDX: 0000200000000040 RSI: 00000000c008561c RDI: 0000000000000003 [ 140.350964][ T6818] RBP: 00007f3331bde090 R08: 0000000000000000 R09: 0000000000000000 [ 140.350974][ T6818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.350983][ T6818] R13: 0000000000000000 R14: 00007f3330fb5fa0 R15: 00007fff6b335a08 [ 140.351005][ T6818] [ 140.582320][ T30] audit: type=1400 audit(2000000043.193:299): avc: denied { accept } for pid=6787 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.601730][ T30] audit: type=1400 audit(2000000043.193:300): avc: denied { listen } for pid=6787 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.621001][ T30] audit: type=1400 audit(2000000043.193:301): avc: denied { connect } for pid=6787 comm="syz.3.212" lport=41315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.641412][ T30] audit: type=1400 audit(2000000043.193:302): avc: denied { name_connect } for pid=6787 comm="syz.3.212" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 140.774056][ T6818] ERROR: Out of memory at tomoyo_realpath_from_path. [ 140.853606][ T5829] nintendo 0003:057E:200E.0003: Failed charging grip handshake [ 140.876911][ T5829] nintendo 0003:057E:200E.0003: Failed to initialize controller; ret=-110 [ 140.905640][ T5829] nintendo 0003:057E:200E.0003: probe - fail = -110 [ 140.921112][ T5829] nintendo 0003:057E:200E.0003: probe with driver nintendo failed with error -110 [ 141.245529][ T30] audit: type=1400 audit(2000000044.093:303): avc: denied { read } for pid=6838 comm="syz.2.220" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 141.427742][ T30] audit: type=1400 audit(2000000044.093:304): avc: denied { open } for pid=6838 comm="syz.2.220" path="/dev/sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 141.949331][ T5829] usb 5-1: USB disconnect, device number 3 [ 142.050754][ T10] usb 4-1: USB disconnect, device number 6 [ 142.300542][ T6853] syz.4.222: attempt to access beyond end of device [ 142.300542][ T6853] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 142.443644][ T6853] syz.4.222: attempt to access beyond end of device [ 142.443644][ T6853] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 142.502356][ T6853] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 142.552214][ T6853] syz.4.222: attempt to access beyond end of device [ 142.552214][ T6853] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 142.609171][ T6853] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 142.633884][ T6853] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 142.645345][ T6853] UDF-fs: Scanning with blocksize 1024 failed [ 142.654899][ T6849] nbd4: detected capacity change from 0 to 10 [ 142.663243][ T6853] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 142.676708][ T6066] block nbd4: Send control failed (result -89) [ 142.684156][ T6066] block nbd4: Request send failed, requeueing [ 142.693196][ T5825] block nbd4: Receive control failed (result -32) [ 142.694373][ T55] block nbd4: Dead connection, failed to find a fallback [ 142.707644][ T55] block nbd4: shutting down sockets [ 142.708451][ T6066] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.713160][ T55] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.724783][ T6066] Buffer I/O error on dev nbd4, logical block 1, async page read [ 142.732039][ T55] Buffer I/O error on dev nbd4, logical block 0, async page read [ 142.748360][ T6853] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.759742][ T6066] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.768881][ T6066] Buffer I/O error on dev nbd4, logical block 0, async page read [ 142.776791][ T6066] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.785891][ T6066] Buffer I/O error on dev nbd4, logical block 1, async page read [ 142.794789][ T6853] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=1, location=1 [ 142.794918][ T6066] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.804212][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 142.813761][ T6066] Buffer I/O error on dev nbd4, logical block 0, async page read [ 142.830339][ T6066] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.839754][ T6066] Buffer I/O error on dev nbd4, logical block 1, async page read [ 142.848073][ T6066] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.858402][ T6853] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0 [ 142.858575][ T6066] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.879528][ T6853] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 142.885739][ T6859] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.225'. [ 142.889156][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 142.905906][ T6066] Buffer I/O error on dev nbd4, logical block 0, async page read [ 142.910787][ T6853] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 142.914203][ T6066] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.927665][ T6853] UDF-fs: Scanning with blocksize 2048 failed [ 142.938881][ T6066] Buffer I/O error on dev nbd4, logical block 1, async page read [ 142.950162][ T6853] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 142.953546][ T6066] Buffer I/O error on dev nbd4, logical block 0, async page read [ 143.010660][ T6853] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0 [ 143.020201][ T6066] Buffer I/O error on dev nbd4, logical block 0, async page read [ 143.029303][ T6066] ldm_validate_partition_table(): Disk read failed. [ 143.036722][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 143.036762][ T6853] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 143.059503][ T6066] Dev nbd4: unable to read RDB block 0 [ 143.112434][ T24] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 143.123252][ T6066] nbd4: unable to read partition table [ 143.131297][ T6066] nbd4: partition table beyond EOD, truncated [ 143.136933][ T24] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1023 [ 143.142964][ T6853] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 143.249926][ T6066] ldm_validate_partition_table(): Disk read failed. [ 143.257388][ T6066] Dev nbd4: unable to read RDB block 0 [ 143.261543][ T6853] UDF-fs: Scanning with blocksize 4096 failed [ 143.262932][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 143.274856][ T6066] nbd4: unable to read partition table [ 143.281676][ T6066] nbd4: partition table beyond EOD, truncated [ 143.287897][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.329898][ T6853] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 143.737258][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 143.766288][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.775469][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 143.785072][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.793997][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.804646][ T10] usb 3-1: config 0 descriptor?? [ 143.823857][ T24] usb 2-1: Product: 귱ﺨ佡뱹캃妼뒮ㅏ앨⬱আ佼扦뜳ḑ쵎큻汨弻癓ᰂ빊敹墠῎蓱辄썰梤病䕘詯햜⻩㈺銒㕡웫楛꡸蛨롑钠㟅쵎Ꮃ [ 143.885064][ T24] usb 2-1: Manufacturer: 䢓껫肷熂䏎ᴓ翎嬚ᫍ뷅봹ᖙ숰呧絛ꔇ짶ቖ喬㞑䅩味ⱛ됑啇㲌癬煭ꇪ整⾯Ếꈀࡺ鵆䂢Ꮬ䵍鐃‎ៅ譾㧄惩㱙Ἱꉧრ㼺藖癯엫 [ 143.906121][ T24] usb 2-1: SerialNumber: 坩糊䲑ꌐۼ癌菿龼篅脋䊈쪈强㚂犓읆ﳮ [ 143.967116][ T6856] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 143.974540][ T6856] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 144.417831][ T30] audit: type=1400 audit(2000000047.263:305): avc: denied { listen } for pid=6866 comm="syz.4.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 144.514977][ T30] audit: type=1400 audit(2000000047.333:306): avc: denied { read } for pid=6851 comm="syz.2.224" lport=45035 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 144.847611][ T30] audit: type=1400 audit(2000000047.483:307): avc: denied { setopt } for pid=6851 comm="syz.2.224" lport=45035 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 145.234546][ T24] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 145.324949][ T24] usb 2-1: USB disconnect, device number 5 [ 145.380136][ T6887] FAULT_INJECTION: forcing a failure. [ 145.380136][ T6887] name failslab, interval 1, probability 0, space 0, times 0 [ 145.421238][ T6887] CPU: 0 UID: 0 PID: 6887 Comm: syz.1.232 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 145.421265][ T6887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.421274][ T6887] Call Trace: [ 145.421280][ T6887] [ 145.421287][ T6887] dump_stack_lvl+0x16c/0x1f0 [ 145.421314][ T6887] should_fail_ex+0x512/0x640 [ 145.421339][ T6887] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 145.421370][ T6887] should_failslab+0xc2/0x120 [ 145.421389][ T6887] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 145.421418][ T6887] ? __alloc_skb+0x2b2/0x380 [ 145.421442][ T6887] __alloc_skb+0x2b2/0x380 [ 145.421462][ T6887] ? __pfx___alloc_skb+0x10/0x10 [ 145.421486][ T6887] ? __pfx_nf_tables_abort+0x10/0x10 [ 145.421514][ T6887] netlink_ack+0x15d/0xb80 [ 145.421538][ T6887] ? kasan_save_track+0x14/0x30 [ 145.421560][ T6887] nfnetlink_rcv_batch+0x1423/0x2330 [ 145.421596][ T6887] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 145.421630][ T6887] ? avc_has_perm_noaudit+0x149/0x3b0 [ 145.421679][ T6887] ? __nla_parse+0x40/0x60 [ 145.421701][ T6887] nfnetlink_rcv+0x3c1/0x430 [ 145.421718][ T6887] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 145.421743][ T6887] netlink_unicast+0x5a7/0x870 [ 145.421770][ T6887] ? __pfx_netlink_unicast+0x10/0x10 [ 145.421794][ T6887] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 145.421825][ T6887] netlink_sendmsg+0x8d1/0xdd0 [ 145.421853][ T6887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.421885][ T6887] ____sys_sendmsg+0xa95/0xc70 [ 145.421900][ T6887] ? copy_msghdr_from_user+0x10a/0x160 [ 145.421915][ T6887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.421932][ T6887] ___sys_sendmsg+0x134/0x1d0 [ 145.421947][ T6887] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.421960][ T6887] ? __lock_acquire+0x622/0x1c90 [ 145.421988][ T6887] ? __mutex_unlock_slowpath+0x140/0x800 [ 145.422008][ T6887] __sys_sendmsg+0x16d/0x220 [ 145.422022][ T6887] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.422045][ T6887] do_syscall_64+0xcd/0x4c0 [ 145.422061][ T6887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.422074][ T6887] RIP: 0033:0x7f3330d8eb69 [ 145.422083][ T6887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.422093][ T6887] RSP: 002b:00007f3331bde038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.422104][ T6887] RAX: ffffffffffffffda RBX: 00007f3330fb5fa0 RCX: 00007f3330d8eb69 [ 145.422110][ T6887] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 145.422116][ T6887] RBP: 00007f3331bde090 R08: 0000000000000000 R09: 0000000000000000 [ 145.422122][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.422128][ T6887] R13: 0000000000000000 R14: 00007f3330fb5fa0 R15: 00007fff6b335a08 [ 145.422141][ T6887] [ 145.943526][ T10] usb 3-1: USB disconnect, device number 5 [ 147.797529][ T30] audit: type=1326 audit(2000000050.643:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.0.239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f637e78eb69 code=0x0 [ 147.867393][ T30] audit: type=1400 audit(2000000050.713:309): avc: denied { setopt } for pid=6912 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.905341][ T6914] tipc: Started in network mode [ 147.912214][ T6914] tipc: Node identity 4, cluster identity 4711 [ 147.918468][ T6914] tipc: Node number set to 4 [ 147.953159][ T30] audit: type=1400 audit(2000000050.733:310): avc: denied { bind } for pid=6912 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 148.311567][ T6919] FAULT_INJECTION: forcing a failure. [ 148.311567][ T6919] name failslab, interval 1, probability 0, space 0, times 0 [ 148.326013][ T6908] syz.1.234 (6908): drop_caches: 2 [ 148.349711][ T6919] CPU: 0 UID: 0 PID: 6919 Comm: syz.4.241 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 148.349733][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.349740][ T6919] Call Trace: [ 148.349744][ T6919] [ 148.349748][ T6919] dump_stack_lvl+0x16c/0x1f0 [ 148.349768][ T6919] should_fail_ex+0x512/0x640 [ 148.349785][ T6919] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 148.349804][ T6919] should_failslab+0xc2/0x120 [ 148.349817][ T6919] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 148.349835][ T6919] ? __alloc_skb+0x2b2/0x380 [ 148.349853][ T6919] __alloc_skb+0x2b2/0x380 [ 148.349866][ T6919] ? __pfx___alloc_skb+0x10/0x10 [ 148.349880][ T6919] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 148.349899][ T6919] netlink_alloc_large_skb+0x69/0x130 [ 148.349915][ T6919] netlink_sendmsg+0x6a1/0xdd0 [ 148.349933][ T6919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.349953][ T6919] ____sys_sendmsg+0xa95/0xc70 [ 148.349964][ T6919] ? copy_msghdr_from_user+0x10a/0x160 [ 148.349978][ T6919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.349994][ T6919] ___sys_sendmsg+0x134/0x1d0 [ 148.350009][ T6919] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.350022][ T6919] ? __lock_acquire+0x622/0x1c90 [ 148.350050][ T6919] ? __mutex_unlock_slowpath+0x140/0x800 [ 148.350071][ T6919] __sys_sendmsg+0x16d/0x220 [ 148.350085][ T6919] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.350108][ T6919] do_syscall_64+0xcd/0x4c0 [ 148.350124][ T6919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.350135][ T6919] RIP: 0033:0x7f47f418eb69 [ 148.350144][ T6919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.350154][ T6919] RSP: 002b:00007f47f5022038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.350164][ T6919] RAX: ffffffffffffffda RBX: 00007f47f43b5fa0 RCX: 00007f47f418eb69 [ 148.350171][ T6919] RDX: 0000000000044040 RSI: 0000200000000580 RDI: 0000000000000004 [ 148.350177][ T6919] RBP: 00007f47f5022090 R08: 0000000000000000 R09: 0000000000000000 [ 148.350183][ T6919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.350189][ T6919] R13: 0000000000000000 R14: 00007f47f43b5fa0 R15: 00007fff2e14dff8 [ 148.350202][ T6919] [ 148.849725][ T30] audit: type=1400 audit(2000000051.603:311): avc: denied { watch } for pid=6920 comm="syz.0.242" path="/46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 148.894997][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.347045][ T30] audit: type=1400 audit(2000000051.603:312): avc: denied { watch_sb watch_reads } for pid=6920 comm="syz.0.242" path="/46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 152.030612][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 152.047172][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.246'. [ 152.056028][ T6934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.063429][ T6934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.151645][ T6934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.159050][ T6934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.499481][ T6971] syz.4.256 (6971): drop_caches: 2 [ 153.649520][ T6971] syz.4.256 (6971): drop_caches: 2 [ 153.946420][ T6968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.257'. [ 154.024247][ T30] audit: type=1400 audit(2000000056.873:313): avc: denied { create } for pid=6967 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 154.189457][ T6975] block device autoloading is deprecated and will be removed. [ 154.207387][ T6975] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 154.214042][ T6975] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 154.228816][ T6975] vhci_hcd vhci_hcd.0: Device attached [ 154.343076][ T6984] vhci_hcd: connection closed [ 154.345776][ T3872] vhci_hcd: stop threads [ 154.356294][ T3872] vhci_hcd: release socket [ 154.361933][ T3872] vhci_hcd: disconnect device [ 154.401833][ T9] vhci_hcd: vhci_device speed not set [ 154.425616][ T6986] loop3: detected capacity change from 0 to 1 [ 154.436556][ T6066] Dev loop3: unable to read RDB block 1 [ 154.442403][ T6988] Bluetooth: MGMT ver 1.23 [ 154.456303][ T6066] loop3: unable to read partition table [ 154.462332][ T6066] loop3: partition table beyond EOD, truncated [ 154.488897][ T30] audit: type=1400 audit(2000000057.333:314): avc: denied { ioctl } for pid=6981 comm="syz.2.260" path="socket:[11807]" dev="sockfs" ino=11807 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.521590][ T30] audit: type=1400 audit(2000000057.363:315): avc: denied { bind } for pid=6981 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.571623][ T6986] Dev loop3: unable to read RDB block 1 [ 154.577834][ T6986] loop3: unable to read partition table [ 154.583764][ T6986] loop3: partition table beyond EOD, truncated [ 154.589993][ T6986] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 156.082210][ T30] audit: type=1400 audit(2000000058.933:316): avc: denied { connect } for pid=6999 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 156.136517][ T7005] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 156.143053][ T7005] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 156.145881][ T7000] IPv6: sit1: Disabled Multicast RS [ 156.174926][ T7005] vhci_hcd vhci_hcd.0: Device attached [ 156.244282][ T30] audit: type=1400 audit(2000000059.093:317): avc: denied { bind } for pid=7002 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.298270][ T7000] sit1: entered allmulticast mode [ 156.423140][ T5859] vhci_hcd: vhci_device speed not set [ 156.447292][ T30] audit: type=1400 audit(2000000059.093:318): avc: denied { write } for pid=7002 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.466721][ T7011] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 156.473318][ T7011] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.977901][ T5859] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 156.985613][ T30] audit: type=1400 audit(2000000059.163:319): avc: denied { lock } for pid=6995 comm="syz.1.263" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 157.009595][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.072996][ T7011] vhci_hcd vhci_hcd.0: Device attached [ 157.096480][ T7007] vhci_hcd: connection reset by peer [ 157.104311][ T7012] vhci_hcd: connection closed [ 157.122046][ T30] audit: type=1400 audit(2000000059.403:320): avc: denied { create } for pid=7004 comm="syz.3.266" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.130976][ T3872] vhci_hcd: stop threads [ 157.149640][ T30] audit: type=1400 audit(2000000059.953:321): avc: denied { unlink } for pid=5818 comm="syz-executor" name="file0" dev="tmpfs" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.174376][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.218605][ T7026] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.268'. [ 157.259948][ T3872] vhci_hcd: release socket [ 157.303641][ T3872] vhci_hcd: disconnect device [ 157.333618][ T3872] vhci_hcd: stop threads [ 157.338591][ T3872] vhci_hcd: release socket [ 157.626448][ T3872] vhci_hcd: disconnect device [ 157.917094][ T30] audit: type=1400 audit(2000000060.763:322): avc: denied { read } for pid=7033 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.644913][ T7060] FAULT_INJECTION: forcing a failure. [ 159.644913][ T7060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.889602][ T7060] CPU: 1 UID: 0 PID: 7060 Comm: syz.2.280 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 159.889629][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.889640][ T7060] Call Trace: [ 159.889645][ T7060] [ 159.889653][ T7060] dump_stack_lvl+0x16c/0x1f0 [ 159.889683][ T7060] should_fail_ex+0x512/0x640 [ 159.889713][ T7060] _copy_from_user+0x2e/0xd0 [ 159.889733][ T7060] tty_ioctl+0xca0/0x1640 [ 159.889759][ T7060] ? __pfx_tty_ioctl+0x10/0x10 [ 159.889784][ T7060] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 159.889810][ T7060] ? rcu_is_watching+0x12/0xc0 [ 159.889831][ T7060] ? irqentry_exit+0x3b/0x90 [ 159.889854][ T7060] ? lockdep_hardirqs_on+0x7c/0x110 [ 159.889884][ T7060] ? security_file_ioctl+0xd1/0x240 [ 159.889911][ T7060] ? bpf_lsm_file_ioctl+0x4/0x10 [ 159.889934][ T7060] ? __pfx_tty_ioctl+0x10/0x10 [ 159.889959][ T7060] __x64_sys_ioctl+0x18b/0x210 [ 159.889988][ T7060] do_syscall_64+0xcd/0x4c0 [ 159.890014][ T7060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.890033][ T7060] RIP: 0033:0x7f3859b8eb69 [ 159.890047][ T7060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.890063][ T7060] RSP: 002b:00007f385a9b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.890080][ T7060] RAX: ffffffffffffffda RBX: 00007f3859db5fa0 RCX: 00007f3859b8eb69 [ 159.890092][ T7060] RDX: 0000200000000000 RSI: 0000000000005414 RDI: 0000000000000003 [ 159.890102][ T7060] RBP: 00007f385a9b8090 R08: 0000000000000000 R09: 0000000000000000 [ 159.890112][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.890122][ T7060] R13: 0000000000000000 R14: 00007f3859db5fa0 R15: 00007ffd3f4aa2b8 [ 159.890146][ T7060] [ 160.067622][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.608433][ T7075] netlink: 'syz.2.283': attribute type 10 has an invalid length. [ 160.641922][ T7075] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.679102][ T7075] bond0: (slave team0): Enslaving as an active interface with an up link [ 160.754141][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 160.754172][ T30] audit: type=1400 audit(2000000063.603:335): avc: denied { bind } for pid=7072 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 160.803458][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 160.876082][ T30] audit: type=1400 audit(2000000063.723:336): avc: denied { watch watch_reads } for pid=7077 comm="syz.1.284" path="/49" dev="tmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 161.066677][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 161.082398][ T9] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 161.120139][ T9] usb 1-1: config 0 has no interface number 0 [ 161.130248][ T9] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.250361][ T9] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 161.433788][ T7086] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 161.442835][ T9] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 161.926590][ T9] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 161.936813][ T9] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 161.948461][ T9] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 161.960403][ T7086] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 161.969514][ T9] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 161.981861][ T7086] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 162.002322][ T9] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29793, setting to 1024 [ 162.014444][ T7086] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 162.025922][ T9] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 162.050294][ T9] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.073686][ T30] audit: type=1400 audit(2000000064.883:337): avc: denied { write } for pid=7082 comm="syz.3.287" name="file0" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 162.126859][ T30] audit: type=1400 audit(2000000064.883:338): avc: denied { open } for pid=7082 comm="syz.3.287" path="/69/file0" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 162.150973][ T9] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 162.160017][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.171001][ T9] usb 1-1: Product: syz [ 162.175172][ T9] usb 1-1: Manufacturer: syz [ 162.179933][ T30] audit: type=1400 audit(2000000064.943:339): avc: denied { read } for pid=7082 comm="syz.3.287" name="file0" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 162.206890][ T9] usb 1-1: SerialNumber: syz [ 162.214915][ T9] usb 1-1: config 0 descriptor?? [ 162.215658][ T5859] vhci_hcd: vhci_device speed not set [ 162.253425][ T5946] IPVS: starting estimator thread 0... [ 162.301773][ T30] audit: type=1400 audit(2000000064.953:340): avc: denied { map } for pid=7082 comm="syz.3.287" path="/69/file0" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 162.329444][ T7068] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 162.393600][ T7086] bridge0: entered promiscuous mode [ 162.399542][ T7086] macsec1: entered promiscuous mode [ 162.412776][ T7086] bridge0: port 3(macsec1) entered blocking state [ 162.428913][ T7086] bridge0: port 3(macsec1) entered disabled state [ 162.437563][ T7086] macsec1: entered allmulticast mode [ 162.442996][ T7086] bridge0: entered allmulticast mode [ 162.466709][ T7068] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 162.502757][ T7095] IPVS: using max 46 ests per chain, 110400 per kthread [ 162.753691][ T7086] macsec1: left allmulticast mode [ 162.758750][ T7086] bridge0: left allmulticast mode [ 162.765059][ T9] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 162.784261][ T9] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 162.822942][ T7086] bridge0: left promiscuous mode [ 162.842872][ T9] scsi host1: microtekX6 [ 162.867288][ T9] usb 1-1: USB disconnect, device number 5 [ 162.895786][ T25] microtek usb (rev 0.4.3): error -19 submitting URB [ 162.941846][ T25] microtek usb (rev 0.4.3): error -19 submitting URB [ 163.011192][ T25] microtek usb (rev 0.4.3): error -19 submitting URB [ 164.159573][ T7120] FAULT_INJECTION: forcing a failure. [ 164.159573][ T7120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.160638][ T7119] netlink: 36 bytes leftover after parsing attributes in process `syz.1.295'. [ 164.218629][ T7120] CPU: 0 UID: 0 PID: 7120 Comm: syz.4.294 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 164.218657][ T7120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.218667][ T7120] Call Trace: [ 164.218675][ T7120] [ 164.218683][ T7120] dump_stack_lvl+0x16c/0x1f0 [ 164.218717][ T7120] should_fail_ex+0x512/0x640 [ 164.218751][ T7120] _copy_from_user+0x2e/0xd0 [ 164.218771][ T7120] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 164.218797][ T7120] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 164.218828][ T7120] do_ipv6_setsockopt+0x86e/0x4470 [ 164.218856][ T7120] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 164.218877][ T7120] ? avc_has_perm_noaudit+0x117/0x3b0 [ 164.218910][ T7120] ? avc_has_perm_noaudit+0x149/0x3b0 [ 164.218941][ T7120] ? avc_has_perm+0x144/0x1f0 [ 164.218969][ T7120] ? __pfx_avc_has_perm+0x10/0x10 [ 164.218998][ T7120] ? get_pid_task+0x106/0x250 [ 164.219031][ T7120] ? proc_fail_nth_write+0x9f/0x220 [ 164.219056][ T7120] ? sock_has_perm+0x259/0x2f0 [ 164.219072][ T7120] ? __pfx_sock_has_perm+0x10/0x10 [ 164.219089][ T7120] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 164.219113][ T7120] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 164.219142][ T7120] ? ipv6_setsockopt+0xcb/0x170 [ 164.219161][ T7120] ipv6_setsockopt+0xcb/0x170 [ 164.219185][ T7120] udpv6_setsockopt+0x7d/0xd0 [ 164.219213][ T7120] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 164.219248][ T7120] do_sock_setsockopt+0xf3/0x1d0 [ 164.219282][ T7120] __sys_setsockopt+0x1a0/0x230 [ 164.219311][ T7120] __x64_sys_setsockopt+0xbd/0x160 [ 164.219339][ T7120] ? do_syscall_64+0x91/0x4c0 [ 164.219367][ T7120] ? lockdep_hardirqs_on+0x7c/0x110 [ 164.219393][ T7120] do_syscall_64+0xcd/0x4c0 [ 164.219422][ T7120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.219440][ T7120] RIP: 0033:0x7f47f418eb69 [ 164.219453][ T7120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.219470][ T7120] RSP: 002b:00007f47f4fe0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 164.219487][ T7120] RAX: ffffffffffffffda RBX: 00007f47f43b6160 RCX: 00007f47f418eb69 [ 164.219498][ T7120] RDX: 000000000000004a RSI: 0000000000000029 RDI: 000000000000000a [ 164.219509][ T7120] RBP: 00007f47f4fe0090 R08: 0000000000000004 R09: 0000000000000000 [ 164.219519][ T7120] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 164.219529][ T7120] R13: 0000000000000000 R14: 00007f47f43b6160 R15: 00007fff2e14dff8 [ 164.219553][ T7120] [ 166.256003][ T30] audit: type=1400 audit(2000000069.103:341): avc: denied { create } for pid=7137 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.608245][ T7161] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 169.017634][ T7161] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 169.098517][ T30] audit: type=1400 audit(2000000071.933:342): avc: denied { append } for pid=7167 comm="syz.0.308" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.324610][ T7172] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.311'. [ 169.685136][ T7174] FAULT_INJECTION: forcing a failure. [ 169.685136][ T7174] name failslab, interval 1, probability 0, space 0, times 0 [ 169.698031][ T7174] CPU: 0 UID: 0 PID: 7174 Comm: syz.4.310 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 169.698056][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.698066][ T7174] Call Trace: [ 169.698072][ T7174] [ 169.698078][ T7174] dump_stack_lvl+0x16c/0x1f0 [ 169.698105][ T7174] should_fail_ex+0x512/0x640 [ 169.698132][ T7174] should_failslab+0xc2/0x120 [ 169.698150][ T7174] __kmalloc_cache_noprof+0x6a/0x3e0 [ 169.698175][ T7174] ? sel_netport_sid+0x632/0xbc0 [ 169.698195][ T7174] sel_netport_sid+0x632/0xbc0 [ 169.698219][ T7174] selinux_socket_connect_helper.isra.0+0x355/0x510 [ 169.698240][ T7174] ? __pfx_selinux_socket_connect_helper.isra.0+0x10/0x10 [ 169.698274][ T7174] ? do_raw_spin_lock+0x12c/0x2b0 [ 169.698297][ T7174] selinux_sctp_bind_connect+0x24b/0x2c0 [ 169.698320][ T7174] security_sctp_bind_connect+0x238/0x260 [ 169.698346][ T7174] sctp_sendmsg+0x152e/0x1e10 [ 169.698377][ T7174] ? __lock_acquire+0xb8a/0x1c90 [ 169.698405][ T7174] ? __pfx_sctp_sendmsg+0x10/0x10 [ 169.698435][ T7174] ? __pfx_sock_has_perm+0x10/0x10 [ 169.698461][ T7174] ? __import_iovec+0x1dd/0x650 [ 169.698482][ T7174] ? __pfx_sctp_sendmsg+0x10/0x10 [ 169.698514][ T7174] inet_sendmsg+0x119/0x140 [ 169.698535][ T7174] ____sys_sendmsg+0x973/0xc70 [ 169.698554][ T7174] ? copy_msghdr_from_user+0x10a/0x160 [ 169.698576][ T7174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.698599][ T7174] ? __pfx__kstrtoull+0x10/0x10 [ 169.698628][ T7174] ___sys_sendmsg+0x134/0x1d0 [ 169.698653][ T7174] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.698688][ T7174] ? find_held_lock+0x2b/0x80 [ 169.698724][ T7174] __sys_sendmmsg+0x200/0x420 [ 169.698750][ T7174] ? __pfx___sys_sendmmsg+0x10/0x10 [ 169.698782][ T7174] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.698819][ T7174] ? fput+0x70/0xf0 [ 169.698840][ T7174] ? ksys_write+0x1ac/0x250 [ 169.698857][ T7174] ? __pfx_ksys_write+0x10/0x10 [ 169.698879][ T7174] __x64_sys_sendmmsg+0x9c/0x100 [ 169.698901][ T7174] ? lockdep_hardirqs_on+0x7c/0x110 [ 169.698924][ T7174] do_syscall_64+0xcd/0x4c0 [ 169.698950][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.698968][ T7174] RIP: 0033:0x7f47f418eb69 [ 169.698983][ T7174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.698999][ T7174] RSP: 002b:00007f47f5022038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 169.699016][ T7174] RAX: ffffffffffffffda RBX: 00007f47f43b5fa0 RCX: 00007f47f418eb69 [ 169.699027][ T7174] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 169.699037][ T7174] RBP: 00007f47f5022090 R08: 0000000000000000 R09: 0000000000000000 [ 169.699046][ T7174] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000001 [ 169.699056][ T7174] R13: 0000000000000000 R14: 00007f47f43b5fa0 R15: 00007fff2e14dff8 [ 169.699078][ T7174] [ 170.117274][ T7181] fuse: Unknown parameter '0x0000000000000003' [ 171.423027][ T30] audit: type=1400 audit(2000000074.183:343): avc: denied { write } for pid=7188 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 171.729607][ T30] audit: type=1400 audit(2000000074.493:344): avc: denied { create } for pid=7200 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.735174][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 171.775436][ T30] audit: type=1400 audit(2000000074.623:345): avc: denied { bind } for pid=7200 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.806920][ T7205] openvswitch: netlink: nsh attr 1970 is out of range max 3 [ 171.869753][ T7205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.147287][ T30] audit: type=1400 audit(2000000074.623:346): avc: denied { name_bind } for pid=7200 comm="syz.2.320" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 172.535660][ T30] audit: type=1400 audit(2000000074.623:347): avc: denied { node_bind } for pid=7200 comm="syz.2.320" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 172.561067][ T30] audit: type=1400 audit(2000000074.623:348): avc: denied { ioctl } for pid=7200 comm="syz.2.320" path="socket:[13073]" dev="sockfs" ino=13073 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 173.426509][ T7222] netlink: 'syz.3.326': attribute type 2 has an invalid length. [ 175.052256][ T7240] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.330'. [ 175.775647][ T7249] netlink: 392 bytes leftover after parsing attributes in process `syz.4.333'. [ 177.840107][ T30] audit: type=1326 audit(2000000080.663:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637e78eb69 code=0x7ffc0000 [ 177.863304][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.878336][ T30] audit: type=1326 audit(2000000080.663:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f637e78eb69 code=0x7ffc0000 [ 177.901567][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.064718][ T30] audit: type=1326 audit(2000000080.663:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637e78eb69 code=0x7ffc0000 [ 178.096536][ T30] audit: type=1326 audit(2000000080.673:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f637e78eb69 code=0x7ffc0000 [ 178.194354][ T30] audit: type=1326 audit(2000000080.673:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637e78eb69 code=0x7ffc0000 [ 178.217599][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.238217][ T30] audit: type=1326 audit(2000000080.673:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f637e78eb69 code=0x7ffc0000 [ 178.298272][ T30] audit: type=1326 audit(2000000080.673:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637e78eb69 code=0x7ffc0000 [ 178.329285][ T30] audit: type=1326 audit(2000000080.673:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f637e78eb69 code=0x7ffc0000 [ 178.352428][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.360811][ T30] audit: type=1326 audit(2000000080.673:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637e78eb69 code=0x7ffc0000 [ 178.387020][ T30] audit: type=1326 audit(2000000080.673:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7266 comm="syz.0.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f637e78eb69 code=0x7ffc0000 [ 178.707244][ T7293] fuse: Unknown parameter 'use00000000000000000000' [ 179.129837][ T7298] syz.2.344 (7298): drop_caches: 2 [ 179.320345][ T5859] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 179.368757][ T7298] syz.2.344 (7298): drop_caches: 2 [ 179.692165][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.703315][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.770792][ T5859] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 179.800175][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.838871][ T5859] usb 4-1: config 0 descriptor?? [ 180.377008][ T5859] hid (null): unknown global tag 0xc [ 180.385726][ T5859] steelseries 0003:1038:12B6.0004: unknown global tag 0xc [ 180.425533][ T5859] steelseries 0003:1038:12B6.0004: item 0 0 1 12 parsing failed [ 180.454688][ T5859] steelseries 0003:1038:12B6.0004: probe with driver steelseries failed with error -22 [ 180.630662][ T92] usb 4-1: USB disconnect, device number 7 [ 182.855829][ T7326] syz.2.353 (7326): drop_caches: 2 [ 183.218300][ T7326] syz.2.353 (7326): drop_caches: 2 [ 183.931076][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 183.931092][ T30] audit: type=1400 audit(2000000086.773:370): avc: denied { listen } for pid=7337 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.035170][ T7339] NILFS (loop4): device size too small [ 184.375623][ T7336] netlink: 40 bytes leftover after parsing attributes in process `syz.3.356'. [ 184.389977][ T30] audit: type=1400 audit(2000000087.203:371): avc: denied { create } for pid=7330 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 184.535553][ T30] audit: type=1400 audit(2000000087.223:372): avc: denied { write } for pid=7330 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 185.668561][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 185.676925][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 185.686141][ T5145] Bluetooth: hci2: command 0x0406 tx timeout [ 185.694575][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 185.716233][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 185.840543][ T7356] netlink: 6 bytes leftover after parsing attributes in process `syz.4.363'. [ 185.849697][ T7356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.831033][ T92] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 187.054666][ T92] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.122612][ T92] usb 5-1: config 0 has no interfaces? [ 187.140311][ T92] usb 5-1: New USB device found, idVendor=494f, idProduct=7e69, bcdDevice=51.78 [ 187.149819][ T92] usb 5-1: New USB device strings: Mfr=123, Product=174, SerialNumber=30 [ 187.169725][ T92] usb 5-1: Product: syz [ 187.365872][ T92] usb 5-1: Manufacturer: syz [ 187.380662][ T92] usb 5-1: SerialNumber: syz [ 187.406429][ T92] usb 5-1: config 0 descriptor?? [ 190.103275][ T7404] ISOFS: Unable to identify CD-ROM format. [ 190.328848][ T9] usb 5-1: USB disconnect, device number 4 [ 192.864910][ T7429] fuse: Bad value for 'fd' [ 193.062593][ T7439] syz.3.387: attempt to access beyond end of device [ 193.062593][ T7439] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 193.152880][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 193.244076][ T7439] syz.3.387: attempt to access beyond end of device [ 193.244076][ T7439] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 193.311286][ T24] usb 5-1: device descriptor read/64, error -71 [ 193.495196][ T7439] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 193.549928][ T7442] fuse: Unknown parameter 'user_i00000000000000000000' [ 193.565380][ T7439] syz.3.387: attempt to access beyond end of device [ 193.565380][ T7439] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 193.611066][ T7439] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 193.621204][ T7439] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 193.629259][ T7439] UDF-fs: Scanning with blocksize 512 failed [ 193.678248][ T7444] syz.2.386 (7444): drop_caches: 2 [ 193.698847][ T7444] syz.2.386 (7444): drop_caches: 2 [ 193.768118][ T7439] syz.3.387: attempt to access beyond end of device [ 193.768118][ T7439] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 193.784597][ T7439] syz.3.387: attempt to access beyond end of device [ 193.784597][ T7439] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 193.848692][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.856374][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.860976][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 193.876423][ T7439] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 193.964715][ T7439] syz.3.387: attempt to access beyond end of device [ 193.964715][ T7439] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 194.001141][ T24] usb 5-1: device descriptor read/64, error -71 [ 194.089307][ T7439] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 194.112537][ T24] usb usb5-port1: attempt power cycle [ 194.144508][ T7439] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 194.223447][ T7439] UDF-fs: Scanning with blocksize 1024 failed [ 194.254378][ T7439] syz.3.387: attempt to access beyond end of device [ 194.254378][ T7439] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 194.287623][ T7439] syz.3.387: attempt to access beyond end of device [ 194.287623][ T7439] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 194.330283][ T7439] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 194.360507][ T7439] syz.3.387: attempt to access beyond end of device [ 194.360507][ T7439] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 194.411311][ T7439] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 194.454073][ T7439] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 194.461987][ T7439] UDF-fs: Scanning with blocksize 2048 failed [ 194.501406][ T7439] syz.3.387: attempt to access beyond end of device [ 194.501406][ T7439] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 194.520977][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 194.541271][ T7439] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 194.581230][ T7439] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 194.590713][ T7439] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 194.602897][ T24] usb 5-1: device descriptor read/8, error -71 [ 194.622038][ T7439] UDF-fs: Scanning with blocksize 4096 failed [ 194.628110][ T7439] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 194.709567][ T30] audit: type=1400 audit(2000000097.483:373): avc: denied { create } for pid=7453 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 194.871024][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 195.721576][ T24] usb 5-1: device descriptor read/8, error -71 [ 195.991149][ T24] usb usb5-port1: unable to enumerate USB device [ 196.041466][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 196.223089][ T9] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 196.239828][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 196.319503][ T9] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 196.330604][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.340608][ T9] usb 1-1: Product: syz [ 196.346172][ T9] usb 1-1: Manufacturer: syz [ 196.352297][ T9] usb 1-1: SerialNumber: syz [ 196.359842][ T9] usb 1-1: config 0 descriptor?? [ 196.368612][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 196.376403][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 196.390041][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 196.422684][ T9] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 196.496504][ T9] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 197.258227][ T7481] fuse: Bad value for 'fd' [ 197.526704][ T5886] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 198.221354][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 198.242577][ T5886] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 198.503047][ T5886] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.566328][ T5886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.634077][ T5886] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.643643][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.654122][ T5886] usb 4-1: Product: syz [ 198.658423][ T5886] usb 4-1: Manufacturer: syz [ 198.668227][ T5886] usb 4-1: SerialNumber: syz [ 198.690563][ T7502] bio_check_eod: 2 callbacks suppressed [ 198.690578][ T7502] syz.2.404: attempt to access beyond end of device [ 198.690578][ T7502] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 198.710286][ T7502] syz.2.404: attempt to access beyond end of device [ 198.710286][ T7502] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 198.723391][ T7502] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 198.733746][ T7502] syz.2.404: attempt to access beyond end of device [ 198.733746][ T7502] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 198.747232][ T7502] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 198.758341][ T7502] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 198.766190][ T7502] UDF-fs: Scanning with blocksize 1024 failed [ 198.773735][ T7502] syz.2.404: attempt to access beyond end of device [ 198.773735][ T7502] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 198.787602][ T7502] syz.2.404: attempt to access beyond end of device [ 198.787602][ T7502] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 198.803794][ T7502] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 198.813953][ T7502] syz.2.404: attempt to access beyond end of device [ 198.813953][ T7502] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 198.829816][ T7502] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 198.840040][ T7502] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 198.848337][ T7502] UDF-fs: Scanning with blocksize 2048 failed [ 198.855202][ T7502] syz.2.404: attempt to access beyond end of device [ 198.855202][ T7502] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 198.868480][ T7502] syz.2.404: attempt to access beyond end of device [ 198.868480][ T7502] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 198.881835][ T7502] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 198.891816][ T7502] syz.2.404: attempt to access beyond end of device [ 198.891816][ T7502] nbd2: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 198.904920][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 198.905244][ T24] usb 1-1: USB disconnect, device number 6 [ 198.936088][ T7502] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 198.948818][ T7502] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 198.957808][ T7502] UDF-fs: Scanning with blocksize 4096 failed [ 198.965155][ T7502] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 199.090989][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 199.244491][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 199.887538][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.889320][ T7498] block nbd2: shutting down sockets [ 199.903474][ T5886] usb 4-1: 0:2 : does not exist [ 199.918039][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.940794][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.958539][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.980974][ T9] usb 5-1: Product: syz [ 199.985166][ T9] usb 5-1: Manufacturer: syz [ 200.000049][ T9] usb 5-1: SerialNumber: syz [ 200.250121][ T7513] fuse: Bad value for 'fd' [ 200.368745][ T7517] bridge3: entered promiscuous mode [ 200.374069][ T7517] bridge3: entered allmulticast mode [ 200.392813][ T7517] team0: Port device bridge3 added [ 200.844738][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 200.846370][ T30] audit: type=1400 audit(2000000103.683:374): avc: denied { ioctl } for pid=7482 comm="syz.3.399" path="socket:[14732]" dev="sockfs" ino=14732 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 200.878739][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.211990][ T5886] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 201.778121][ T5886] usb 4-1: USB disconnect, device number 8 [ 201.853930][ T9] usb 5-1: 0:2 : does not exist [ 201.868603][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.991329][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.994499][ T9] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 202.121101][ T5946] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 202.229397][ T9] usb 5-1: USB disconnect, device number 9 [ 204.104266][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 204.316411][ T7551] syz.2.419: attempt to access beyond end of device [ 204.316411][ T7551] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 205.191289][ T7551] syz.2.419: attempt to access beyond end of device [ 205.191289][ T7551] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 205.213294][ T7551] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 205.225603][ T7551] syz.2.419: attempt to access beyond end of device [ 205.225603][ T7551] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 205.241029][ T7551] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 205.281155][ T7551] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 205.332915][ T7551] UDF-fs: Scanning with blocksize 1024 failed [ 205.339517][ T7551] syz.2.419: attempt to access beyond end of device [ 205.339517][ T7551] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 205.353988][ T7551] syz.2.419: attempt to access beyond end of device [ 205.353988][ T7551] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 205.367561][ T7551] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 205.377216][ T7551] syz.2.419: attempt to access beyond end of device [ 205.377216][ T7551] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 205.390236][ T7551] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 205.400120][ T7551] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 205.407821][ T7551] UDF-fs: Scanning with blocksize 2048 failed [ 205.508482][ T7551] syz.2.419: attempt to access beyond end of device [ 205.508482][ T7551] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 205.980230][ T7551] syz.2.419: attempt to access beyond end of device [ 205.980230][ T7551] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 206.050068][ T7551] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 206.090404][ T7551] syz.2.419: attempt to access beyond end of device [ 206.090404][ T7551] nbd2: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 206.361196][ T7567] fuse: Bad value for 'fd' [ 206.394535][ T7551] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 206.411723][ T7551] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 206.431257][ T7551] UDF-fs: Scanning with blocksize 4096 failed [ 206.447554][ T7551] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 207.709137][ T7589] syz.1.425 (7589): drop_caches: 2 [ 207.740177][ T7589] syz.1.425 (7589): drop_caches: 2 [ 209.174090][ T7604] fuse: Bad value for 'fd' [ 210.062839][ T7613] syz.2.436 (7613): drop_caches: 2 [ 210.128749][ T7613] syz.2.436 (7613): drop_caches: 2 [ 210.734254][ T7622] syz.0.437 (7622): drop_caches: 2 [ 210.741955][ T7622] syz.0.437 (7622): drop_caches: 2 [ 210.849069][ T7623] fuse: Bad value for 'fd' [ 212.311903][ T30] audit: type=1400 audit(2000000115.153:375): avc: denied { read } for pid=7643 comm="syz.4.447" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 212.527717][ T30] audit: type=1400 audit(2000000115.153:376): avc: denied { open } for pid=7643 comm="syz.4.447" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 213.012590][ T7660] fuse: Bad value for 'fd' [ 213.102291][ T30] audit: type=1400 audit(2000000115.913:377): avc: denied { execute } for pid=7661 comm="syz.4.451" path="/84/cpu.stat" dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 213.341390][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 213.431289][ T5900] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 213.491182][ T10] usb 5-1: device descriptor read/64, error -71 [ 213.591114][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 213.598904][ T7672] netlink: 'syz.0.454': attribute type 5 has an invalid length. [ 213.800622][ T7673] syz.3.453 (7673): drop_caches: 2 [ 213.808525][ T7673] syz.3.453 (7673): drop_caches: 2 [ 213.858831][ T7672] netlink: 'syz.0.454': attribute type 7 has an invalid length. [ 213.870430][ T30] audit: type=1400 audit(2000000116.713:378): avc: denied { ioctl } for pid=7670 comm="syz.0.454" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 213.870467][ T5900] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 213.902088][ T7677] netlink: 'syz.0.454': attribute type 5 has an invalid length. [ 213.912123][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 213.977441][ T7672] : entered promiscuous mode [ 213.984489][ T7677] netlink: 'syz.0.454': attribute type 7 has an invalid length. [ 214.054809][ T10] usb 5-1: device descriptor read/64, error -71 [ 214.097449][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.105580][ T5900] usb 3-1: Product: syz [ 214.109831][ T5900] usb 3-1: Manufacturer: syz [ 214.114865][ T5900] usb 3-1: SerialNumber: syz [ 214.162878][ T5900] usb 3-1: config 0 descriptor?? [ 214.174519][ T5900] gspca_main: se401-2.14.0 probing 047d:5003 [ 214.180701][ T10] usb usb5-port1: attempt power cycle [ 214.541121][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 214.592092][ T10] usb 5-1: device descriptor read/8, error -71 [ 214.871072][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 214.921765][ T10] usb 5-1: device descriptor read/8, error -71 [ 214.937150][ T7696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.031452][ T10] usb usb5-port1: unable to enumerate USB device [ 215.076883][ T7698] QAT: failed to copy from user cfg_data. [ 215.540134][ T5900] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 215.547924][ T30] audit: type=1400 audit(2000000117.933:379): avc: denied { write } for pid=7680 comm="syz.1.456" path="socket:[15131]" dev="sockfs" ino=15131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 215.550439][ T5900] se401 3-1:0.0: probe with driver se401 failed with error -110 [ 215.638901][ T5946] usb 3-1: USB disconnect, device number 7 [ 218.316482][ T7723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7723 comm=syz.4.464 [ 220.288969][ T7745] syz.1.469 (7745): drop_caches: 2 [ 220.307763][ T7745] syz.1.469 (7745): drop_caches: 2 [ 221.571001][ T5900] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 221.955832][ T5900] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.963888][ T5900] usb 1-1: config 0 has no interface number 0 [ 221.971254][ T5900] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.987748][ T5900] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.998134][ T5900] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.023634][ T5900] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 222.078477][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.145372][ T5900] usb 1-1: config 0 descriptor?? [ 222.853326][ T7769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.856850][ T5900] input: HID 28bd:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0042.0005/input/input8 [ 222.864035][ T7769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.959154][ T7787] bridge1: entered promiscuous mode [ 222.964462][ T7787] bridge1: entered allmulticast mode [ 222.972344][ T7787] team0: Port device bridge1 added [ 222.987817][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 223.140954][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 223.159912][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 223.399210][ T5900] uclogic 0003:28BD:0042.0005: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.0-1/input1 [ 223.425703][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 223.520782][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.624406][ T30] audit: type=1400 audit(2000000126.463:380): avc: denied { read write } for pid=7788 comm="syz.2.485" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 223.683485][ T9] usb 4-1: Product: syz [ 223.752276][ T7794] capability: warning: `syz.2.485' uses 32-bit capabilities (legacy support in use) [ 223.873875][ T9] usb 4-1: Manufacturer: syz [ 223.878514][ T9] usb 4-1: SerialNumber: syz [ 223.912906][ T9] usb 4-1: config 0 descriptor?? [ 223.926067][ T30] audit: type=1400 audit(2000000126.473:381): avc: denied { ioctl } for pid=7788 comm="syz.2.485" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 223.963624][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 223.964321][ T7769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.001187][ T9] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 224.011171][ T7769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.058486][ T5946] usb 1-1: USB disconnect, device number 7 [ 224.617814][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 224.849325][ T7810] bridge3: entered promiscuous mode [ 224.854619][ T7810] bridge3: entered allmulticast mode [ 224.869113][ T7810] team0: Port device bridge3 added [ 225.458104][ T7812] bridge6: entered promiscuous mode [ 225.463383][ T7812] bridge6: entered allmulticast mode [ 225.471154][ T7812] team0: Port device bridge6 added [ 225.970023][ T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 225.991943][ T9] em28xx 4-1:0.0: board has no eeprom [ 226.717615][ T9] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 226.981381][ T7831] wg1 speed is unknown, defaulting to 1000 [ 227.013849][ T9] em28xx 4-1:0.0: dvb set to bulk mode. [ 227.031236][ T7831] wg1 speed is unknown, defaulting to 1000 [ 227.038551][ T7831] wg1 speed is unknown, defaulting to 1000 [ 227.408107][ T5946] em28xx 4-1:0.0: Binding DVB extension [ 227.433628][ T9] usb 4-1: USB disconnect, device number 9 [ 227.440469][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 228.284117][ T5946] em28xx 4-1:0.0: Registering input extension [ 228.458128][ T9] em28xx 4-1:0.0: Closing input extension [ 228.951261][ T9] em28xx 4-1:0.0: Freeing device [ 229.062675][ T7854] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 229.069216][ T7854] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 229.164266][ T7854] vhci_hcd vhci_hcd.0: Device attached [ 229.174756][ T7855] vhci_hcd: connection closed [ 229.184606][ T49] vhci_hcd: stop threads [ 229.238349][ T49] vhci_hcd: release socket [ 229.306450][ T49] vhci_hcd: disconnect device [ 229.321260][ T7860] fuse: Unknown parameter '0x0000000000000005' [ 229.353066][ T7831] infiniband syz0: set active [ 229.358968][ T5886] wg1 speed is unknown, defaulting to 1000 [ 229.371068][ T5859] vhci_hcd: vhci_device speed not set [ 229.377962][ T7831] infiniband syz0: added wg1 [ 229.386429][ T7831] syz0: rxe_create_cq: returned err = -12 [ 229.392872][ T7831] infiniband syz0: Couldn't create ib_mad CQ [ 229.399920][ T7831] infiniband syz0: Couldn't open port 1 [ 229.420669][ T7831] RDS/IB: syz0: added [ 229.431193][ T7831] smc: adding ib device syz0 with port count 1 [ 229.439594][ T7831] smc: ib device syz0 port 1 has pnetid [ 229.545398][ T9] wg1 speed is unknown, defaulting to 1000 [ 229.554346][ T7831] wg1 speed is unknown, defaulting to 1000 [ 229.653830][ T7865] bridge4: entered promiscuous mode [ 229.659116][ T7865] bridge4: entered allmulticast mode [ 229.666918][ T7865] team0: Port device bridge4 added [ 231.299079][ T7831] wg1 speed is unknown, defaulting to 1000 [ 231.411005][ T5905] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 231.549261][ T7880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.507'. [ 231.573962][ T5905] usb 4-1: config 1 interface 0 has no altsetting 0 [ 232.137519][ T5905] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 232.158967][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.179125][ T5905] usb 4-1: Product: з [ 232.183285][ T5905] usb 4-1: Manufacturer: 鷰巾ﳵᎁ⇇峲༴ℨᘗ︰忳桺쳗蔗킋ﻬ믓㼕Ქ팅됢ᯚګཫ즬悃દ鋙ꞈ≏䢟즵杷跼쓊卅￸Њ卉乆ꢬ㺌鎩礿扶Ỽķ褸쁅宋ᗋ陪͊顗급Ế첎殽貼昭峁ἓ墨꧂嗀梎վ鐈㼸ᑉ衤驵툇㽪ᙪ⒖씺ࢎ㌊̽頀㷥䠦踫ﺮ⁔ྉ捆쪥酼Ṗⶇ㑣꛺뷰朒喷濻惟㰑ſt谓歵䗯ܲყ蜘욘į垘蚒 [ 232.296129][ T5905] usb 4-1: SerialNumber: syz [ 232.447926][ T7831] wg1 speed is unknown, defaulting to 1000 [ 232.674061][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 232.766118][ T7831] wg1 speed is unknown, defaulting to 1000 [ 232.795429][ T7893] binder: BINDER_SET_CONTEXT_MGR already set [ 232.805681][ T7893] binder: 7885:7893 ioctl 4018620d 200000000040 returned -16 [ 232.812473][ T5905] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 4 proto 1 vid 0x0525 pid 0xA4A8 [ 232.826672][ T7891] binder: 7885:7891 ioctl c0306201 200000000180 returned -22 [ 232.919749][ T5905] usb 4-1: USB disconnect, device number 10 [ 232.933347][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 232.966727][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 233.023466][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.043524][ T5905] usblp0: removed [ 233.058997][ T9] usb 1-1: Product: syz [ 233.065710][ T9] usb 1-1: Manufacturer: syz [ 233.070319][ T9] usb 1-1: SerialNumber: syz [ 233.099748][ T9] usb 1-1: config 0 descriptor?? [ 233.373212][ T30] audit: type=1400 audit(2000000135.963:382): avc: denied { write } for pid=7896 comm="syz.4.512" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 233.440777][ T9] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 233.454621][ T30] audit: type=1400 audit(2000000135.963:383): avc: denied { ioctl } for pid=7896 comm="syz.4.512" path="/dev/sg0" dev="devtmpfs" ino=767 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 233.599739][ T7831] wg1 speed is unknown, defaulting to 1000 [ 233.828197][ T7904] FAULT_INJECTION: forcing a failure. [ 233.828197][ T7904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.841439][ T7904] CPU: 1 UID: 0 PID: 7904 Comm: syz.3.513 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 233.841466][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.841476][ T7904] Call Trace: [ 233.841483][ T7904] [ 233.841490][ T7904] dump_stack_lvl+0x16c/0x1f0 [ 233.841530][ T7904] should_fail_ex+0x512/0x640 [ 233.841559][ T7904] strncpy_from_user+0x3b/0x2e0 [ 233.841587][ T7904] getname_flags.part.0+0x8f/0x550 [ 233.841616][ T7904] getname_flags+0x93/0xf0 [ 233.841633][ T7904] do_sys_openat2+0xb8/0x1d0 [ 233.841656][ T7904] ? __pfx_do_sys_openat2+0x10/0x10 [ 233.841688][ T7904] __x64_sys_openat+0x174/0x210 [ 233.841710][ T7904] ? __pfx___x64_sys_openat+0x10/0x10 [ 233.841739][ T7904] ? rcu_is_watching+0x12/0xc0 [ 233.841764][ T7904] do_syscall_64+0xcd/0x4c0 [ 233.841790][ T7904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.841808][ T7904] RIP: 0033:0x7f8948d8eb69 [ 233.841822][ T7904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.841839][ T7904] RSP: 002b:00007f8946bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 233.841856][ T7904] RAX: ffffffffffffffda RBX: 00007f8948fb6160 RCX: 00007f8948d8eb69 [ 233.841867][ T7904] RDX: 00000000000c2d41 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 233.841878][ T7904] RBP: 00007f8946bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 233.841889][ T7904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.841899][ T7904] R13: 0000000000000001 R14: 00007f8948fb6160 R15: 00007ffcbd0e8168 [ 233.841923][ T7904] [ 234.012316][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.035590][ T30] audit: type=1400 audit(2000000136.693:384): avc: denied { accept } for pid=7899 comm="syz.3.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 234.489457][ T9] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 234.499199][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 234.522326][ T9] usb 1-1: USB disconnect, device number 8 [ 234.531217][ T5946] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 234.691146][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 234.713761][ T5946] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 234.722571][ T5946] usb 4-1: can't read configurations, error -61 [ 234.840704][ T7916] FAULT_INJECTION: forcing a failure. [ 234.840704][ T7916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.854296][ T7916] CPU: 0 UID: 0 PID: 7916 Comm: syz.4.517 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 234.854321][ T7916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.854332][ T7916] Call Trace: [ 234.854338][ T7916] [ 234.854345][ T7916] dump_stack_lvl+0x16c/0x1f0 [ 234.854373][ T7916] should_fail_ex+0x512/0x640 [ 234.854404][ T7916] _copy_from_user+0x2e/0xd0 [ 234.854423][ T7916] io_register_zcrx_ifq+0x167/0x1d50 [ 234.854447][ T7916] ? __lock_acquire+0x622/0x1c90 [ 234.854476][ T7916] ? __pfx_io_register_zcrx_ifq+0x10/0x10 [ 234.854505][ T7916] ? find_held_lock+0x2b/0x80 [ 234.854541][ T7916] ? __mutex_trylock_common+0xe9/0x250 [ 234.854569][ T7916] ? __pfx___mutex_trylock_common+0x10/0x10 [ 234.854599][ T7916] __io_uring_register+0x7b9/0x2440 [ 234.854627][ T7916] ? trace_contention_end+0xdd/0x130 [ 234.854654][ T7916] ? __pfx___io_uring_register+0x10/0x10 [ 234.854679][ T7916] ? __mutex_lock+0x1c2/0x1070 [ 234.854710][ T7916] ? __pfx___mutex_lock+0x10/0x10 [ 234.854742][ T7916] ? __fget_files+0x20e/0x3c0 [ 234.854759][ T7916] ? __fput_deferred+0x420/0x480 [ 234.854796][ T7916] __x64_sys_io_uring_register+0x169/0x280 [ 234.854827][ T7916] do_syscall_64+0xcd/0x4c0 [ 234.854854][ T7916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.854873][ T7916] RIP: 0033:0x7f47f418eb69 [ 234.854888][ T7916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.854905][ T7916] RSP: 002b:00007f47f5001038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 234.854924][ T7916] RAX: ffffffffffffffda RBX: 00007f47f43b6080 RCX: 00007f47f418eb69 [ 234.854936][ T7916] RDX: 0000200000000000 RSI: 0000000000000020 RDI: 0000000000000008 [ 234.854947][ T7916] RBP: 00007f47f5001090 R08: 0000000000000000 R09: 0000000000000000 [ 234.854958][ T7916] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 234.854968][ T7916] R13: 0000000000000000 R14: 00007f47f43b6080 R15: 00007fff2e14dff8 [ 234.854993][ T7916] [ 235.136935][ T5946] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 235.190211][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'. [ 235.199064][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'. [ 235.860951][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 235.884388][ T5946] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 235.893188][ T5946] usb 4-1: can't read configurations, error -61 [ 235.902830][ T5946] usb usb4-port1: attempt power cycle [ 236.069511][ T30] audit: type=1400 audit(2000000138.893:385): avc: denied { ioctl } for pid=7926 comm="syz.4.520" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x556c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 236.362665][ T5946] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 236.371873][ T30] audit: type=1400 audit(2000000139.223:386): avc: denied { create } for pid=7928 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 236.477585][ T7939] bridge0: port 3(batadv1) entered blocking state [ 236.484564][ T7939] bridge0: port 3(batadv1) entered disabled state [ 236.491983][ T7939] batadv1: entered allmulticast mode [ 236.554996][ T7939] batadv1: entered promiscuous mode [ 237.180800][ T49] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 237.191304][ T49] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 237.201352][ T5946] usb 4-1: device descriptor read/8, error -71 [ 237.465344][ T7953] FAULT_INJECTION: forcing a failure. [ 237.465344][ T7953] name failslab, interval 1, probability 0, space 0, times 0 [ 237.488119][ T7953] CPU: 1 UID: 0 PID: 7953 Comm: syz.4.525 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 237.488142][ T7953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.488149][ T7953] Call Trace: [ 237.488152][ T7953] [ 237.488157][ T7953] dump_stack_lvl+0x16c/0x1f0 [ 237.488176][ T7953] should_fail_ex+0x512/0x640 [ 237.488193][ T7953] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 237.488206][ T7953] should_failslab+0xc2/0x120 [ 237.488218][ T7953] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 237.488229][ T7953] ? getname_flags.part.0+0x4c/0x550 [ 237.488247][ T7953] getname_flags.part.0+0x4c/0x550 [ 237.488264][ T7953] getname_flags+0x93/0xf0 [ 237.488274][ T7953] __x64_sys_rename+0x58/0xa0 [ 237.488288][ T7953] do_syscall_64+0xcd/0x4c0 [ 237.488304][ T7953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.488315][ T7953] RIP: 0033:0x7f47f418eb69 [ 237.488325][ T7953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.488336][ T7953] RSP: 002b:00007f47f5022038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 237.488346][ T7953] RAX: ffffffffffffffda RBX: 00007f47f43b5fa0 RCX: 00007f47f418eb69 [ 237.488353][ T7953] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000580 [ 237.488360][ T7953] RBP: 00007f47f5022090 R08: 0000000000000000 R09: 0000000000000000 [ 237.488366][ T7953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.488372][ T7953] R13: 0000000000000000 R14: 00007f47f43b5fa0 R15: 00007fff2e14dff8 [ 237.488385][ T7953] [ 237.843238][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'. [ 237.860254][ T30] audit: type=1400 audit(2000000140.703:387): avc: denied { create } for pid=7955 comm="syz.0.526" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 238.778107][ T7964] FAULT_INJECTION: forcing a failure. [ 238.778107][ T7964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.841130][ T7964] CPU: 1 UID: 0 PID: 7964 Comm: syz.4.529 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 238.841155][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.841166][ T7964] Call Trace: [ 238.841171][ T7964] [ 238.841178][ T7964] dump_stack_lvl+0x16c/0x1f0 [ 238.841208][ T7964] should_fail_ex+0x512/0x640 [ 238.841238][ T7964] _copy_from_user+0x2e/0xd0 [ 238.841257][ T7964] do_sock_getsockopt+0x3ca/0x440 [ 238.841285][ T7964] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 238.841309][ T7964] ? __fget_files+0x204/0x3c0 [ 238.841338][ T7964] __sys_getsockopt+0x12f/0x260 [ 238.841364][ T7964] __x64_sys_getsockopt+0xbd/0x160 [ 238.841384][ T7964] ? do_syscall_64+0x91/0x4c0 [ 238.841408][ T7964] ? lockdep_hardirqs_on+0x7c/0x110 [ 238.841430][ T7964] do_syscall_64+0xcd/0x4c0 [ 238.841456][ T7964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.841472][ T7964] RIP: 0033:0x7f47f418eb69 [ 238.841485][ T7964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.841500][ T7964] RSP: 002b:00007f47f5022038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 238.841518][ T7964] RAX: ffffffffffffffda RBX: 00007f47f43b5fa0 RCX: 00007f47f418eb69 [ 238.841530][ T7964] RDX: 0000000000000009 RSI: 000000000000010e RDI: 0000000000000003 [ 238.841539][ T7964] RBP: 00007f47f5022090 R08: 0000200000000040 R09: 0000000000000000 [ 238.841550][ T7964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.841560][ T7964] R13: 0000000000000000 R14: 00007f47f43b5fa0 R15: 00007fff2e14dff8 [ 238.841584][ T7964] [ 240.666605][ T7986] bridge2: entered promiscuous mode [ 240.672154][ T7986] bridge2: entered allmulticast mode [ 240.684156][ T7986] team0: Port device bridge2 added [ 240.967332][ T7990] syz.3.533: attempt to access beyond end of device [ 240.967332][ T7990] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 241.011332][ T7990] syz.3.533: attempt to access beyond end of device [ 241.011332][ T7990] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 241.306156][ T5900] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 241.359881][ T7990] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 241.401128][ T7990] ------------[ cut here ]------------ [ 241.406588][ T7990] WARNING: CPU: 1 PID: 7990 at fs/buffer.c:1125 __getblk_slow+0x4cc/0x560 [ 241.415163][ T7990] Modules linked in: [ 241.419185][ T7990] CPU: 1 UID: 0 PID: 7990 Comm: syz.3.533 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 241.430791][ T7990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.440941][ T7990] RIP: 0010:__getblk_slow+0x4cc/0x560 [ 241.446326][ T7990] Code: c0 8b 48 89 df e8 24 e6 bb ff 90 0f 0b e8 dc 55 73 ff 48 c7 c6 60 59 c0 8b 48 89 df e8 0d e6 bb ff 90 0f 0b e8 c5 55 73 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 c0 5a c0 8b 31 db e8 2d 1a 52 [ 241.466027][ T7990] RSP: 0018:ffffc9000c3577f0 EFLAGS: 00010287 [ 241.472140][ T7990] RAX: 0000000000014739 RBX: 0000000000000200 RCX: ffffc9000ee8e000 [ 241.480116][ T7990] RDX: 0000000000080000 RSI: ffffffff824813ab RDI: 0000000000000005 [ 241.488164][ T7990] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 241.496141][ T7990] R10: 0000000000000200 R11: 0000000000000001 R12: ffff888024104500 [ 241.504142][ T7990] R13: 0000000000000200 R14: 0000000000000200 R15: ffff888024104500 [ 241.512114][ T7990] FS: 00007f8946bd56c0(0000) GS:ffff8881247fe000(0000) knlGS:0000000000000000 [ 241.521034][ T7990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.527607][ T7990] CR2: 0000001b2f80dff8 CR3: 0000000078315000 CR4: 00000000003526f0 [ 241.535590][ T7990] Call Trace: [ 241.538845][ T7990] [ 241.541769][ T7990] ? __pfx___might_resched+0x10/0x10 [ 241.547049][ T7990] bdev_getblk+0xd4/0xe0 [ 241.551346][ T7990] __bread_gfp+0x86/0x3c0 [ 241.555657][ T7990] udf_read_tagged+0xae/0x740 [ 241.560321][ T7990] udf_check_anchor_block+0x89/0x4b0 [ 241.565623][ T7990] ? udf_get_last_block+0x1ce/0x2a0 [ 241.570800][ T7990] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 241.576686][ T7990] udf_load_vrs+0x682/0x1070 [ 241.581275][ T7990] ? __pfx_udf_load_vrs+0x10/0x10 [ 241.586272][ T7990] ? __pfx_udf_get_last_session+0x10/0x10 [ 241.592007][ T7990] ? lockdep_init_map_type+0x5c/0x280 [ 241.597372][ T7990] udf_fill_super+0x791/0x1df0 [ 241.602145][ T7990] ? __pfx_udf_fill_super+0x10/0x10 [ 241.607317][ T7990] ? do_raw_spin_lock+0x12c/0x2b0 [ 241.612337][ T7990] ? find_held_lock+0x2b/0x80 [ 241.617170][ T7990] ? sb_set_blocksize+0x176/0x1d0 [ 241.622257][ T7990] ? setup_bdev_super+0x369/0x730 [ 241.627301][ T7990] get_tree_bdev_flags+0x38c/0x620 [ 241.632669][ T7990] ? __pfx_udf_fill_super+0x10/0x10 [ 241.637851][ T7990] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 241.643483][ T7990] ? bpf_lsm_capable+0x9/0x10 [ 241.648151][ T7990] ? security_capable+0x7e/0x260 [ 241.653113][ T7990] vfs_get_tree+0x8b/0x340 [ 241.657519][ T7990] path_mount+0x1482/0x1fd0 [ 241.662032][ T7990] ? __pfx_path_mount+0x10/0x10 [ 241.666860][ T7990] ? kmem_cache_free+0x2d1/0x4d0 [ 241.671797][ T7990] ? putname+0x154/0x1a0 [ 241.676019][ T7990] ? putname+0x154/0x1a0 [ 241.680248][ T7990] ? __x64_sys_mount+0x28d/0x310 [ 241.685183][ T7990] __x64_sys_mount+0x28d/0x310 [ 241.689930][ T7990] ? __pfx___x64_sys_mount+0x10/0x10 [ 241.695215][ T7990] do_syscall_64+0xcd/0x4c0 [ 241.699709][ T7990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.705611][ T7990] RIP: 0033:0x7f8948d8eb69 [ 241.710001][ T7990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.729585][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.735716][ T7990] RSP: 002b:00007f8946bd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 241.744563][ T7990] RAX: ffffffffffffffda RBX: 00007f8948fb6160 RCX: 00007f8948d8eb69 [ 241.752542][ T7990] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 241.760499][ T7990] RBP: 00007f8948e11df1 R08: 0000000000000000 R09: 0000000000000000 [ 241.768469][ T7990] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 241.776514][ T7990] R13: 0000000000000001 R14: 00007f8948fb6160 R15: 00007ffcbd0e8168 [ 241.784502][ T7990] [ 241.787498][ T7990] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 241.794749][ T7990] CPU: 1 UID: 0 PID: 7990 Comm: syz.3.533 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 241.806260][ T7990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.816296][ T7990] Call Trace: [ 241.819547][ T7990] [ 241.822463][ T7990] dump_stack_lvl+0x3d/0x1f0 [ 241.827033][ T7990] vpanic+0x6a3/0x780 [ 241.830993][ T7990] ? __pfx_vpanic+0x10/0x10 [ 241.835479][ T7990] ? __getblk_slow+0x4cc/0x560 [ 241.840221][ T7990] panic+0xca/0xd0 [ 241.843920][ T7990] ? __pfx_panic+0x10/0x10 [ 241.848332][ T7990] check_panic_on_warn+0xab/0xb0 [ 241.853248][ T7990] __warn+0xf6/0x3c0 [ 241.857113][ T7990] ? __getblk_slow+0x4cc/0x560 [ 241.861853][ T7990] report_bug+0x3c3/0x580 [ 241.866158][ T7990] ? __getblk_slow+0x4cc/0x560 [ 241.870898][ T7990] handle_bug+0x184/0x210 [ 241.875220][ T7990] exc_invalid_op+0x17/0x50 [ 241.879698][ T7990] asm_exc_invalid_op+0x1a/0x20 [ 241.884520][ T7990] RIP: 0010:__getblk_slow+0x4cc/0x560 [ 241.889869][ T7990] Code: c0 8b 48 89 df e8 24 e6 bb ff 90 0f 0b e8 dc 55 73 ff 48 c7 c6 60 59 c0 8b 48 89 df e8 0d e6 bb ff 90 0f 0b e8 c5 55 73 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 c0 5a c0 8b 31 db e8 2d 1a 52 [ 241.909461][ T7990] RSP: 0018:ffffc9000c3577f0 EFLAGS: 00010287 [ 241.915500][ T7990] RAX: 0000000000014739 RBX: 0000000000000200 RCX: ffffc9000ee8e000 [ 241.923456][ T7990] RDX: 0000000000080000 RSI: ffffffff824813ab RDI: 0000000000000005 [ 241.931412][ T7990] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 241.939369][ T7990] R10: 0000000000000200 R11: 0000000000000001 R12: ffff888024104500 [ 241.947321][ T7990] R13: 0000000000000200 R14: 0000000000000200 R15: ffff888024104500 [ 241.955270][ T7990] ? __getblk_slow+0x4cb/0x560 [ 241.960014][ T7990] ? __pfx___might_resched+0x10/0x10 [ 241.965276][ T7990] bdev_getblk+0xd4/0xe0 [ 241.969505][ T7990] __bread_gfp+0x86/0x3c0 [ 241.973821][ T7990] udf_read_tagged+0xae/0x740 [ 241.978476][ T7990] udf_check_anchor_block+0x89/0x4b0 [ 241.983743][ T7990] ? udf_get_last_block+0x1ce/0x2a0 [ 241.988918][ T7990] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 241.994876][ T7990] udf_load_vrs+0x682/0x1070 [ 241.999444][ T7990] ? __pfx_udf_load_vrs+0x10/0x10 [ 242.004448][ T7990] ? __pfx_udf_get_last_session+0x10/0x10 [ 242.010154][ T7990] ? lockdep_init_map_type+0x5c/0x280 [ 242.015531][ T7990] udf_fill_super+0x791/0x1df0 [ 242.020290][ T7990] ? __pfx_udf_fill_super+0x10/0x10 [ 242.025467][ T7990] ? do_raw_spin_lock+0x12c/0x2b0 [ 242.030488][ T7990] ? find_held_lock+0x2b/0x80 [ 242.035147][ T7990] ? sb_set_blocksize+0x176/0x1d0 [ 242.040146][ T7990] ? setup_bdev_super+0x369/0x730 [ 242.045152][ T7990] get_tree_bdev_flags+0x38c/0x620 [ 242.050237][ T7990] ? __pfx_udf_fill_super+0x10/0x10 [ 242.055432][ T7990] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 242.061057][ T7990] ? bpf_lsm_capable+0x9/0x10 [ 242.065723][ T7990] ? security_capable+0x7e/0x260 [ 242.070646][ T7990] vfs_get_tree+0x8b/0x340 [ 242.075044][ T7990] path_mount+0x1482/0x1fd0 [ 242.079526][ T7990] ? __pfx_path_mount+0x10/0x10 [ 242.084371][ T7990] ? kmem_cache_free+0x2d1/0x4d0 [ 242.089304][ T7990] ? putname+0x154/0x1a0 [ 242.093525][ T7990] ? putname+0x154/0x1a0 [ 242.097742][ T7990] ? __x64_sys_mount+0x28d/0x310 [ 242.102652][ T7990] __x64_sys_mount+0x28d/0x310 [ 242.107391][ T7990] ? __pfx___x64_sys_mount+0x10/0x10 [ 242.112659][ T7990] do_syscall_64+0xcd/0x4c0 [ 242.117140][ T7990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.123004][ T7990] RIP: 0033:0x7f8948d8eb69 [ 242.127390][ T7990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.146993][ T7990] RSP: 002b:00007f8946bd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 242.155472][ T7990] RAX: ffffffffffffffda RBX: 00007f8948fb6160 RCX: 00007f8948d8eb69 [ 242.163414][ T7990] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 242.171365][ T7990] RBP: 00007f8948e11df1 R08: 0000000000000000 R09: 0000000000000000 [ 242.179308][ T7990] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 242.187250][ T7990] R13: 0000000000000001 R14: 00007f8948fb6160 R15: 00007ffcbd0e8168 [ 242.195202][ T7990] [ 242.198400][ T7990] Kernel Offset: disabled [ 242.202699][ T7990] Rebooting in 86400 seconds..