last executing test programs: 11.674074957s ago: executing program 3 (id=480): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000980)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000a80)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) r5 = gettid() tkill(r5, 0x16) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x80, 0x0, 'sh\x00', 0x13}, 0x2c) r7 = getuid() r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r8, &(0x7f00000029c0)={0x5b8, 0x0, r9, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, r10, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, r10, r11, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, r10, r11, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0xa, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, r10, r11, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, r10, r11, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x6, 0x0, 0x5dd5, 0x3, 0x5, 0x81, {0x3, 0x100000001, 0x5, 0x2, 0x1, 0x2, 0x6, 0x69504f9e, 0x80000000, 0x2000, 0x6, r10, r11, 0x6, 0x5}}, {0x0, 0xfffffffffffffffc, 0x6, 0x4, '&\'.:&('}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x5, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf4f, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0x100f6c, 0x80000000, 0x4000, 0x80, r10, r11, 0x6, 0x6a4a}}, {0x2, 0x8, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbe4a, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, r11, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x5b8) r12 = syz_open_dev$MSR(&(0x7f0000000b00), 0x8c, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r13, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r14 = syz_open_pts(r13, 0x101) dup3(r14, r13, 0x0) r15 = getpid() sched_setscheduler(r15, 0x2, &(0x7f0000000200)=0x7) r16 = openat$vcs(0xffffffffffffff9c, &(0x7f0000004400), 0x2040, 0x0) r17 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg(r17, &(0x7f0000004b80)={&(0x7f0000004740)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x2, 0x1, 0x1, {0xa, 0x4e23, 0x8424, @local}}}, 0x80, 0x0, 0x0, &(0x7f0000004b00)=[{0x80, 0x116, 0xa3, "4e84e19235155a477fe44d50375f519f293e0be83d44ffa7c350bf0f36d1cbc3166db53cc615f83f12de7c6aac89baaec44c3924c275fbd459325a4584907ad3da38f9977e85c42523bd441c9542d97384fa795851e62f605cbd551bf05444e0816dade236607ff92ad0"}], 0x80}, 0x44) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000004700)={'veth1_macvtap\x00', &(0x7f0000004640)=@ethtool_rx_ntuple={0x35, {0xc, @ether_spec={@empty, @local, 0xbe}, @udp_ip4_spec={@remote, @remote, 0x4e22, 0x4e22, 0x2}, 0x7f, 0x7a, 0x6, 0x412f, 0xffffffffffffffff}}}) r18 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000004440), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x2, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}, {{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000200)="e92535cdfe230c12410fc08a54639e63708fe6274fac9a34749447a2a5028a89725bf82baf9c25f2804b13534fc91323be09781a7b02b7bc3764a898ee476cb0df1410d6952f7534b3332bc962bbcc6951a429ee00ebab3fd428b94d248f30", 0x5f}, {&(0x7f0000000280)="c7b29b356d64e6863a4f20044dd268519a8b2b66f2edffe49ed6714f1e035b4e0acfc43b976977e58349738ff434fcb0274e5da3fc12110068473f7b410bbba4317598ebfa54c900b93cbd1036e1fb5a1c95bbd03e161feba76b4247ac76fd629a03ae0a6e77f88182b92fa1c0468ff384bb5217505f8e1debf8ee58ea333342577f6cee22591ba4985f8c4d4d8bd523e4e97332e6ad8208c7522c526b39db34412dc6bbf159a1d5c9a6fc1a0550f0d658765c2b74fcde572907de85ce6dc590787d9b", 0xc3}, {&(0x7f00000003c0)="376c237316e6087488d95cc1e2a9d2890e75362bbfa81aac04139df68969d1314361a53e36f1f573396f2742597008da371acf92fc5f1675b7f12a44d9cf66fe257eef87a3a8", 0x46}, {&(0x7f0000000440)="39ee7fcf7cf499898ad336f7e1aea5030d322a492a0e7b0e38cfd48165a5775bb5be8dd9388fd2d7b391e15f8cf572a982be1ef1be4fdc17d5724a27747478c5332a8620bd3e88f7a1fea258f3f165188f311921562ff5e63f9478ace1e6bfa4f49381a6c27484feb153e20c3ffc57620236d19cbdb66dbfeb557aba554ff453362577ff42d5024b8812d7e45faf19000d65551aafb6080e7977a6749b30171892c50a6b080f8a2562f30dd67263de36d5f2f3ae6f8be45ccf2e033edd2da09468a21cf1a29e2a5d2d58e0a1ee74fc2e4aa46ca435256c004190da0cff21528f838fca81e65b5aa138c585139950df996f3c256666", 0xf5}, {&(0x7f0000000540)="f8a524f69ac287049e1979f17303db936d2194892e315a6aee659d1cf56f74e49cdd22000b056cae7b28ad2c00e746e0b6d0bd1ced15848c6b8c54bc4f6d4305027df49c2bf54616d371bf099dfd2304d12297d95702303b8ce6c5bb8d21250e31f01ea6a6c65ab7b31a5d8014432fd9841506c7cae4420eafc358bd3e2beb6981fbc7720174f8088a51947499cfc86d283295f6fb600b9984acbd63f9969f0304c4cfe81b41ab741ca3212558c6d5f4b5e4b9ee20112e7ab3967414d980070ba71b23ae96b8f2d1bb91450affcf190148c81c5b281160e3ece70e0b14fcbacef58ce52dee7a49201233", 0xea}, {&(0x7f0000000640)="e3a875c794bc2d7739fd86d0b05686723ffd306adfc19f19e941b5f2e59951da6262a114ff83aac40887177c1cb4b67eba3a47b6e1387b92a2ba34c7af4847ee7e7de91bc89dca1ab80a804b71b217fd322aa786f507af12614ff3b3aee5c5c529a55dd5957a53b3a1ad3840174a8e709b23a2f359c53fc266f76a290cb542b026abafe168e8ff554bc9", 0x8a}, {&(0x7f0000000700)="64888e905267a859976b6d4240f7cd3d9d904c10039ffb635b5367731d7bc7a84352c375e79de0725a0a6b73263fc30bcc7ba1828d4001a71dc3d980593aa536c578554eac15892e909ad4dfb6230d353c36885e7eb95f892863aaee1bf5088c2d02c16c8f0557c28271ab1d659708", 0x6f}, {&(0x7f0000000800)="144b490f139d02fa8b15163aa54b51ba09be924b2e91c388e3f4701cd1e5d0c728aab1250b478d0468f304c2fa45909709656fd471093766758481f2ceac8322faecfe8f16061df0008649ad8af1ed87b2e050e779b9bf774cb10c9baeb32589c7599dc791bf301f4dc38933370c5503b6d9bc8427302b8ff65a7f17ed66e665f27a6273c800b527fb29d7a3f7a5469c00c7d28adab738edb87dd2b7b7e943c6c7e0e7801a4c07b1b58c86887d97faa78da68e2a87a705a65c286a8d080626c0eff6df9d090c7a47264cecf4c9dba8eef093d8f6c006f9ec", 0xd8}], 0x8, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r11}}}, @rights={{0x34, 0x1, 0x1, [r0, r1, r1, r0, r0, r1, r0, r12, r1]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r14, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0xb0, 0x40000c0}}, {{&(0x7f00000025c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002f80)=[{0x0}, {0x0}, {&(0x7f0000002780)="289a6645986457be8b3a5d5ebe4ed34f28b529086aced1db81479438460359f38f466855b606d1664b62a17fa505e40effe39703a595664fa69af93db3fca3aa2748de199ad7d41c4a3ad9c37b6007d29e0939ab4ac6894f148d3d7b893390c2fc1bb2dd5bf3e1456abc", 0x6a}, {&(0x7f0000002800)="db6f48786329dd04e1cbbb1d30b3d0ee1136d7a5278f4eea19f8fc6e009ae7dbe275a6d9e00abfab91026acf19c62ae7f8b01c7db8398b51c3d37e5259eab9f02f427dc0df53b376bf46fae53bd052d68442d4bda1c0c4e0189d723f416a3686b4cb970f4b68d725661a8ebdb564d60cdad4e4bb7e8009c12d46bbfde76e7eaea0448bb6671beec6aab92b08f2709b59189e1d8b401cea3ab99fe956becb5dbeca7cd5aa145f4ae176934bc5a4be8f", 0xaf}, {&(0x7f00000028c0)="03cbd1824d2b9921d4bd8cceb2b98b31d9d91b07466e6cf36ef461a3ebf3ef89cdedfd228aef4a22a37050178566fef677adbc434460416468611cd3a2e40776f2a94f7d823a394a6c7f94592dce8bc6bd51b28a4cd42f75d76a29c6071e9fc91fc891cf487fc87b78025f04f013dfeb9d0185a7a3e3ccbffd261c6881024028d1bc94e5b4bc16ea319642dce5a4454d86818465e5fc", 0x96}], 0x5, 0x0, 0x0, 0x48c0}}, {{&(0x7f0000003000)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004380)=[{&(0x7f0000003080)="e302382a53fc57b423609332a08bd0fb51fbd6d97b1cd9f0c4f337e32d6ee78eddcbe52fe014386077b8b92a85066816502f53393832251c0fe55c2bb8b5c5fbda4a43ef67eaf0ee98e1ea686f75f7a3ce6add6b1c637258d40d9f0d1f19a687478c3186a96a8eef1745433b961a7236d6318c0452f68f2d48fed12691def255a79b1ecd9fc6bf", 0x87}, {&(0x7f0000003140)="332f2b1bb2b94c5315ba9201b7da5c86c11a0c25a668901d3a7bd878eacecbeb2c9eacb7cb3765afce6e15723f130193bd06347c1a207f780016f9d7e998c888d5de310a67deab3d0c2b776f11cc1075674268395fdf58c6421b745853a7a37dbd4b9aab96d6d6e86098a2c9b8d82af24e2ea934c2", 0x75}, {&(0x7f00000031c0)="86862cc44fc4b3e1101624632d6818e56d084319273eacd47c11ebda1722be2479293265d5c91f0671f7c280225d4e24c5ca6bb1660ee4b98d77cc45ca492feea1927ba268abd0da7c6b76208dea61f4d901a4ccc0fcc96dc6a5e7ef7fb8d11425db528ae120f8189855743b076d3101b739781a05e807b563ce7cb305acef751ae3c21e534ef7c5d47b3bf028d4cb3ae7e4725d556f4ead0b37fbfd9effe4e575e9781fcf6a93e8b8", 0xa9}, {&(0x7f0000003280)="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", 0x1000}, {&(0x7f0000002980)="e14c59e8d5f7f079fb85397505aa26c318b15ecb7a10", 0x16}, {&(0x7f0000004280)="351a7c3eebf124be4099e8cc9ee576f220e5451afdf54b371537d63ae7607ff13b0051519b163728b08b5faca8e9f0c51845c11a534d6b1fc726caaaa59de39e6f191c7ecfd0dbd0849b5c5dec88d6c34238a98b1c495e75541e18d57a5e09826edf4ca47f0929480e040881e6dd21cf1560b4de5a3f1ef64c9a1b5ddb013819cf4f6bdb236aa8ed74d5233d4ae373b2892d08e69743e84e6993c1a39b360fa038da0b13d7ea9bd8a8201a781d5978253ffee302e5623aaa01509eaa1b124b5faac001f8885681b69c170cdcfb7ee9e9ba3b4f14293b68c94f9876c0dea7344c14949d517726eec0bac46863", 0xec}], 0x6, &(0x7f0000004bc0)=ANY=[@ANYBLOB="1c000000000000000000000000000000840266261ee4965ac176065e4116f9242e87305a270c80d2af717b41fb6aa299e54d74888345968869cff2c51a00605433c1bfa7b48bd1fb1163116be0706f39177a0ec21fe1b79e4666725ecd03bb5c2ac585cd3532a277dfb5dc0b12d69fcd75190b25b59dcdc7a587c75479e68f1c6d64b1ef3bd2817cd8afeab5a9ddf6542b20bf305812230755935d9d304f2dffe9e5822eeccd48743614e1242a64432c033ca5d95aa206715e9936537aa2b13095f20c035860819a96fcf119e7ffe968bbea2fdb5585037c866d74", @ANYRES32=r15, @ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r14, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r13, @ANYRES32=r13, @ANYRES32=r16, @ANYRES32=r12, @ANYRES32=r8, @ANYRES32=r12, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r13, @ANYRES32=r18, @ANYRES32=r8, @ANYRES32=r13, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00'], 0xa0, 0x10}}], 0x4, 0x4000045) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 10.966443476s ago: executing program 0 (id=483): socket$inet_udplite(0x2, 0x2, 0x88) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x4, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast1}, 0x10) pipe(0x0) r5 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000000100)) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) 9.847779647s ago: executing program 2 (id=485): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20800, 0x40) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x80, 0x1) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x430b69c694cdab69, 0x3) r2 = dup(r1) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000080)={0x79, 0x9, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x1}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0x4, 0x4a}, {0xd, 0xecc}, {0x0, 0x1}, {0x1, 0xfffffff4}, {0x4, 0x7}]}]}, {0x0, [0x0, 0x30, 0x61, 0x0]}}, &(0x7f0000000140)=""/164, 0x5e, 0xa4, 0x0, 0xd47f, 0x0, @void, @value}, 0x28) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @default, @netrom={'nr', 0x0}, 0x0, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000002c0)={0x3e, 0x7, 0x89e6}) lseek(r1, 0xffffffffc36ce996, 0x4) membarrier(0x40, 0x0) lseek(r0, 0x8, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000300)) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000000, 0x100010, r2, 0x180000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x25, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x0, 0x7, 0x9, 0x1, 0x80, 0xfffffffffffffff0}, @map_idx={0x18, 0xa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0xc, 0x3, 0x9, 0xffffffffffffffe0, 0xb}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc}, @jmp={0x5, 0x1, 0xa, 0x9, 0x4, 0xfffffffffffffff0, 0x8281cf3b0abb04a5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f00000004c0)='GPL\x00', 0x200, 0x2d, &(0x7f0000000500)=""/45, 0x41000, 0x4, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000540)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x6, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r2, r2], &(0x7f0000000600)=[{0x3, 0x1, 0x9, 0x9}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000340)='scsi_dispatch_cmd_start\x00', r3, 0x0, 0x5}, 0x18) readv(r3, &(0x7f0000000840)=[{&(0x7f0000000740)=""/239, 0xef}], 0x1) listen(r2, 0xffffffff) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000880), 0x200000, 0x0) write$fb(r4, &(0x7f00000008c0)="2d2443e34b95", 0x6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x7140, 0x80, 0x4, 0xffffffff, {{0x22, 0x4, 0x2, 0x26, 0x88, 0x67, 0x1, 0x3, 0x4, 0x0, @local, @multicast2, {[@rr={0x7, 0x7, 0xba, [@empty]}, @lsrr={0x83, 0x7, 0x56, [@broadcast]}, @end, @ssrr={0x89, 0x17, 0x5e, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0xf0, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0x456d}, {@local, 0x7}, {@empty, 0x596}, {@multicast2, 0xdd}, {@multicast2, 0x1d}]}, @timestamp_prespec={0x44, 0x14, 0xc4, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@private=0xa010102, 0x40}]}, @end, @generic={0x86, 0x2}]}}}}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r2, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x17, 0x2, &(0x7f0000000900)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffffa}], &(0x7f0000000940)='GPL\x00', 0x0, 0x3c, &(0x7f0000000980)=""/60, 0x41100, 0x41, '\x00', r5, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0x8, 0x4b03, 0x80000000}, 0x10, 0x0, r2, 0xa, &(0x7f0000000c00)=[r2, r6, r2, r2, r2], &(0x7f0000000c40)=[{0x4, 0x5, 0xa, 0x3}, {0x1, 0x1, 0x7, 0x1}, {0x2, 0x1, 0x7, 0x3}, {0x1, 0x3, 0x7, 0x5}, {0x2, 0x1, 0x2, 0xb}, {0x2, 0x4, 0x8, 0x5}, {0x0, 0x2, 0x10, 0x4}, {0x4, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x7, 0xa}, {0x1, 0x1, 0x8, 0xe}], 0x10, 0x400, @void, @value}, 0x94) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000dc0)=0xfff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r0, {0x4000000}}, './file0\x00'}) bind$can_raw(r7, &(0x7f0000000e40)={0x1d, r5}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ec0), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x54, r9, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x8f}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xe}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xc}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x4044044) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r2, 0x3ba0, &(0x7f0000001080)={0x48, 0x4, 0x0, 0x0, 0x5b, &(0x7f0000001000)="75625e6f337822460c7a7edba09f574833defda0005051798022b1e10f61e67fbae34d042f2cfeef40ec8940adefaa8dcc88f36cc7d2a67484c69a5741e6b1ef72a576bf06729a47b759847fccd1ad966323038c03ef50b5f992f5", 0x4}) socket(0xa, 0x1, 0x8) 9.776299971s ago: executing program 3 (id=488): prlimit64(0x0, 0x0, &(0x7f0000000000)={0x0, 0x2}, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201108cb4293e80eb7701000000202505a8a44000010203010999b26b30010240030904000301070102000905e36d354db958ec592b2e722fd8b46622790680af6c4fbe589b50054198a35da5b4e2269cc054ce99c36fc3a6340bfc71518133b6732820b3b09f67"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000006c0)=@lang_id={0x4}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FIOCLEX(r1, 0x5451) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x83, 0x1, 0x0, 0x0, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) capset(0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0xfea7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 9.714984723s ago: executing program 0 (id=489): ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={0x0, &(0x7f00000001c0)=[{}], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1, 0x8}) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000022b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32=r3], 0x44}}, 0x0) 9.144904549s ago: executing program 2 (id=490): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r5}}], 0x20, 0x6044}, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 9.14457552s ago: executing program 4 (id=491): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020400000000000000000000000000850000000000000095000000000000003f1ee6242ced00e8b0907d26ba249fc1894f79f3d08f9602afc31c7ba75e44dc814278ae205f65b7f00eacf7b119839d73f23bf473e4994dec3b252c0567d027a1f80a44b9c73cb96fe4861b349b212b8f7b82b9a03c8c69e263c0c7015ba00bdf3f98994c2618121190837eaedcc6768e402a829d8e7eb25bffd737e9b2d9c8f75cf2eff9cb925479ec95fb1437eefab392c4d47a5d0e"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, r4, 0xc, 0x0, 0x1, 0x10, 0x0, 0x180, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x40, &(0x7f0000000380)={0x0, 0x2193, 0x40, 0x0, 0x13a}, &(0x7f00000002c0), &(0x7f0000000180)) io_uring_enter(r5, 0x708, 0x41e3, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f00000192c0)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce\x04\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\xbbGh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5_J\x1en\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe3) add_key$user(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000400)="2e57bd4ed738697c11aa376aac3260959fea44429b313657302ce36cb58246f08b5ead42e4d374dc26a11c6f58c82ddb9cbdc3b4247dfea0d463e542bc2c06bc8e8ec5abedb3e37a5b682458bb8f336a7a454b7d21599a3a1463814b9f4a09aaf11bf116e50d0cca820d52913b1046b62de2d5072fd4544623e296bbbaf95df7a91ef26fcef6223bc6d0cbf5887de8b8bd8111a6d0fc71c37c1c47de7bc17554ceec6e4c5a3f4cd916e4d2c0de0fd55fbb9f706bd755fc1eb1a0d4359a894cc4c8f0a8429afb416aff86329fe8653c1749703f2a315a700771e97ba9e4b9b3a6", 0xe0, 0xfffffffffffffffa) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x8}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x4, 0x802, 0x0, 0x8, 'syz0\x00'}) 7.386869264s ago: executing program 4 (id=492): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) fsopen(&(0x7f0000000440)='cramfs\x00', 0x0) listen(r0, 0x10000a47) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1) syz_emit_ethernet(0x3a, &(0x7f0000000580)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x5, 0x6, 0x0, @private=0xa010102, @broadcast, {[@generic={0x7, 0x3, '\x00'}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x7}}}}}}, 0x0) unshare(0x40000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x18, 0x6, "9b98893cf25f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$sock(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x803}}], 0x18}}], 0x1, 0x20000844) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c9, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001"], 0xd0}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000fc0200000a68000000030a01080005000000000000010000000900030073797a30000000000900010073797a30000000000c00024000000000000000010900010073797a30000000000800ffff6e6174000e000c0095ba6bb076d74852459a00000b00070066696c7465720000"], 0x90}, 0x1, 0x0, 0x0, 0x4001}, 0x10000884) 7.385104654s ago: executing program 2 (id=493): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000205804"], 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}}, 0x20008841) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0xd) (fail_nth: 2) 6.750475026s ago: executing program 0 (id=496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2b002dbd7000fddbdf2501000000000000000741000000140018000000107564703ac3e062ad2134"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5, {0x8000}}, './file0\x00'}) io_uring_enter(r6, 0x4a5d, 0x2b12, 0x0, &(0x7f0000000280)={[0x5]}, 0x8) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(0x0, 0xecf86c37d53049cc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r8) r9 = getpgid(0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/9) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000100)=r9) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 6.584860799s ago: executing program 3 (id=498): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xf2fe, 0x0, 0x1, 0x250}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x30, 0x2, r7, 0x0, 0x0, 0x0, 0x40, 0x1, {0x1}}) io_uring_enter(r1, 0x8aa, 0x0, 0x4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.40890115s ago: executing program 0 (id=499): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="d91750000000503bfc8c51a84c6fab6a95b70dac52e6631d6ee1d0296234ebdfe63c2c738d4e39af11dcc3a9dc84ab97594baf578b84e28948cfc1b1151ad0baba21a358689875b152fedf8eff0884f435fc06a41c6c"], 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600010d4bb505240000000d240f0100000000000000000006241a000000052401000009058103000000fb00090401"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) (async) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x2}) syz_open_pts(r0, 0x8000) (async) syz_open_pts(r0, 0x8000) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB="8a6604ee95cd295c6a3755cd64241ca413f68d0cec6c2415e2ea467de1cfd4eed2e1dd710415463af5093f2ce3227be3c4c2d47f2d6ffe858cea019cd8ae564c64a30b3ed6ecc85eb58b9c03d9d098a646220480b11b084b7ce3fc4ed05de9aa6c5745795b91fefa63bb895812168d5416fc440e86dea57326ee67f76c524562e6039f39e43745bcbe9da050eb46b3f2a1c2f2177c506ebadcda9e5ba7a824b5ffd4ba18844408956d14469e7f20506ca66afe41d43325584d1b9efa4c40"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB="8a6604ee95cd295c6a3755cd64241ca413f68d0cec6c2415e2ea467de1cfd4eed2e1dd710415463af5093f2ce3227be3c4c2d47f2d6ffe858cea019cd8ae564c64a30b3ed6ecc85eb58b9c03d9d098a646220480b11b084b7ce3fc4ed05de9aa6c5745795b91fefa63bb895812168d5416fc440e86dea57326ee67f76c524562e6039f39e43745bcbe9da050eb46b3f2a1c2f2177c506ebadcda9e5ba7a824b5ffd4ba18844408956d14469e7f20506ca66afe41d43325584d1b9efa4c40"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) socket$inet6(0xa, 0x2, 0x0) (async) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e24, 0x8000, @empty}, 0x1c) 5.804701526s ago: executing program 0 (id=501): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) getuid() (async) r0 = getuid() mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x204008, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d76697274696f2c706f73697861636c2c69676e6f726571762c63616368653d6d6d61702c63616368657461673d2f2d2c616669643d3078303030303030303030303030306165662c646972656374696f2c63616368653d667363616368652c63616368657461673d2d23262cf82e2c667363616368652c736d61636b6673666c6f6f723d2f2c657569643c", @ANYRESDEC=r0, @ANYBLOB="1a0061359e99b6f461f28c55ba69d581e7ce588fc3d9552cfd9baa69e04f00b44b10be81a4042e31b05f9f44f128a2af94bb19fef529a28923b16c69c1793dc0127027c0a35d36a3d00692f726b34aa5811226533f88bc1725977223"]) r1 = socket$inet6(0xa, 0x80001, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r2, 0x0) (async) setpgid(r2, 0x0) getpgid(r2) (async) r3 = getpgid(r2) setpgid(0x0, r3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x802, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x4005, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) (async) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x43) socket$inet(0x2, 0x6, 0x7) readlink(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0) (async) readlink(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r4, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f00000002c0)) (async) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f00000002c0)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r6, &(0x7f0000000180)="ae2aaf47e6915788063f9a9cd27f7556e8e4163f119786c59f7e0b60f14c7c2df61d28a76d53b4fdb5bb1944f1f873f61c9d80cd87de7f2c8cc3387dcd2ad9f1c590ee1d2e7da487bf54f2fb882e741095fc97edad0f53e2e7cf148fa1fc14a89c1d", 0x62) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xd, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfe86, 0x7, 0x9}, {0x6, 0x24, 0x1a, 0x7f}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xf, 0x0, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x0, 0x7}}}}}}}]}}, 0x0) (async) r7 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xd, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfe86, 0x7, 0x9}, {0x6, 0x24, 0x1a, 0x7f}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xf, 0x0, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x0, 0x7}}}}}}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) 4.095937642s ago: executing program 1 (id=503): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000ba00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.032887832s ago: executing program 4 (id=504): socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f00000029c0)=0x0, &(0x7f0000002a00)=0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$kcm(0x2, 0x200000000000001, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x100000001) io_submit(0x0, 0x0, &(0x7f0000000340)) 4.011646658s ago: executing program 2 (id=505): prlimit64(0x0, 0xe, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x6, 0x0) unshare(0x2c020400) socket$alg(0x26, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e0000002"], 0x54}}, 0x0) 3.86884746s ago: executing program 1 (id=506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000202010200000000000000060007400000"], 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x80) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000680)) ioctl$IOMMU_VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000042c0)={0x2020}, 0x2020) rseq(&(0x7f0000000540), 0x20, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x15, 0x5, 0x0) getsockname$packet(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) epoll_create1(0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000001940)) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x3, {0x0, 0xff, 0x4}, 0xfe}, 0x18) r6 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0xb, 0x4) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000500)) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f38437", 0x7}], 0x1}, 0x48005) 3.21533464s ago: executing program 4 (id=507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) timer_create(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000c, 0x10012, r3, 0x0) mq_timedreceive(r3, 0x0, 0x0, 0xff, &(0x7f00000001c0)) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}]}}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="10020000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf250300000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400d100000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES64=0x0, @ANYBLOB="640102806c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c000400ff0f01fe0c000000040029030e00000005000007010000000300b1081e2a63307f0009060800000002000e095f020000bf00070a040000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="64b500292db4ad546b8c1124000100656e61626c656400000000000000000000000000000000000000000400000000050003000600000004000400080006cf35171c00", @ANYRES32=r0, @ANYBLOB], 0x210}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 3.16481035s ago: executing program 3 (id=508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r2 = syz_open_pts(r1, 0x101) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) execve(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000001280)={[&(0x7f0000000140)='@\x00', &(0x7f0000001240)='netdevsim']}, &(0x7f0000001500)={[0x0, &(0x7f0000001440)='/dev/ptmx\x00', &(0x7f00000014c0)='-(#!)\x00']}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) fsopen(&(0x7f0000000280)='gfs2\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r5, 0x0, 0x4048080) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) write$UHID_INPUT(r3, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r8, 0x0, 0x10000, 0x0, 0x9, 0x2a7345, 0x20d37}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r8, 0x0, 0x10000, 0x0, 0x8, 0x209312, 0x23bf6a}) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 2.616651495s ago: executing program 4 (id=509): openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000000c0)=0xf, 0x4) fsopen(&(0x7f0000000340)='hfs\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) bind$inet(0xffffffffffffffff, &(0x7f0000002100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003740)="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", 0x5c1}], 0x1}}], 0x2, 0x240080a0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12) sendmmsg(0xffffffffffffffff, &(0x7f0000006180), 0x0, 0x1) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r3}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000080ff0000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000ff0f00850000001500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000200)=r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) 2.344825936s ago: executing program 0 (id=510): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x589, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw8={"10b15acbcc8887f7573d35b7"}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x3b2, @time={0x65757100, 0x75653100}, 0x0, {0x3}, 0x0, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0xfffffff8, 0x0, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x80c5}, 0x44850) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, 0x0}) 2.280156263s ago: executing program 1 (id=511): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000100218110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000240)) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2.212635465s ago: executing program 3 (id=512): ioperm(0x9, 0x499, 0x101) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010300000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000150a010200000000fa00000000000000080003400000000615cdcaccbeb7d997e37107cade19ccf41140c96f98f188fb59a445520576f9cc895dbf90b998557783d14daee339b80fbfc0c130a7ff495d29466b1995963f816a1250fc0aa32deb85bdb7d23fea7333ef5bf0ddba600ef47e1047a0f99b83581396f0e23e289e90a2143d"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sync() r2 = memfd_create(&(0x7f00000011c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1}d\xc8\x85H\t\x00\x00\x00\x1ae\xe0\xdb\xb8l\x14\x19\x02\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80\x87q2\xe1\x1d\bBz8Z\xd2}\xf5\xe4\x9f\xb5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x02\xd8\xa2\x12\x8cR4\xed2\x82\x05?:\xe5\xc6', 0x2) fsetxattr$security_ima(r2, &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x11}, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000100)=0x11) 2.14448413s ago: executing program 2 (id=513): shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, 0x0, 0x0, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) timerfd_create(0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) gettid() ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x46, 0xa, 0x0, "3269c546da0d00000000000000000004000000037b3e9b7fee418700", 0x38414762}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x3c}}, 0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) keyctl$negate(0xd, r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0xc2, 0x7, 0x1, 0x300, 0x7, 0x200000, r2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB="0200"/20], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 956.136771ms ago: executing program 4 (id=514): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) select(0x40, &(0x7f00000000c0)={0x9, 0xa1db, 0x0, 0x1b7, 0xb, 0x28a, 0x4, 0x9}, &(0x7f0000000100)={0x8, 0x3, 0x8, 0x101, 0x9, 0x9f7, 0x4, 0xe68e}, &(0x7f0000000240)={0xf3b0, 0x400, 0x81a, 0x7, 0x354, 0x101, 0x6, 0x4}, &(0x7f0000000280)={0x77359400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000540)={0x780, 0xf0, 0x140, 0x240, 0xde25, 0xfffffffb, 0xf, 0x1, {0xfffffffc, 0xf, 0x1}, {0x1, 0x3}, {0x1, 0x1}, {0x8, 0x2, 0x1}, 0x2, 0x100, 0x1, 0x9, 0x1, 0x6, 0x5, 0x2, 0x100, 0x1, 0x295, 0x8, 0x4, 0x100, 0x2, 0xb}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() move_pages(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000002c0)=[0x0], 0x6) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa803) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2275, &(0x7f00000018c0)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c300"}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r7) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd00090503020002"], 0x0) ioctl$EVIOCRMFF(r7, 0x550c, 0x0) 884.351789ms ago: executing program 3 (id=515): write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xc) r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @default}, [@default, @bcast, @rose, @bcast, @default, @rose, @remote, @rose]}, &(0x7f0000000200)=0x48) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000280), &(0x7f00000002c0)=0x40) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8005, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0xc0a85320, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200010808060001080006040002ffffffffffffac1e0101ed7918d2c44de0000002"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x33524742, 0x1, @discrete={0x5, 0x2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000000000007111bb00000000008510000002000000850000007d06000095003300000000009500a505000000b7313c965af10f147100"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x7, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x36, 0x2, 0x7fff}}}}]}, 0x44}}, 0x4004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, 0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='target_cmd_complete\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 840.832196ms ago: executing program 2 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0xff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x42000000) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee5, 0x30, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x185) fcntl$setlease(r4, 0x400, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r5 = syz_open_dev$sg(&(0x7f0000002900), 0xe6, 0x80e00) ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0) unlink(&(0x7f0000000180)='./file0\x00') r6 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x6c, 0x1, 0x7, 0x1, 0x2, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x89, 0x6, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x1, 0x2}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xdb, 0x7, 0x4, 0x40, 0x2}, 0x3a, &(0x7f0000000100)={0x5, 0xf, 0x3a, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x1, 0x4, 0x2, 0xf}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x0, 0x9, 0x3, 0x8}, @wireless={0xb, 0x10, 0x1, 0x8, 0x86, 0x7, 0x9, 0x7, 0x7e}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x5, 0x3, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x5, 0x80, 0x1}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x459}}, {0xf, &(0x7f0000000700)=@string={0xf, 0x3, "47ec6afa3a224ea8f600000000"}}]}) syz_usb_control_io$printer(r6, &(0x7f0000000380)={0x14, &(0x7f0000000340)={0x40, 0xe, 0x2e, {0x2e, 0x5, "637f3d19727f8797c66e21db8fd36ad6372db2aa2d579b5c1b7482cbf0a5ed9490540c74bf3bfd8e6fe9c004"}}, &(0x7f0000000400)={0x0, 0x3, 0x9d, @string={0x9d, 0x3, "a3095bd406767ee7879eeba23239910aa771d1dd9007878ec65fbdbd645ced4b5860212000ce60a5d6dc3ed7ccf71473218bc5aa0918767b672ca8fa5b30f54169deef7f25058e12e56099791aca33ad357c0f0d785c443a09232d3fbe808f334fc7da7e0b6dd8a854f26af55e00e41c28aa3ed477d412d2790efa96d905249e9dd276427ac44625efcdeab4ea16952463b9428ac79ef4b2f27b72"}}}, &(0x7f00000006c0)={0x34, &(0x7f00000004c0)={0x0, 0x10}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x94, {0x92, "2864c0c287e0777ef938475825004211f930a7fef1c3a8681b41feeea60f5fd8339fe05af722a40609c2f70ddb1af4c054f45ef797e4b1829796e3e416deeb51a54b1dafa5e4c6ff65affeeab2f943f121c99499a48b895b87ddfcfe4870b18a973d1ca13db762581dc2f11f468eb474003872e8f255d8825dec3ef11cdfe659dbee0ac23ae9c536f6797f154b088877d2d4"}}, &(0x7f0000000640)={0x20, 0x1, 0x1, 0x40}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0x6}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) 734.970585ms ago: executing program 1 (id=517): socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f00000029c0)=0x0, &(0x7f0000002a00)=0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$kcm(0x2, 0x200000000000001, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x100000001) io_submit(0x0, 0x0, &(0x7f0000000340)) 137.311629ms ago: executing program 1 (id=518): listen(0xffffffffffffffff, 0x9) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) close_range(r0, r1, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x2}) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0xfb}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000140)=0x2) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x4040000) 0s ago: executing program 1 (id=519): clock_settime(0x0, &(0x7f0000000180)={0x77359400}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x2) bind$unix(r2, &(0x7f00000001c0)=@abs={0x1}, 0xb) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="94010000eeb730f46794daaa161a9c9ee0b6d6d3f278f9ca9243868f0a3a318ef09cd36732aa518397987b15b4ad679f5bfe317a54cfc679357ed1fcdd016c7a1d7c50d5431eedac6059f3bd6ed163e9cd2776738824663bc8608ef606f41b2ee0b283efbf4b2d6cebb6d5420bd9b77706311cd2cdbc6cd38a698ea15e8bad60fb7bba2d748a02adebc81c8e396ec31bd31d3ff7b37810fb3a9764419992b94e450e940c499d4737486181edb49d010cfcdaf012352063dd16502f253039f27b0b63ac3ebbb46de8a455", @ANYRES16=r9, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x40081}, 0x4000050) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000180)=0x10) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000180023001d01000008002a004816bb761ffb390cb164b819c06905d161f4966acdf85216fc65634854a62ab79167efc63055e956e448229892", @ANYRES32=r0, @ANYRESOCT=r3, @ANYRES32=r4, @ANYRESDEC=r8, @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): ewly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.924064][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.934097][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.946772][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.956764][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.967561][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.980719][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.993537][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.996885][ T5913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49132 sclass=netlink_route_socket pid=5913 comm=syz.3.8 [ 59.002777][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.024887][ T5825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.034068][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.062691][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.080319][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.092278][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.105791][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.128477][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.145957][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.169355][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.187659][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.207349][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.318404][ T5816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.346770][ T5816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.356461][ T5816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.376854][ T5816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.503913][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.542013][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.559896][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.571985][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.618573][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.642661][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.655080][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.659903][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.751987][ T3788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.782285][ T3788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.899406][ T3788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.918826][ T3788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.989583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.998193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.006721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.728568][ T5831] Bluetooth: hci0: command tx timeout [ 60.728852][ T972] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 60.738508][ T55] Bluetooth: hci3: command tx timeout [ 60.749487][ T5831] Bluetooth: hci4: command tx timeout [ 60.757546][ T5831] Bluetooth: hci1: command tx timeout [ 60.757628][ T5830] Bluetooth: hci2: command tx timeout [ 60.810277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.818898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 60.827472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.835846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.889926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.910525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.919642][ T972] usb 4-1: device descriptor read/64, error -71 [ 60.979484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 61.400218][ T972] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 61.707563][ T5958] process 'syz.0.13' launched '/dev/fd/4' with NULL argv: empty string added [ 61.956647][ T972] usb 4-1: device descriptor read/64, error -71 [ 62.349788][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 62.349804][ T30] audit: type=1400 audit(1742403116.898:182): avc: denied { ioctl } for pid=5953 comm="syz.1.2" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8066 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.499662][ T972] usb usb4-port1: attempt power cycle [ 62.739417][ T5868] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 62.859517][ T5830] Bluetooth: hci1: command tx timeout [ 62.865646][ T5830] Bluetooth: hci3: command tx timeout [ 62.871078][ T5831] Bluetooth: hci4: command tx timeout [ 62.876464][ T5831] Bluetooth: hci0: command tx timeout [ 62.881905][ T5832] Bluetooth: hci2: command tx timeout [ 63.189425][ T30] audit: type=1400 audit(1742403117.768:183): avc: denied { write } for pid=5936 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.239690][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 63.266391][ T5868] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 63.293603][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.301988][ T30] audit: type=1400 audit(1742403117.768:184): avc: denied { add_name } for pid=5936 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.328164][ T5868] usb 1-1: config 0 descriptor?? [ 63.358299][ T30] audit: type=1400 audit(1742403117.878:185): avc: denied { prog_run } for pid=5970 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.953982][ T30] audit: type=1400 audit(1742403118.548:186): avc: denied { create } for pid=5975 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.085830][ T30] audit: type=1400 audit(1742403118.548:187): avc: denied { read append } for pid=5975 comm="syz.3.16" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 64.354288][ T5868] video4linux radio48: keene_cmd_main failed (-110) [ 64.452300][ T5868] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 64.492997][ T30] audit: type=1400 audit(1742403118.548:188): avc: denied { open } for pid=5975 comm="syz.3.16" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 64.547738][ T30] audit: type=1400 audit(1742403118.568:189): avc: denied { remove_name } for pid=5972 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=1849 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.577988][ T30] audit: type=1400 audit(1742403118.788:190): avc: denied { sqpoll } for pid=5975 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.606044][ T30] audit: type=1400 audit(1742403118.888:191): avc: denied { ioctl } for pid=5975 comm="syz.3.16" path="socket:[9225]" dev="sockfs" ino=9225 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.779417][ T5818] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 64.854195][ T5990] syz.4.18: attempt to access beyond end of device [ 64.854195][ T5990] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 64.910713][ T5961] usb 1-1: USB disconnect, device number 2 [ 64.951608][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 64.993012][ T5818] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 65.060484][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.086713][ T5818] usb 2-1: config 0 descriptor?? [ 65.918403][ T5818] video4linux radio48: keene_cmd_main failed (-110) [ 65.927480][ T5818] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 66.079600][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 66.381471][ T9] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 66.603235][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.651374][ T9] usb 1-1: config 0 descriptor?? [ 66.669042][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 67.619690][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 67.619705][ T30] audit: type=1400 audit(1742403121.568:204): avc: denied { execute } for pid=6018 comm="syz.4.24" dev="tmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.839363][ T30] audit: type=1400 audit(1742403121.568:205): avc: denied { execute_no_trans } for pid=6018 comm="syz.4.24" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.883867][ T5818] usb 2-1: USB disconnect, device number 2 [ 67.954578][ T30] audit: type=1400 audit(1742403122.208:206): avc: denied { unlink } for pid=6023 comm="rm" name="resolv.conf.lapb4.ipv4ll" dev="tmpfs" ino=1885 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.054865][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 68.073152][ T9] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 68.116163][ T9] usb 1-1: media controller created [ 68.180609][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 68.227073][ T9] gp8psk_fe: Frontend attached [ 68.235440][ T30] audit: type=1400 audit(1742403122.828:207): avc: denied { mounton } for pid=6043 comm="syz.1.29" path="/4/bus" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.266659][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 68.276156][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 68.350511][ T9] gp8psk: usb in 138 operation failed. [ 68.356284][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 68.396200][ T6011] netlink: 240 bytes leftover after parsing attributes in process `syz.0.22'. [ 68.405233][ T9] gp8psk: found Genpix USB device pID = 203 (hex) [ 68.441442][ T6011] macvtap1: entered promiscuous mode [ 68.574913][ T9] usb 1-1: USB disconnect, device number 3 [ 68.636429][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 68.728681][ T30] audit: type=1400 audit(1742403123.308:208): avc: denied { create } for pid=6055 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 68.810120][ T5868] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 68.822840][ T6068] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.845567][ T30] audit: type=1400 audit(1742403123.438:209): avc: denied { write } for pid=6055 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.009504][ T5868] usb 2-1: device descriptor read/64, error -71 [ 69.076382][ T6069] netlink: 64 bytes leftover after parsing attributes in process `syz.2.32'. [ 69.335810][ T5868] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 69.488355][ T30] audit: type=1400 audit(1742403124.058:210): avc: denied { name_bind } for pid=6072 comm="syz.2.33" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 69.587274][ T30] audit: type=1400 audit(1742403124.058:211): avc: denied { node_bind } for pid=6072 comm="syz.2.33" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 69.711047][ T5868] usb 2-1: device descriptor read/64, error -71 [ 69.901494][ T5868] usb usb2-port1: attempt power cycle [ 70.723191][ T30] audit: type=1400 audit(1742403125.308:212): avc: denied { create } for pid=6086 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 70.826151][ T30] audit: type=1400 audit(1742403125.418:213): avc: denied { read } for pid=6086 comm="syz.3.36" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 70.965440][ T6085] random: crng reseeded on system resumption [ 70.971742][ T5868] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 70.992022][ T5868] usb 2-1: device descriptor read/8, error -71 [ 71.058494][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.065192][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.113557][ T6087] vlan2: entered promiscuous mode [ 71.118603][ T6087] bridge0: entered promiscuous mode [ 71.124001][ T6087] vlan2: entered allmulticast mode [ 71.129090][ T6087] bridge0: entered allmulticast mode [ 71.903148][ T5868] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 72.067752][ T5868] usb 2-1: device descriptor read/8, error -71 [ 72.169633][ T5868] usb usb2-port1: unable to enumerate USB device [ 72.274138][ T6122] netlink: 'syz.1.43': attribute type 11 has an invalid length. [ 72.519650][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 72.531960][ T5967] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.719661][ T5967] usb 5-1: Using ep0 maxpacket: 16 [ 72.772029][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.45'. [ 73.211984][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 73.232507][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.234360][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 73.257691][ T9] usb 4-1: config 0 descriptor?? [ 73.261070][ T5967] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 73.301222][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 73.340239][ T5967] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 73.436375][ T5967] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 73.445565][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.456581][ T5967] usb 5-1: Product: syz [ 73.461691][ T5967] usb 5-1: Manufacturer: syz [ 73.466752][ T5967] usb 5-1: SerialNumber: syz [ 73.478204][ T5967] usb 5-1: config 0 descriptor?? [ 73.485018][ T6112] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 73.503568][ C1] port100 5-1:0.0: NFC: Urb failure (status -71) [ 73.514330][ T5967] port100 5-1:0.0: NFC: Could not get supported command types [ 73.560631][ T6143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6143 comm=syz.1.46 [ 73.578418][ T6143] netlink: 'syz.1.46': attribute type 1 has an invalid length. [ 73.702559][ T9] ath6kl: Unsupported hardware version: 0x0 [ 73.755053][ T9] ath6kl: Failed to init ath6kl core: -22 [ 73.794178][ T9] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 74.524401][ T6106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.538199][ T6106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.591904][ T6111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.611764][ T6111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.634335][ T9] usb 5-1: USB disconnect, device number 2 [ 74.702245][ T5868] usb 4-1: USB disconnect, device number 5 [ 74.858555][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 74.858570][ T30] audit: type=1400 audit(1742403129.448:226): avc: denied { watch } for pid=6168 comm="syz.1.51" path="/11" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.957259][ T30] audit: type=1400 audit(1742403129.478:227): avc: denied { watch_reads } for pid=6168 comm="syz.1.51" path="/newroot/11" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.979919][ C1] vkms_vblank_simulate: vblank timer overrun [ 75.063642][ T30] audit: type=1400 audit(1742403129.488:228): avc: denied { write } for pid=6169 comm="syz.2.52" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.263077][ T30] audit: type=1400 audit(1742403129.858:229): avc: denied { read } for pid=6188 comm="syz.4.56" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 75.422097][ T30] audit: type=1400 audit(1742403130.018:230): avc: denied { create } for pid=6188 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 75.435572][ T26] IPVS: starting estimator thread 0... [ 75.494271][ T30] audit: type=1400 audit(1742403130.088:231): avc: denied { mounton } for pid=6199 comm="syz.1.58" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 75.506612][ T6200] gfs2: not a GFS2 filesystem [ 75.548696][ T30] audit: type=1400 audit(1742403130.138:232): avc: denied { write } for pid=6185 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 75.569526][ T6197] IPVS: using max 26 ests per chain, 62400 per kthread [ 75.795326][ T30] audit: type=1400 audit(1742403130.388:233): avc: denied { append } for pid=6185 comm="syz.0.54" name="sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.821837][ T30] audit: type=1400 audit(1742403130.418:234): avc: denied { ioctl } for pid=6185 comm="syz.0.54" path="/dev/sg0" dev="devtmpfs" ino=732 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.846931][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.190976][ T10] cfg80211: failed to load regulatory.db [ 76.243159][ T6189] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.267612][ T30] audit: type=1400 audit(1742403130.858:235): avc: denied { create } for pid=6199 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 76.331593][ T6189] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.572637][ T6189] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.649578][ T6189] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.664673][ T6189] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 76.745459][ T6189] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 76.764122][ T6189] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.778141][ T6189] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.802571][ T6189] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.819243][ T6189] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.838902][ T6189] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 76.850737][ T6189] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 76.877190][ T6189] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 76.884575][ T6189] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 76.896674][ T6189] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 77.223985][ T6215] gfs2: not a GFS2 filesystem [ 77.251083][ T5869] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.258996][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 77.428269][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0 [ 77.450696][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 77.475078][ T5869] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 77.503588][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.619891][ T10] usb 1-1: config 1 interface 0 altsetting 108 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.685543][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.776502][ T5869] usb 3-1: config 0 descriptor?? [ 77.781907][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 77.951226][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 77.960502][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.968490][ T10] usb 1-1: Product: syz [ 78.234096][ T10] usb 1-1: Manufacturer: 頻∺ꡎö [ 78.257910][ T10] usb 1-1: SerialNumber: syz [ 78.274564][ T5869] (null): keene_cmd_main failed (-71) [ 78.301738][ T5869] video4linux radio48: keene_cmd_main failed (-71) [ 78.308276][ T5869] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 78.351494][ T5869] usb 3-1: USB disconnect, device number 2 [ 78.585153][ T6227] veth0_to_bond: entered promiscuous mode [ 79.238012][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 79.244978][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 79.251126][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 79.259735][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 79.339834][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 79.468896][ T6230] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 79.579650][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.914930][ T6227] bond0: (slave bond_slave_0): Releasing backup interface [ 80.123549][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 80.124933][ T30] audit: type=1400 audit(1742403134.708:247): avc: denied { read } for pid=6241 comm="syz.3.68" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.456762][ T30] audit: type=1400 audit(1742403134.718:248): avc: denied { open } for pid=6241 comm="syz.3.68" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.458709][ T6215] netlink: 'syz.4.61': attribute type 1 has an invalid length. [ 80.518297][ T30] audit: type=1400 audit(1742403134.758:249): avc: denied { write } for pid=6241 comm="syz.3.68" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.978056][ T30] audit: type=1400 audit(1742403135.568:250): avc: denied { write } for pid=6247 comm="syz.2.70" name="001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 81.177779][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'. [ 81.930534][ T30] audit: type=1400 audit(1742403135.838:251): avc: denied { create } for pid=6247 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.950230][ T30] audit: type=1400 audit(1742403135.838:252): avc: denied { setopt } for pid=6247 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.950278][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.975537][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.979483][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.987501][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 81.988842][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.086367][ T30] audit: type=1400 audit(1742403136.678:253): avc: denied { ioctl } for pid=6250 comm="syz.1.69" path="socket:[9680]" dev="sockfs" ino=9680 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 82.437573][ T30] audit: type=1400 audit(1742403136.918:254): avc: denied { bind } for pid=6250 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.651787][ T30] audit: type=1400 audit(1742403136.938:255): avc: denied { setopt } for pid=6250 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.839502][ T30] audit: type=1400 audit(1742403136.938:256): avc: denied { write } for pid=6250 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.654118][ T10] usb 1-1: can't set config #1, error -110 [ 84.047677][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.053805][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 84.059835][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.065813][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.194420][ T6272] Cannot find set identified by id 0 to match [ 84.256551][ T6273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.280881][ T6273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.500135][ T5967] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.579754][ T5961] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 84.633425][ T5868] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 84.741324][ T5961] usb 4-1: not running at top speed; connect to a high speed hub [ 84.758182][ T5961] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 84.852353][ T5961] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 84.870047][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 84.946648][ T5961] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.950589][ T5868] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.988826][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.029805][ T5868] usb 2-1: config 0 interface 0 has no altsetting 0 [ 85.035909][ T5961] usb 4-1: Product: 䄴奡렀楯諡῰䙲䧼跫蚷ု潾غ嫱猘ፍ▌묊刘䗂匲瑯቙樖䤃墡履ㅙꂀㅴ뾩ਂ驳ꨑ檑┕戨⫠䝌펣䏯䫸㰅펞 [ 85.114212][ T5868] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 85.123312][ T5961] usb 4-1: Manufacturer: 霎໶陚셗駀ও멘睪觰䤣⣁㬜 [ 85.251240][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.306642][ T5868] usb 2-1: config 0 descriptor?? [ 86.188730][ C0] raw-gadget.3 gadget.1: ignoring, device is not running [ 86.202043][ C0] raw-gadget.3 gadget.1: ignoring, device is not running [ 86.209973][ C0] raw-gadget.3 gadget.1: ignoring, device is not running [ 86.217669][ T5868] usbhid 2-1:0.0: can't add hid device: -32 [ 86.224766][ T5868] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 86.234897][ T5961] cdc_ncm 4-1:1.0: bind() failure [ 86.363528][ T5961] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 86.396725][ T5961] cdc_ncm 4-1:1.1: bind() failure [ 86.400830][ T5868] usb 2-1: USB disconnect, device number 7 [ 86.486306][ T5961] usb 4-1: USB disconnect, device number 6 [ 87.002495][ T6306] FAULT_INJECTION: forcing a failure. [ 87.002495][ T6306] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.079373][ T6306] CPU: 0 UID: 0 PID: 6306 Comm: syz.2.85 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 87.079400][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.079410][ T6306] Call Trace: [ 87.079415][ T6306] [ 87.079421][ T6306] dump_stack_lvl+0x16c/0x1f0 [ 87.079449][ T6306] should_fail_ex+0x50a/0x650 [ 87.079478][ T6306] _copy_from_user+0x2e/0xd0 [ 87.079496][ T6306] copy_msghdr_from_user+0x99/0x160 [ 87.079520][ T6306] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 87.079556][ T6306] ___sys_sendmsg+0xff/0x1e0 [ 87.079581][ T6306] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.079615][ T6306] ? __pfx_lock_release+0x10/0x10 [ 87.079637][ T6306] ? trace_lock_acquire+0x14e/0x1f0 [ 87.079663][ T6306] ? __fget_files+0x206/0x3a0 [ 87.079685][ T6306] __sys_sendmsg+0x16e/0x220 [ 87.079710][ T6306] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.079733][ T6306] ? __pfx___schedule+0x10/0x10 [ 87.079766][ T6306] do_syscall_64+0xcd/0x250 [ 87.079790][ T6306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.079813][ T6306] RIP: 0033:0x7f1dc5f8d169 [ 87.079827][ T6306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.079842][ T6306] RSP: 002b:00007f1dc6ea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.079857][ T6306] RAX: ffffffffffffffda RBX: 00007f1dc61a5fa0 RCX: 00007f1dc5f8d169 [ 87.079867][ T6306] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000003 [ 87.079877][ T6306] RBP: 00007f1dc6ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.079886][ T6306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.079895][ T6306] R13: 0000000000000000 R14: 00007f1dc61a5fa0 R15: 00007ffdc35dbbb8 [ 87.079915][ T6306] [ 87.344117][ T5868] usb 1-1: USB disconnect, device number 4 [ 87.691316][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 87.691331][ T30] audit: type=1400 audit(1742403142.158:258): avc: denied { create } for pid=6307 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 87.691360][ T30] audit: type=1400 audit(1742403142.168:259): avc: denied { ioctl } for pid=6307 comm="syz.1.86" path="socket:[9779]" dev="sockfs" ino=9779 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 88.144295][ T6308] block device autoloading is deprecated and will be removed. [ 88.644869][ T6308] syz.1.86: attempt to access beyond end of device [ 88.644869][ T6308] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 88.658249][ T30] audit: type=1400 audit(1742403142.908:260): avc: denied { connect } for pid=6309 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.319654][ T5869] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 90.053295][ T5869] usb 4-1: no configurations [ 90.098076][ T30] audit: type=1400 audit(1742403144.688:261): avc: denied { name_bind } for pid=6346 comm="syz.0.96" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 90.130972][ T5869] usb 4-1: can't read configurations, error -22 [ 90.299658][ T5869] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 90.490690][ T5869] usb 4-1: no configurations [ 90.495406][ T5869] usb 4-1: can't read configurations, error -22 [ 90.574945][ T5869] usb usb4-port1: attempt power cycle [ 90.729606][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 90.766891][ T6363] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.774822][ T6363] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.979441][ T5868] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.001768][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.009442][ T5869] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 91.014256][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.072677][ T5869] usb 4-1: no configurations [ 91.077380][ T5869] usb 4-1: can't read configurations, error -22 [ 91.136060][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 91.176184][ T5868] usb 3-1: config 1 interface 0 altsetting 108 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.219603][ T5868] usb 3-1: config 1 interface 0 has no altsetting 0 [ 91.226366][ T5869] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 91.257893][ T5868] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 91.270248][ T5869] usb 4-1: no configurations [ 91.279638][ T5869] usb 4-1: can't read configurations, error -22 [ 91.297911][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.308859][ T5869] usb usb4-port1: unable to enumerate USB device [ 91.321764][ T6363] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.330116][ T5868] usb 3-1: Product: syz [ 91.330775][ T6363] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.334788][ T5868] usb 3-1: Manufacturer: 頻∺ꡎö [ 91.334804][ T5868] usb 3-1: SerialNumber: syz [ 91.358717][ T6363] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.400932][ T6364] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 91.418181][ T6363] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.630197][ T5869] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.781217][ T30] audit: type=1400 audit(1742403146.378:262): avc: denied { create } for pid=6374 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.803088][ T30] audit: type=1400 audit(1742403146.398:263): avc: denied { bind } for pid=6374 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.844352][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.867253][ T5869] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 91.907553][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.954249][ T30] audit: type=1400 audit(1742403146.398:264): avc: denied { listen } for pid=6374 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.014262][ T5869] usb 5-1: config 0 descriptor?? [ 92.316175][ T30] audit: type=1400 audit(1742403146.418:265): avc: denied { connect } for pid=6374 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.322539][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 92.673483][ T5869] usbhid 5-1:0.0: can't add hid device: -71 [ 92.683769][ T5869] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 92.763253][ T30] audit: type=1400 audit(1742403146.418:266): avc: denied { write } for pid=6374 comm="syz.0.103" path="socket:[10682]" dev="sockfs" ino=10682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.787176][ T30] audit: type=1400 audit(1742403146.478:267): avc: denied { shutdown } for pid=6374 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.895049][ T5869] usb 5-1: USB disconnect, device number 3 [ 92.915307][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 93.221308][ T30] audit: type=1400 audit(1742403147.748:268): avc: denied { create } for pid=6390 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.382153][ T30] audit: type=1400 audit(1742403147.808:269): avc: denied { create } for pid=6392 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.402991][ T30] audit: type=1400 audit(1742403147.848:270): avc: denied { create } for pid=6392 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 93.496153][ T30] audit: type=1400 audit(1742403147.848:271): avc: denied { write } for pid=6392 comm="syz.0.107" path="socket:[10711]" dev="sockfs" ino=10711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 93.692533][ T30] audit: type=1400 audit(1742403147.848:272): avc: denied { nlmsg_read } for pid=6392 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 93.728477][ T30] audit: type=1400 audit(1742403148.278:273): avc: denied { accept } for pid=6401 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.775316][ T30] audit: type=1400 audit(1742403148.288:274): avc: denied { write } for pid=6401 comm="syz.0.111" path="socket:[9903]" dev="sockfs" ino=9903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.798788][ T30] audit: type=1400 audit(1742403148.288:275): avc: denied { create } for pid=6401 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 94.058882][ T6412] block device autoloading is deprecated and will be removed. [ 95.489385][ T5869] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.641454][ T5869] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.651815][ T5869] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.675901][ T5869] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 95.687257][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 95.718373][ T5869] usb 5-1: SerialNumber: syz [ 96.003108][ T6421] Bluetooth: MGMT ver 1.23 [ 96.236003][ T5868] usb 3-1: USB disconnect, device number 4 [ 96.387338][ T972] libceph: connect (1)[c::]:6789 error -101 [ 96.396490][ T972] libceph: mon0 (1)[c::]:6789 connect error [ 96.542384][ T6423] ceph: No mds server is up or the cluster is laggy [ 96.829705][ T6435] macsec0: entered promiscuous mode [ 97.896937][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 97.896951][ T30] audit: type=1400 audit(1742403152.488:288): avc: denied { bind } for pid=6439 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.908119][ T6414] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 98.111399][ T5869] usb 5-1: 0:2 : does not exist [ 98.129998][ T5869] usb 5-1: unit 5: unexpected type 0x0c [ 98.173866][ T5869] usb 5-1: USB disconnect, device number 4 [ 98.411450][ T6300] udevd[6300]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.432094][ T6457] netlink: 'syz.0.125': attribute type 10 has an invalid length. [ 98.479542][ T972] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 99.073879][ T30] audit: type=1400 audit(1742403153.138:289): avc: denied { read } for pid=6454 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.200468][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 99.559507][ T972] usb 2-1: Using ep0 maxpacket: 32 [ 99.585843][ T972] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 99.639550][ T972] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 99.639575][ T972] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 99.639595][ T972] usb 2-1: config 1 has no interface number 0 [ 99.639627][ T972] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.639651][ T972] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 99.639672][ T972] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 99.639706][ T972] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 99.639727][ T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.645832][ T972] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 99.899362][ T30] audit: type=1400 audit(1742403154.478:290): avc: denied { read write } for pid=6469 comm="syz.3.128" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 99.899407][ T30] audit: type=1400 audit(1742403154.478:291): avc: denied { open } for pid=6469 comm="syz.3.128" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 99.900365][ T972] snd_usb_pod 2-1:1.1: cannot start listening: -90 [ 99.900983][ T972] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 99.901192][ T972] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 99.986333][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 100.139387][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 100.146214][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 100.157505][ T26] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 100.171854][ T30] audit: type=1400 audit(1742403154.758:292): avc: denied { create } for pid=6477 comm="syz.0.131" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.192576][ T972] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 100.244929][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.254961][ T30] audit: type=1400 audit(1742403154.828:293): avc: denied { unlink } for pid=5824 comm="syz-executor" name="file0" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.333892][ T6484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.130'. [ 100.776078][ T26] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 100.787672][ T26] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 100.796953][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.809296][ T26] usb 5-1: Product: syz [ 100.818090][ T26] usb 5-1: Manufacturer: syz [ 100.828008][ T26] usb 5-1: SerialNumber: syz [ 100.835197][ T9] usb 2-1: USB disconnect, device number 8 [ 100.837418][ T26] usb 5-1: config 0 descriptor?? [ 100.851339][ T972] usb 3-1: Using ep0 maxpacket: 16 [ 100.867658][ T972] usb 3-1: config 1 interface 0 altsetting 108 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.885416][ T6467] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 100.919538][ T26] port100 5-1:0.0: NFC: Could not get supported command types [ 100.927095][ T972] usb 3-1: config 1 interface 0 has no altsetting 0 [ 100.941083][ T972] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 100.961146][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.976634][ T972] usb 3-1: Product: syz [ 101.019201][ T972] usb 3-1: Manufacturer: 頻∺ꡎö [ 101.037293][ T972] usb 3-1: SerialNumber: syz [ 101.041270][ T30] audit: type=1400 audit(1742403155.628:294): avc: denied { wake_alarm } for pid=6489 comm="syz.1.134" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.070409][ T6468] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 101.260990][ T9] usb 5-1: USB disconnect, device number 5 [ 101.956767][ T6497] random: crng reseeded on system resumption [ 102.950547][ T5961] IPVS: starting estimator thread 0... [ 103.049698][ T6506] IPVS: using max 25 ests per chain, 60000 per kthread [ 103.588601][ T30] audit: type=1400 audit(1742403158.178:295): avc: denied { mount } for pid=6508 comm="syz.3.139" name="/" dev="autofs" ino=10892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 103.650489][ T30] audit: type=1400 audit(1742403158.248:296): avc: denied { read } for pid=6508 comm="syz.3.139" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 103.687216][ T30] audit: type=1400 audit(1742403158.248:297): avc: denied { open } for pid=6508 comm="syz.3.139" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 103.814112][ T30] audit: type=1400 audit(1742403158.398:298): avc: denied { ioctl } for pid=6508 comm="syz.3.139" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 104.890846][ T30] audit: type=1400 audit(1742403159.408:299): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 104.979904][ T30] audit: type=1400 audit(1742403159.578:300): avc: denied { search } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.184001][ T30] audit: type=1400 audit(1742403159.658:301): avc: denied { connect } for pid=6522 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.224047][ T972] usb 3-1: USB disconnect, device number 5 [ 105.924457][ T30] audit: type=1400 audit(1742403160.518:302): avc: denied { mount } for pid=6528 comm="syz.2.146" name="/" dev="gadgetfs" ino=6664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 105.980565][ T5961] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 106.007671][ T6536] tipc: Started in network mode [ 106.013117][ T6536] tipc: Node identity ac1414aa, cluster identity 4711 [ 106.034465][ T6536] tipc: Enabled bearer , priority 10 [ 106.041224][ T30] audit: type=1400 audit(1742403160.548:303): avc: denied { unmount } for pid=6528 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 106.067242][ T30] audit: type=1400 audit(1742403160.638:304): avc: denied { ioctl } for pid=6537 comm="syz.3.148" path="socket:[10199]" dev="sockfs" ino=10199 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.139404][ T5961] usb 5-1: Using ep0 maxpacket: 8 [ 106.154238][ T6540] capability: warning: `syz.3.149' uses deprecated v2 capabilities in a way that may be insecure [ 106.154910][ T5961] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 106.184651][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.192786][ T5961] usb 5-1: Product: syz [ 106.196985][ T5961] usb 5-1: Manufacturer: syz [ 106.201860][ T5961] usb 5-1: SerialNumber: syz [ 106.217776][ T5961] usb 5-1: config 0 descriptor?? [ 106.430231][ T5961] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 106.691485][ T6531] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.697615][ T6531] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.706529][ T6531] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.713530][ T6531] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 106.842104][ T5961] usb write operation failed. (-71) [ 106.857619][ T5961] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 106.875177][ T5961] dvbdev: DVB: registering new adapter (Terratec H7) [ 106.885315][ T5961] usb 5-1: media controller created [ 106.891381][ T6551] Zero length message leads to an empty skb [ 106.900204][ T5961] usb read operation failed. (-71) [ 106.908957][ T5961] usb write operation failed. (-71) [ 106.955191][ T5961] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 107.002975][ T5961] usb 5-1: USB disconnect, device number 6 [ 107.249668][ T9] tipc: Node number set to 2886997162 [ 107.929427][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.694993][ T6583] syz.3.160: attempt to access beyond end of device [ 108.694993][ T6583] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 108.729832][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 108.735956][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.735975][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.719636][ T5869] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 109.733608][ T6600] random: crng reseeded on system resumption [ 109.899421][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 110.166540][ T5869] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 110.179059][ T5869] usb 2-1: can't read configurations, error -61 [ 110.303216][ T6610] bpf: Bad value for 'uid' [ 110.321181][ T5869] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 110.481256][ T6615] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.529870][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 110.529884][ T30] audit: type=1400 audit(1742403165.068:314): avc: denied { map } for pid=6614 comm="syz.0.171" path="socket:[11189]" dev="sockfs" ino=11189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 110.567290][ T30] audit: type=1400 audit(1742403165.068:315): avc: denied { accept } for pid=6614 comm="syz.0.171" path="socket:[11189]" dev="sockfs" ino=11189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 110.591505][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 110.601794][ T5869] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 110.609772][ T5869] usb 2-1: can't read configurations, error -61 [ 110.620410][ T5869] usb usb2-port1: attempt power cycle [ 110.988287][ T6629] syz.3.175: attempt to access beyond end of device [ 110.988287][ T6629] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 111.009446][ T5869] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 111.029280][ T5967] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.097639][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 111.239921][ T5869] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 111.257914][ T5869] usb 2-1: can't read configurations, error -61 [ 111.350921][ T5967] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.379364][ T5967] usb 3-1: config 0 has no interfaces? [ 111.386323][ T5967] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 111.389414][ T5869] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 111.403181][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.414920][ T5967] usb 3-1: Product: syz [ 111.419080][ T5967] usb 3-1: Manufacturer: syz [ 111.425066][ T5967] usb 3-1: SerialNumber: syz [ 111.429849][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 111.434528][ T5967] usb 3-1: config 0 descriptor?? [ 111.441416][ T5869] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 111.458458][ T5869] usb 2-1: can't read configurations, error -61 [ 111.591899][ T5869] usb usb2-port1: unable to enumerate USB device [ 111.808432][ T5869] usb 3-1: USB disconnect, device number 6 [ 112.003740][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.181'. [ 112.225560][ T5868] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 112.436315][ T30] audit: type=1400 audit(1742403167.028:316): avc: denied { create } for pid=6654 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.617197][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.632124][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.642218][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.657200][ T5868] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.666323][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.674590][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 112.733843][ T6658] ======================================================= [ 112.733843][ T6658] WARNING: The mand mount option has been deprecated and [ 112.733843][ T6658] and is ignored by this kernel. Remove the mand [ 112.733843][ T6658] option from the mount to silence this warning. [ 112.733843][ T6658] ======================================================= [ 112.773097][ T6658] VFS: could not find a valid V7 on nullb0. [ 113.124772][ T30] audit: type=1400 audit(1742403620.398:317): avc: denied { write } for pid=6654 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.228479][ T30] audit: type=1400 audit(1742403620.408:318): avc: denied { nlmsg_write } for pid=6654 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.329945][ T5868] usb 4-1: config 0 descriptor?? [ 113.464676][ T9] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 113.475914][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.495002][ T9] usb 2-1: config 0 descriptor?? [ 113.515294][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 113.562299][ T6661] random: crng reseeded on system resumption [ 113.966231][ T6667] vlan2: entered promiscuous mode [ 113.971609][ T6667] bridge0: entered promiscuous mode [ 113.978739][ T6667] vlan2: entered allmulticast mode [ 113.984209][ T6667] bridge0: entered allmulticast mode [ 114.097231][ T5868] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 114.109443][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.118774][ T30] audit: type=1400 audit(1742403621.688:319): avc: denied { bind } for pid=6642 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 114.146786][ T30] audit: type=1400 audit(1742403621.688:320): avc: denied { connect } for pid=6642 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 114.146970][ T5868] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 114.177173][ T9] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 114.186810][ T9] usb 2-1: media controller created [ 114.207763][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.232435][ T5868] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 114.253933][ T9] gp8psk_fe: Frontend attached [ 114.259110][ T9] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 114.275617][ T5868] usb 4-1: USB disconnect, device number 11 [ 114.284346][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 114.325752][ T6649] netlink: 268 bytes leftover after parsing attributes in process `syz.1.182'. [ 114.335096][ T9] gp8psk: usb in 138 operation failed. [ 114.340749][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 114.358913][ T9] gp8psk: found Genpix USB device pID = 203 (hex) [ 114.368890][ T9] usb 2-1: USB disconnect, device number 13 [ 115.340015][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 115.504900][ T5961] IPVS: starting estimator thread 0... [ 115.710369][ T6684] IPVS: using max 28 ests per chain, 67200 per kthread [ 116.189630][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.194'. [ 116.862010][ T30] audit: type=1400 audit(1742403624.448:321): avc: denied { ioctl } for pid=6706 comm="syz.2.195" path="socket:[11621]" dev="sockfs" ino=11621 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 117.141845][ T6716] syz.2.199 uses obsolete (PF_INET,SOCK_PACKET) [ 117.489567][ T972] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 117.596602][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 117.771858][ T972] usb 2-1: Using ep0 maxpacket: 16 [ 117.797650][ T972] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 117.799606][ T30] audit: type=1400 audit(1742403625.278:322): avc: denied { watch } for pid=6715 comm="syz.2.199" path="/46" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.900236][ T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 117.918203][ T30] audit: type=1400 audit(1742403625.278:323): avc: denied { watch_sb } for pid=6715 comm="syz.2.199" path="/46" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 117.941471][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 117.957715][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.958060][ T972] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 118.017296][ T972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.019347][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.025477][ T972] usb 2-1: Product: syz [ 118.062325][ T972] usb 2-1: Manufacturer: syz [ 118.063081][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 118.067173][ T972] usb 2-1: SerialNumber: syz [ 118.107700][ T972] usb 2-1: config 0 descriptor?? [ 118.109408][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 118.121170][ T972] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 118.136419][ T30] audit: type=1400 audit(1742403625.728:324): avc: denied { sys_module } for pid=6715 comm="syz.2.199" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 118.139386][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.174101][ T972] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 118.230235][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 118.256844][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 118.280373][ T9] usb 4-1: Manufacturer: syz [ 118.290083][ T9] usb 4-1: config 0 descriptor?? [ 118.309857][ T5961] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 118.344833][ T6726] random: crng reseeded on system resumption [ 118.484082][ T5961] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 118.495802][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.508231][ T5961] usb 5-1: config 0 descriptor?? [ 118.519049][ T5961] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 118.711326][ T9] rc_core: IR keymap rc-hauppauge not found [ 118.727129][ T9] Registered IR keymap rc-empty [ 118.731272][ T972] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 118.733185][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 118.738533][ T972] em28xx 2-1:0.0: Config register raw data: 0xd2 [ 118.759758][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 118.821091][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 118.858313][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 118.885835][ T30] audit: type=1400 audit(1742403626.478:325): avc: denied { read } for pid=5178 comm="acpid" name="event4" dev="devtmpfs" ino=2826 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.920902][ T30] audit: type=1400 audit(1742403626.478:326): avc: denied { open } for pid=5178 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2826 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.922474][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 118.930603][ T5961] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.958117][ T972] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 118.965276][ T30] audit: type=1400 audit(1742403626.478:327): avc: denied { ioctl } for pid=5178 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2826 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.975529][ T972] em28xx 2-1:0.0: No AC97 audio processor [ 118.995523][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 119.008123][ T5961] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 119.025170][ T5961] usb 5-1: media controller created [ 119.051523][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 119.055928][ T5961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.114875][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 119.156073][ T972] usb 2-1: USB disconnect, device number 14 [ 119.174978][ T5961] gp8psk_fe: Frontend attached [ 119.179430][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 119.184116][ T972] em28xx 2-1:0.0: Disconnecting em28xx [ 119.194053][ T5961] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 119.204590][ T6735] netlink: 156 bytes leftover after parsing attributes in process `syz.0.203'. [ 119.214548][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 119.216427][ T5961] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 119.235684][ T972] em28xx 2-1:0.0: Freeing device [ 119.239464][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 119.299912][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 119.317473][ T6736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.203'. [ 119.366138][ T6722] netlink: 268 bytes leftover after parsing attributes in process `syz.4.200'. [ 119.366644][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 119.375351][ T5961] gp8psk: usb in 138 operation failed. [ 119.442546][ T5961] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 119.443950][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 119.458049][ T5961] gp8psk: found Genpix USB device pID = 203 (hex) [ 119.574799][ T5961] usb 5-1: USB disconnect, device number 7 [ 119.580359][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 119.691544][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 119.728497][ T9] usb 4-1: USB disconnect, device number 12 [ 119.804818][ T5961] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 119.869073][ T30] audit: type=1400 audit(1742403627.458:328): avc: denied { accept } for pid=6739 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 119.905966][ T30] audit: type=1400 audit(1742403627.458:329): avc: denied { write } for pid=6739 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 119.936281][ T30] audit: type=1400 audit(1742403627.528:330): avc: denied { getopt } for pid=6739 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.226511][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.209'. [ 123.260059][ T6766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.352269][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 123.352300][ T30] audit: type=1400 audit(1742403630.938:333): avc: denied { bind } for pid=6769 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.815641][ T5961] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 124.084064][ T6782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.215'. [ 124.519838][ T5961] usb 2-1: device descriptor read/64, error -71 [ 124.551138][ T6766] bond1 (unregistering): Released all slaves [ 124.779426][ T5961] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 124.909402][ T5961] usb 2-1: device descriptor read/64, error -71 [ 125.027140][ T6791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.034279][ T5961] usb usb2-port1: attempt power cycle [ 125.079849][ T6794] random: crng reseeded on system resumption [ 125.239152][ T6791] bond1 (unregistering): Released all slaves [ 125.389448][ T5961] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 125.452576][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 125.458676][ T5961] usb 2-1: device descriptor read/8, error -71 [ 125.691214][ T30] audit: type=1400 audit(1742403633.288:334): avc: denied { write } for pid=6800 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 125.707678][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.223'. [ 125.711276][ T6803] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.737797][ T6803] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.746768][ T6803] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.755774][ T6803] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.747412][ T6829] FAULT_INJECTION: forcing a failure. [ 126.747412][ T6829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.761041][ T6829] CPU: 0 UID: 0 PID: 6829 Comm: syz.3.229 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 126.761062][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.761071][ T6829] Call Trace: [ 126.761076][ T6829] [ 126.761083][ T6829] dump_stack_lvl+0x16c/0x1f0 [ 126.761111][ T6829] should_fail_ex+0x50a/0x650 [ 126.761140][ T6829] _copy_to_user+0x32/0xd0 [ 126.761160][ T6829] simple_read_from_buffer+0xd0/0x160 [ 126.761187][ T6829] proc_fail_nth_read+0x198/0x270 [ 126.761212][ T6829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.761237][ T6829] ? rw_verify_area+0xcf/0x680 [ 126.761260][ T6829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.761283][ T6829] vfs_read+0x1df/0xbf0 [ 126.761308][ T6829] ? __fget_files+0x1fc/0x3a0 [ 126.761326][ T6829] ? __pfx___mutex_lock+0x10/0x10 [ 126.761349][ T6829] ? __pfx_vfs_read+0x10/0x10 [ 126.761380][ T6829] ? __fget_files+0x206/0x3a0 [ 126.761404][ T6829] ksys_read+0x12b/0x250 [ 126.761428][ T6829] ? __pfx_ksys_read+0x10/0x10 [ 126.761460][ T6829] do_syscall_64+0xcd/0x250 [ 126.761485][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.761508][ T6829] RIP: 0033:0x7fe2ca18bb7c [ 126.761522][ T6829] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 126.761537][ T6829] RSP: 002b:00007fe2caf4b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.761553][ T6829] RAX: ffffffffffffffda RBX: 00007fe2ca3a6160 RCX: 00007fe2ca18bb7c [ 126.761564][ T6829] RDX: 000000000000000f RSI: 00007fe2caf4b0a0 RDI: 0000000000000007 [ 126.761585][ T6829] RBP: 00007fe2caf4b090 R08: 0000000000000000 R09: 0000000000000000 [ 126.761594][ T6829] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000001 [ 126.761604][ T6829] R13: 0000000000000000 R14: 00007fe2ca3a6160 R15: 00007ffc5af53b98 [ 126.761627][ T6829] [ 128.101672][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.234'. [ 128.140446][ T6843] random: crng reseeded on system resumption [ 128.630245][ T6846] mmap: syz.0.231 (6846) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.644898][ T6850] netlink: 'syz.3.237': attribute type 11 has an invalid length. [ 128.741490][ T30] audit: type=1400 audit(1742403636.318:335): avc: denied { getopt } for pid=6849 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.760710][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.874378][ T6858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.899850][ T30] audit: type=1400 audit(1742403636.478:336): avc: denied { write } for pid=6847 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.394821][ T6858] bond1 (unregistering): Released all slaves [ 130.078684][ T6872] syz.0.242: attempt to access beyond end of device [ 130.078684][ T6872] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 131.042309][ T30] audit: type=1400 audit(1742403638.638:337): avc: denied { bind } for pid=6881 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 131.065620][ T30] audit: type=1400 audit(1742403638.638:338): avc: denied { name_bind } for pid=6881 comm="syz.4.245" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 131.087646][ T30] audit: type=1400 audit(1742403638.638:339): avc: denied { node_bind } for pid=6881 comm="syz.4.245" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 131.176429][ T30] audit: type=1400 audit(1742403638.658:340): avc: denied { listen } for pid=6881 comm="syz.4.245" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 131.196852][ T30] audit: type=1400 audit(1742403638.688:341): avc: denied { setopt } for pid=6881 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 131.196882][ T30] audit: type=1400 audit(1742403638.688:342): avc: denied { connect } for pid=6881 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 131.196910][ T30] audit: type=1400 audit(1742403638.688:343): avc: denied { name_connect } for pid=6881 comm="syz.4.245" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 131.196939][ T30] audit: type=1400 audit(1742403638.768:344): avc: denied { read write } for pid=6878 comm="syz.2.246" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 132.509742][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.516255][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.723764][ T6917] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.822272][ T6917] bond1 (unregistering): Released all slaves [ 133.262781][ T6925] syz.4.259: attempt to access beyond end of device [ 133.262781][ T6925] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 134.661624][ T5961] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 134.924117][ T5961] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 135.198043][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.242083][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.307664][ T6955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.268'. [ 135.392106][ T5961] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 135.599405][ T5961] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 135.638891][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.705491][ T5961] usb 2-1: config 0 descriptor?? [ 136.515165][ T6938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.546685][ T6938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.599840][ T6938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.617290][ T6938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.008390][ T5961] usb 2-1: string descriptor 0 read error: -71 [ 137.045610][ T5961] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 137.092370][ T5961] letsketch 0003:6161:4D15.0002: probe with driver letsketch failed with error -32 [ 137.106810][ T5868] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 137.117776][ T5961] usb 2-1: USB disconnect, device number 19 [ 137.429584][ T5868] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 137.479392][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.498311][ T5868] usb 3-1: config 0 descriptor?? [ 137.509401][ T5868] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 137.873704][ T6988] syz.1.277: attempt to access beyond end of device [ 137.873704][ T6988] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 138.059896][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.570207][ T5868] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 138.570680][ T6979] netlink: 240 bytes leftover after parsing attributes in process `syz.2.275'. [ 138.578920][ T5868] usb 3-1: media controller created [ 138.602177][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.655209][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'. [ 138.664469][ T5868] gp8psk_fe: Frontend attached [ 138.669550][ T5868] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 138.677682][ T5868] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 138.708324][ T5967] IPVS: starting estimator thread 0... [ 138.757163][ T5868] gp8psk: usb in 138 operation failed. [ 138.767232][ T5868] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 138.791218][ T5868] gp8psk: found Genpix USB device pID = 203 (hex) [ 138.798407][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 138.798420][ T30] audit: type=1400 audit(1742403646.388:349): avc: denied { read } for pid=6998 comm="syz.4.282" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 138.827875][ T6993] IPVS: using max 26 ests per chain, 62400 per kthread [ 138.837093][ T5868] usb 3-1: USB disconnect, device number 7 [ 138.849266][ T7000] vivid-000: disconnect [ 138.879005][ T30] audit: type=1400 audit(1742403646.388:350): avc: denied { open } for pid=6998 comm="syz.4.282" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 138.959394][ T30] audit: type=1400 audit(1742403646.448:351): avc: denied { ioctl } for pid=6998 comm="syz.4.282" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 138.986052][ T5868] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 139.018160][ T30] audit: type=1400 audit(1742403646.448:352): avc: denied { map } for pid=6998 comm="syz.4.282" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 139.229458][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 140.388551][ T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 140.433586][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.457182][ T10] usb 4-1: Product: syz [ 140.579374][ T10] usb 4-1: Manufacturer: syz [ 140.584122][ T30] audit: type=1400 audit(1742403648.168:353): avc: denied { shutdown } for pid=7017 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.599570][ T10] usb 4-1: SerialNumber: syz [ 140.796897][ T10] usb 4-1: config 0 descriptor?? [ 140.810982][ T10] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 141.068073][ T6992] vivid-000: reconnect [ 141.385212][ T5967] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 141.486659][ T10] gspca_sunplus: reg_r err -71 [ 141.493356][ T10] usb 4-1: USB disconnect, device number 13 [ 141.619658][ T5967] usb 2-1: device descriptor read/64, error -71 [ 141.620405][ T7040] net veth1_virt_wifi : renamed from virt_wifi0 [ 141.949399][ T5967] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 142.109520][ T5967] usb 2-1: device descriptor read/64, error -71 [ 142.219766][ T5967] usb usb2-port1: attempt power cycle [ 142.489530][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 142.570191][ T30] audit: type=1400 audit(1742403650.158:354): avc: denied { open } for pid=7069 comm="syz.4.297" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 142.719501][ T5967] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 142.740306][ T5967] usb 2-1: device descriptor read/8, error -71 [ 142.933491][ T7076] syz.2.299: attempt to access beyond end of device [ 142.933491][ T7076] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 142.939581][ T7075] netlink: 10 bytes leftover after parsing attributes in process `syz.3.298'. [ 142.989374][ T30] audit: type=1400 audit(1742403650.158:355): avc: denied { ioctl } for pid=7069 comm="syz.4.297" path="/dev/ptyqd" dev="devtmpfs" ino=132 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 143.049620][ T5967] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 143.103559][ T5967] usb 2-1: device descriptor read/8, error -71 [ 143.129418][ T30] audit: type=1400 audit(1742403650.488:356): avc: denied { listen } for pid=7063 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.223456][ T7083] vcan0 speed is unknown, defaulting to 1000 [ 143.230181][ T30] audit: type=1400 audit(1742403650.818:357): avc: denied { mount } for pid=7082 comm="syz.4.300" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 143.240460][ T5967] usb usb2-port1: unable to enumerate USB device [ 143.474487][ T7083] vcan0 speed is unknown, defaulting to 1000 [ 143.485038][ T7083] vcan0 speed is unknown, defaulting to 1000 [ 144.387564][ T7083] infiniband syz2: set active [ 144.393906][ T5967] vcan0 speed is unknown, defaulting to 1000 [ 144.429044][ T7083] infiniband syz2: added vcan0 [ 144.448411][ T7083] syz2: rxe_create_cq: returned err = -12 [ 144.462915][ T7083] infiniband syz2: Couldn't create ib_mad CQ [ 144.517726][ T7083] infiniband syz2: Couldn't open port 1 [ 145.477234][ T7083] RDS/IB: syz2: added [ 145.481925][ T7083] smc: adding ib device syz2 with port count 1 [ 145.506752][ T7083] smc: ib device syz2 port 1 has pnetid [ 145.695038][ T5967] vcan0 speed is unknown, defaulting to 1000 [ 145.728405][ T7083] vcan0 speed is unknown, defaulting to 1000 [ 147.085398][ T7083] vcan0 speed is unknown, defaulting to 1000 [ 147.105097][ T30] audit: type=1400 audit(1742403654.698:358): avc: denied { mounton } for pid=7129 comm="syz.2.311" path="/67/file0" dev="tmpfs" ino=375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.186818][ T7132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.312'. [ 147.425888][ T7136] vlan2: entered promiscuous mode [ 147.435667][ T7136] bridge0: entered promiscuous mode [ 147.443745][ T7136] vlan2: entered allmulticast mode [ 147.710921][ T7136] bridge0: entered allmulticast mode [ 147.787873][ T30] audit: type=1400 audit(1742403655.378:359): avc: denied { watch_mount } for pid=7117 comm="syz.3.308" path="/74" dev="tmpfs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 148.118382][ T7141] NILFS (nullb0): couldn't find nilfs on the device [ 149.139975][ T7083] vcan0 speed is unknown, defaulting to 1000 [ 149.395196][ T7083] vcan0 speed is unknown, defaulting to 1000 [ 149.564417][ T972] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 149.817504][ T972] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 149.901073][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.906688][ T7083] vcan0 speed is unknown, defaulting to 1000 [ 149.913442][ T972] usb 3-1: Product: syz [ 149.919641][ T972] usb 3-1: Manufacturer: syz [ 149.924325][ T972] usb 3-1: SerialNumber: syz [ 149.934909][ T972] usb 3-1: config 0 descriptor?? [ 149.955059][ T972] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 150.213463][ T30] audit: type=1400 audit(1742403657.798:360): avc: denied { view } for pid=7151 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 150.304941][ T7166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.320'. [ 150.793243][ T972] gspca_sunplus: reg_r err -71 [ 150.802430][ T972] usb 3-1: USB disconnect, device number 8 [ 153.612715][ T7199] vlan2: entered promiscuous mode [ 153.617924][ T7199] bridge0: entered promiscuous mode [ 153.624860][ T7199] vlan2: entered allmulticast mode [ 153.630337][ T7199] bridge0: entered allmulticast mode [ 153.911342][ T7204] FAULT_INJECTION: forcing a failure. [ 153.911342][ T7204] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 153.925264][ T7204] CPU: 0 UID: 0 PID: 7204 Comm: syz.1.331 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 153.925286][ T7204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.925296][ T7204] Call Trace: [ 153.925302][ T7204] [ 153.925308][ T7204] dump_stack_lvl+0x16c/0x1f0 [ 153.925336][ T7204] should_fail_ex+0x50a/0x650 [ 153.925362][ T7204] ? __pfx___might_resched+0x10/0x10 [ 153.925392][ T7204] should_fail_alloc_page+0xe7/0x130 [ 153.925413][ T7204] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 153.925443][ T7204] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 153.925468][ T7204] ? __schedule+0x3c65/0x5890 [ 153.925489][ T7204] ? __pfx_lock_release+0x10/0x10 [ 153.925516][ T7204] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 153.925536][ T7204] ? __schedule+0x3c6a/0x5890 [ 153.925555][ T7204] ? lockdep_hardirqs_on+0x7c/0x110 [ 153.925580][ T7204] ? mark_lock+0xb5/0xc60 [ 153.925605][ T7204] ? __pfx_mark_lock+0x10/0x10 [ 153.925627][ T7204] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 153.925656][ T7204] ? policy_nodemask+0xea/0x4e0 [ 153.925677][ T7204] alloc_pages_mpol+0x1fc/0x540 [ 153.925698][ T7204] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 153.925720][ T7204] ? mark_held_locks+0x9f/0xe0 [ 153.925745][ T7204] folio_alloc_mpol_noprof+0x36/0x2f0 [ 153.925770][ T7204] vma_alloc_folio_noprof+0xee/0x1b0 [ 153.925796][ T7204] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 153.925827][ T7204] do_pte_missing+0x202f/0x3e10 [ 153.925854][ T7204] __handle_mm_fault+0x103c/0x2a40 [ 153.925879][ T7204] ? __pfx___handle_mm_fault+0x10/0x10 [ 153.925895][ T7204] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 153.925934][ T7204] ? find_vma+0xc0/0x140 [ 153.925956][ T7204] ? __pfx_find_vma+0x10/0x10 [ 153.925983][ T7204] handle_mm_fault+0x3fa/0xaa0 [ 153.926005][ T7204] do_user_addr_fault+0x7a3/0x13f0 [ 153.926035][ T7204] exc_page_fault+0x5c/0xc0 [ 153.926056][ T7204] asm_exc_page_fault+0x26/0x30 [ 153.926079][ T7204] RIP: 0010:__put_user_4+0x11/0x20 [ 153.926101][ T7204] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 153.926117][ T7204] RSP: 0018:ffffc900047efe28 EFLAGS: 00050202 [ 153.926131][ T7204] RAX: 0000000000000006 RBX: 0000000000000000 RCX: 0000400000004080 [ 153.926141][ T7204] RDX: ffff8880217b4880 RSI: ffffffff8928e9f5 RDI: ffffffff8bd369a0 [ 153.926153][ T7204] RBP: 1ffff920008fdfc9 R08: 0000000000000000 R09: fffffbfff20c4d42 [ 153.926163][ T7204] R10: ffffffff90626a17 R11: 0000000000000000 R12: 0000000000000006 [ 153.926173][ T7204] R13: 0000000000000007 R14: 0000000000000000 R15: dffffc0000000000 [ 153.926192][ T7204] ? __sys_socketpair+0x115/0x5a0 [ 153.926217][ T7204] __sys_socketpair+0x121/0x5a0 [ 153.926239][ T7204] ? __pfx___sys_socketpair+0x10/0x10 [ 153.926271][ T7204] __x64_sys_socketpair+0x96/0x100 [ 153.926293][ T7204] do_syscall_64+0xcd/0x250 [ 153.926318][ T7204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.926340][ T7204] RIP: 0033:0x7fecf4b8d169 [ 153.926353][ T7204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.926368][ T7204] RSP: 002b:00007fecf5a9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 153.926383][ T7204] RAX: ffffffffffffffda RBX: 00007fecf4da6080 RCX: 00007fecf4b8d169 [ 153.926393][ T7204] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000018 [ 153.926403][ T7204] RBP: 00007fecf5a9e090 R08: 0000000000000000 R09: 0000000000000000 [ 153.926413][ T7204] R10: 0000400000004080 R11: 0000000000000246 R12: 0000000000000001 [ 153.926423][ T7204] R13: 0000000000000001 R14: 00007fecf4da6080 R15: 00007ffcada81b98 [ 153.926446][ T7204] [ 154.289654][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.059440][ T5818] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 155.421996][ T5818] usb 2-1: device descriptor read/64, error -71 [ 155.539906][ T7219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.336'. [ 156.129425][ T5818] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 156.319466][ T5818] usb 2-1: device descriptor read/64, error -71 [ 156.439710][ T5818] usb usb2-port1: attempt power cycle [ 156.859399][ T5818] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 156.949981][ T5818] usb 2-1: device descriptor read/8, error -71 [ 157.264865][ T5818] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 157.291305][ T5818] usb 2-1: device descriptor read/8, error -71 [ 157.588288][ T5818] usb usb2-port1: unable to enumerate USB device [ 157.845213][ T7248] FAULT_INJECTION: forcing a failure. [ 157.845213][ T7248] name failslab, interval 1, probability 0, space 0, times 1 [ 157.870892][ T7248] CPU: 1 UID: 0 PID: 7248 Comm: syz.1.344 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 157.870918][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.870928][ T7248] Call Trace: [ 157.870934][ T7248] [ 157.870940][ T7248] dump_stack_lvl+0x16c/0x1f0 [ 157.870968][ T7248] should_fail_ex+0x50a/0x650 [ 157.870995][ T7248] ? fs_reclaim_acquire+0xae/0x150 [ 157.871021][ T7248] should_failslab+0xc2/0x120 [ 157.871041][ T7248] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 157.871059][ T7248] ? key_alloc+0x3e3/0x13a0 [ 157.871088][ T7248] key_alloc+0x3e3/0x13a0 [ 157.871118][ T7248] ? __kmalloc_noprof+0x23b/0x510 [ 157.871135][ T7248] ? __pfx_key_alloc+0x10/0x10 [ 157.871160][ T7248] ? hook_cred_transfer+0x17/0x220 [ 157.871181][ T7248] keyring_alloc+0x44/0xc0 [ 157.871199][ T7248] lookup_user_key+0xc45/0x12f0 [ 157.871226][ T7248] ? __pfx_lookup_user_key+0x10/0x10 [ 157.871251][ T7248] ? __might_fault+0x13b/0x190 [ 157.871274][ T7248] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 157.871300][ T7248] ? __might_fault+0xe3/0x190 [ 157.871326][ T7248] __do_sys_add_key+0x25a/0x460 [ 157.871345][ T7248] ? __pfx___do_sys_add_key+0x10/0x10 [ 157.871363][ T7248] ? ksys_write+0x1ba/0x250 [ 157.871387][ T7248] do_syscall_64+0xcd/0x250 [ 157.871412][ T7248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.871435][ T7248] RIP: 0033:0x7fecf4b8d169 [ 157.871450][ T7248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.871465][ T7248] RSP: 002b:00007fecf5abf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 157.871481][ T7248] RAX: ffffffffffffffda RBX: 00007fecf4da5fa0 RCX: 00007fecf4b8d169 [ 157.871492][ T7248] RDX: 0000400000000100 RSI: 0000000000000000 RDI: 0000400000000280 [ 157.871502][ T7248] RBP: 00007fecf5abf090 R08: ffffffffffffffff R09: 0000000000000000 [ 157.871512][ T7248] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 157.871521][ T7248] R13: 0000000000000001 R14: 00007fecf4da5fa0 R15: 00007ffcada81b98 [ 157.871547][ T7248] [ 159.025882][ T7266] ubi31: attaching mtd0 [ 159.030974][ T7266] ubi31: scanning is finished [ 159.035633][ T7266] ubi31: empty MTD device detected [ 159.771536][ T7266] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 159.779092][ T7266] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 159.786389][ T7266] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 159.793427][ T7266] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 159.801372][ T7266] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 159.808232][ T7266] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 159.816366][ T7266] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2575545007 [ 159.826468][ T7266] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 159.837742][ T7277] ubi31: background thread "ubi_bgt31d" started, PID 7277 [ 159.959665][ T972] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 159.985813][ T7279] random: crng reseeded on system resumption [ 160.039516][ T5818] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 160.119426][ T972] usb 3-1: device descriptor read/64, error -71 [ 160.231390][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 160.246587][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 160.266765][ T5818] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 160.286220][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.306671][ T5818] usb 4-1: Product: syz [ 160.311008][ T5818] usb 4-1: Manufacturer: syz [ 160.315839][ T5818] usb 4-1: SerialNumber: syz [ 160.323431][ T5818] usb 4-1: config 0 descriptor?? [ 160.332226][ T5818] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 160.341694][ T5818] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 160.410351][ T7284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.354'. [ 160.758097][ T972] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 160.762776][ T5818] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 160.913914][ T5818] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 160.921164][ T972] usb 3-1: device descriptor read/64, error -71 [ 160.922557][ T5818] em28xx 4-1:0.0: board has no eeprom [ 160.951534][ T30] audit: type=1400 audit(1742403668.548:361): avc: denied { bind } for pid=7289 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.045447][ T5818] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 161.053438][ T5818] em28xx 4-1:0.0: dvb set to bulk mode. [ 161.059128][ T9] em28xx 4-1:0.0: Binding DVB extension [ 161.128706][ T5818] usb 4-1: USB disconnect, device number 14 [ 161.147902][ T972] usb usb3-port1: attempt power cycle [ 161.187869][ T9] em28xx 4-1:0.0: Registering input extension [ 161.215394][ T5818] em28xx 4-1:0.0: Disconnecting em28xx [ 161.244340][ T5818] em28xx 4-1:0.0: Closing input extension [ 161.306078][ T5818] em28xx 4-1:0.0: Freeing device [ 161.325241][ T7303] TCP: TCP_TX_DELAY enabled [ 162.239356][ T972] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 162.370785][ T972] usb 3-1: device descriptor read/8, error -71 [ 162.727386][ T7321] netlink: 'syz.2.366': attribute type 11 has an invalid length. [ 162.737704][ T7316] tipc: Started in network mode [ 162.742632][ T7316] tipc: Node identity ac1414aa, cluster identity 4711 [ 162.749815][ T7316] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 162.757002][ T7316] tipc: Enabled bearer , priority 10 [ 162.763728][ T972] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 162.810079][ T30] audit: type=1400 audit(1742403670.398:362): avc: denied { mount } for pid=7323 comm="syz.0.364" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 162.865743][ T7311] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 162.889398][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 162.907719][ T30] audit: type=1400 audit(1742403670.448:363): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 162.929979][ T7311] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 162.951719][ T7311] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 162.979352][ T972] usb 3-1: device not accepting address 12, error -71 [ 162.996577][ T972] usb usb3-port1: unable to enumerate USB device [ 163.029458][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.169394][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.309397][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.439493][ T7311] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 163.449479][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.589444][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.730506][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.870380][ T972] tipc: Node number set to 2886997162 [ 163.890278][ T7340] ubi: mtd0 is already attached to ubi31 [ 163.940564][ T7348] FAULT_INJECTION: forcing a failure. [ 163.940564][ T7348] name failslab, interval 1, probability 0, space 0, times 0 [ 164.009398][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 164.009473][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.152627][ T7349] Driver unsupported XDP return value 0 on prog (id 52) dev N/A, expect packet loss! [ 164.166691][ T7348] CPU: 0 UID: 0 PID: 7348 Comm: syz.2.373 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 164.166715][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 164.166725][ T7348] Call Trace: [ 164.166729][ T7348] [ 164.166736][ T7348] dump_stack_lvl+0x16c/0x1f0 [ 164.166765][ T7348] should_fail_ex+0x50a/0x650 [ 164.166792][ T7348] ? fs_reclaim_acquire+0xae/0x150 [ 164.166817][ T7348] ? lsm_blob_alloc+0x68/0x90 [ 164.166835][ T7348] should_failslab+0xc2/0x120 [ 164.166855][ T7348] __kmalloc_noprof+0xcb/0x510 [ 164.166872][ T7348] ? key_set_index_key+0x2e9/0x540 [ 164.166891][ T7348] ? lockdep_init_map_type+0x16d/0x7d0 [ 164.166918][ T7348] lsm_blob_alloc+0x68/0x90 [ 164.166937][ T7348] security_key_alloc+0x37/0x2e0 [ 164.166965][ T7348] key_alloc+0x8e8/0x13a0 [ 164.166996][ T7348] ? __kmalloc_noprof+0x23b/0x510 [ 164.167014][ T7348] ? __pfx_key_alloc+0x10/0x10 [ 164.167038][ T7348] ? hook_cred_transfer+0x17/0x220 [ 164.167059][ T7348] keyring_alloc+0x44/0xc0 [ 164.167078][ T7348] lookup_user_key+0xc45/0x12f0 [ 164.167106][ T7348] ? __pfx_lookup_user_key+0x10/0x10 [ 164.167131][ T7348] ? __might_fault+0x13b/0x190 [ 164.167155][ T7348] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 164.167181][ T7348] ? __might_fault+0xe3/0x190 [ 164.167207][ T7348] __do_sys_add_key+0x25a/0x460 [ 164.167227][ T7348] ? __pfx___do_sys_add_key+0x10/0x10 [ 164.167243][ T7348] ? ksys_write+0x1ba/0x250 [ 164.167268][ T7348] do_syscall_64+0xcd/0x250 [ 164.167293][ T7348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.167317][ T7348] RIP: 0033:0x7f1dc5f8d169 [ 164.167331][ T7348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.167347][ T7348] RSP: 002b:00007f1dc6ea7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 164.167363][ T7348] RAX: ffffffffffffffda RBX: 00007f1dc61a5fa0 RCX: 00007f1dc5f8d169 [ 164.167374][ T7348] RDX: 0000400000000100 RSI: 0000000000000000 RDI: 0000400000000280 [ 164.167384][ T7348] RBP: 00007f1dc6ea7090 R08: ffffffffffffffff R09: 0000000000000000 [ 164.167394][ T7348] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 164.167404][ T7348] R13: 0000000000000001 R14: 00007f1dc61a5fa0 R15: 00007ffdc35dbbb8 [ 164.167431][ T7348] [ 164.279385][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 164.969472][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.969563][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.449526][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 165.537216][ T7373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.378'. [ 167.642833][ T7391] FAULT_INJECTION: forcing a failure. [ 167.642833][ T7391] name failslab, interval 1, probability 0, space 0, times 0 [ 167.655474][ T7391] CPU: 0 UID: 0 PID: 7391 Comm: syz.3.384 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 167.655488][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 167.655493][ T7391] Call Trace: [ 167.655496][ T7391] [ 167.655500][ T7391] dump_stack_lvl+0x16c/0x1f0 [ 167.655518][ T7391] should_fail_ex+0x50a/0x650 [ 167.655535][ T7391] ? fs_reclaim_acquire+0xae/0x150 [ 167.655552][ T7391] should_failslab+0xc2/0x120 [ 167.655565][ T7391] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 167.655576][ T7391] ? __pfx_selinux_socket_create+0x10/0x10 [ 167.655592][ T7391] ? sock_alloc_inode+0x25/0x1c0 [ 167.655605][ T7391] ? __pfx_sock_alloc_inode+0x10/0x10 [ 167.655615][ T7391] sock_alloc_inode+0x25/0x1c0 [ 167.655626][ T7391] alloc_inode+0x5d/0x230 [ 167.655638][ T7391] sock_alloc+0x40/0x280 [ 167.655648][ T7391] __sock_create+0xc1/0x8d0 [ 167.655663][ T7391] __sys_socketpair+0x25d/0x5a0 [ 167.655676][ T7391] ? __pfx___sys_socketpair+0x10/0x10 [ 167.655689][ T7391] ? fput+0x67/0x440 [ 167.655702][ T7391] ? __pfx_ksys_write+0x10/0x10 [ 167.655713][ T7391] __x64_sys_socketpair+0x96/0x100 [ 167.655726][ T7391] ? lockdep_hardirqs_on+0x7c/0x110 [ 167.655740][ T7391] do_syscall_64+0xcd/0x250 [ 167.655756][ T7391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.655771][ T7391] RIP: 0033:0x7fe2ca18d169 [ 167.655779][ T7391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.655789][ T7391] RSP: 002b:00007fe2caf8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 167.655800][ T7391] RAX: ffffffffffffffda RBX: 00007fe2ca3a5fa0 RCX: 00007fe2ca18d169 [ 167.655806][ T7391] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000018 [ 167.655812][ T7391] RBP: 00007fe2caf8d090 R08: 0000000000000000 R09: 0000000000000000 [ 167.655818][ T7391] R10: 0000400000004080 R11: 0000000000000246 R12: 0000000000000001 [ 167.655824][ T7391] R13: 0000000000000000 R14: 00007fe2ca3a5fa0 R15: 00007ffc5af53b98 [ 167.655836][ T7391] [ 167.663052][ T30] audit: type=1400 audit(1742403675.258:364): avc: denied { unlink } for pid=7386 comm="syz.0.383" name="#1" dev="tmpfs" ino=371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 167.902833][ T30] audit: type=1400 audit(1742403675.288:365): avc: denied { mount } for pid=7386 comm="syz.0.383" name="/" dev="overlay" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 167.924978][ T30] audit: type=1800 audit(1742403675.348:366): pid=7389 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.383" name="file0" dev="overlay" ino=372 res=0 errno=0 [ 167.945792][ C1] net_ratelimit: 4 callbacks suppressed [ 167.945803][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 168.282162][ T7400] ubi: mtd0 is already attached to ubi31 [ 168.969448][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 169.952721][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 170.009890][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 170.450614][ T30] audit: type=1800 audit(1742403677.978:367): pid=7418 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.388" name="file0" dev="overlay" ino=398 res=0 errno=0 [ 170.471436][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.049355][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 171.690352][ T5961] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 171.776266][ T30] audit: type=1400 audit(1742403679.368:368): avc: denied { create } for pid=7442 comm="syz.1.398" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 171.808117][ T7439] vcan0 speed is unknown, defaulting to 1000 [ 171.999381][ T5961] usb 5-1: device descriptor read/64, error -71 [ 172.089380][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 172.963939][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 173.129353][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 173.300585][ T5831] Bluetooth: hci1: unexpected event for opcode 0x0c14 [ 173.599332][ T5961] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 173.870621][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 173.914790][ T5961] usb 5-1: device descriptor read/64, error -71 [ 174.169356][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 174.535627][ T5961] usb usb5-port1: attempt power cycle [ 174.678798][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 174.990243][ T9] usb 4-1: device descriptor read/all, error -71 [ 175.209356][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 175.840394][ T7477] gfs2: not a GFS2 filesystem [ 175.918971][ T30] audit: type=1400 audit(1742403683.508:369): avc: denied { ioctl } for pid=7476 comm="syz.1.404" path="socket:[14794]" dev="sockfs" ino=14794 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 175.990097][ T30] audit: type=1400 audit(1742403683.508:370): avc: denied { listen } for pid=7476 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 176.012002][ T30] audit: type=1400 audit(1742403683.508:371): avc: denied { map } for pid=7476 comm="syz.1.404" path="socket:[14794]" dev="sockfs" ino=14794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 176.125951][ T7478] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7478 comm=syz.1.404 [ 176.249366][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 176.319632][ T972] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 176.468753][ T30] audit: type=1400 audit(1742403683.508:372): avc: denied { read } for pid=7476 comm="syz.1.404" path="socket:[14794]" dev="sockfs" ino=14794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 176.499599][ T972] usb 3-1: Using ep0 maxpacket: 8 [ 176.543898][ T972] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 176.568869][ T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.587363][ T972] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 176.606409][ T972] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 176.705428][ T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.763876][ T972] usb 3-1: config 0 descriptor?? [ 176.865088][ T7496] netlink: 'syz.4.405': attribute type 1 has an invalid length. [ 177.289384][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 177.401982][ T7481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.412320][ T7481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.666619][ T972] usbhid 3-1:0.0: can't add hid device: -71 [ 177.687590][ T972] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 177.708560][ T972] usb 3-1: USB disconnect, device number 13 [ 177.751418][ T7505] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 177.777059][ T7505] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 178.329393][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.018398][ T7508] syz.1.413: attempt to access beyond end of device [ 179.018398][ T7508] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 179.369413][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.917155][ T7527] vcan0 speed is unknown, defaulting to 1000 [ 180.409349][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 181.409385][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 181.449486][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 182.140794][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 182.279434][ T9] usb 3-1: config 1 interface 0 altsetting 108 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.306059][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 182.332905][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 182.350284][ T7557] gfs2: not a GFS2 filesystem [ 182.378073][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.417199][ T9] usb 3-1: Product: syz [ 182.429659][ T9] usb 3-1: Manufacturer: 頻∺ꡎö [ 182.456911][ T9] usb 3-1: SerialNumber: syz [ 182.477003][ T9] usb 3-1: can't set config #1, error -71 [ 182.489379][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 182.519625][ T9] usb 3-1: USB disconnect, device number 14 [ 182.559178][ T30] audit: type=1400 audit(1742403690.148:373): avc: denied { watch_sb watch_reads } for pid=7558 comm="syz.0.426" path="/80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 182.746010][ T7564] befs: (nullb0): No write support. Marking filesystem read-only [ 182.756916][ T30] audit: type=1400 audit(1742403690.348:374): avc: denied { connect } for pid=7563 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.790820][ T7564] befs: (nullb0): invalid magic header [ 183.389010][ T7575] syz.0.428: attempt to access beyond end of device [ 183.389010][ T7575] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 183.529354][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 183.581425][ T7579] netlink: 68 bytes leftover after parsing attributes in process `syz.4.433'. [ 183.697049][ T7577] netlink: 'syz.1.425': attribute type 1 has an invalid length. [ 183.749717][ T7579] netlink: 'syz.4.433': attribute type 1 has an invalid length. [ 184.569347][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.059321][ T30] audit: type=1400 audit(1742403692.648:375): avc: denied { mount } for pid=7610 comm="syz.2.441" name="/" dev="ramfs" ino=15541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 185.424407][ T30] audit: type=1400 audit(1742403692.648:376): avc: denied { unmount } for pid=7610 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 185.454205][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.442'. [ 185.609358][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.693195][ T30] audit: type=1400 audit(1742403693.288:377): avc: denied { ioctl } for pid=7617 comm="syz.4.442" path="socket:[15072]" dev="sockfs" ino=15072 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.952402][ T7634] FAULT_INJECTION: forcing a failure. [ 185.952402][ T7634] name failslab, interval 1, probability 0, space 0, times 0 [ 185.955882][ T7635] gfs2: not a GFS2 filesystem [ 185.982033][ T7634] CPU: 1 UID: 0 PID: 7634 Comm: syz.3.448 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 185.982055][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 185.982064][ T7634] Call Trace: [ 185.982070][ T7634] [ 185.982075][ T7634] dump_stack_lvl+0x16c/0x1f0 [ 185.982102][ T7634] should_fail_ex+0x50a/0x650 [ 185.982130][ T7634] should_failslab+0xc2/0x120 [ 185.982148][ T7634] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 185.982165][ T7634] ? skb_clone+0x190/0x3f0 [ 185.982192][ T7634] skb_clone+0x190/0x3f0 [ 185.982216][ T7634] netlink_deliver_tap+0xabd/0xd30 [ 185.982242][ T7634] netlink_unicast+0x5e1/0x7f0 [ 185.982267][ T7634] ? __pfx_netlink_unicast+0x10/0x10 [ 185.982295][ T7634] netlink_sendmsg+0x8b8/0xd70 [ 185.982321][ T7634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.982351][ T7634] ____sys_sendmsg+0xaaf/0xc90 [ 185.982370][ T7634] ? copy_msghdr_from_user+0x10b/0x160 [ 185.982393][ T7634] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.982423][ T7634] ___sys_sendmsg+0x135/0x1e0 [ 185.982448][ T7634] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.982482][ T7634] ? __pfx_lock_release+0x10/0x10 [ 185.982503][ T7634] ? trace_lock_acquire+0x14e/0x1f0 [ 185.982534][ T7634] ? __fget_files+0x206/0x3a0 [ 185.982556][ T7634] __sys_sendmsg+0x16e/0x220 [ 185.982580][ T7634] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.982619][ T7634] do_syscall_64+0xcd/0x250 [ 185.982643][ T7634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.982665][ T7634] RIP: 0033:0x7fe2ca18d169 [ 185.982679][ T7634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.982695][ T7634] RSP: 002b:00007fe2caf8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.982712][ T7634] RAX: ffffffffffffffda RBX: 00007fe2ca3a5fa0 RCX: 00007fe2ca18d169 [ 185.982723][ T7634] RDX: 0000000000000000 RSI: 0000400000000800 RDI: 0000000000000004 [ 185.982733][ T7634] RBP: 00007fe2caf8d090 R08: 0000000000000000 R09: 0000000000000000 [ 185.982742][ T7634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.982751][ T7634] R13: 0000000000000000 R14: 00007fe2ca3a5fa0 R15: 00007ffc5af53b98 [ 185.982771][ T7634] [ 186.380543][ T7637] netlink: 'syz.2.447': attribute type 1 has an invalid length. [ 186.476798][ T30] audit: type=1800 audit(1742403694.068:378): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.449" name="file0" dev="overlay" ino=558 res=0 errno=0 [ 186.649352][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.689364][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 188.550536][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 188.729462][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 189.291291][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'. [ 189.433043][ T30] audit: type=1400 audit(1742403697.028:379): avc: denied { getopt } for pid=7654 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 189.779358][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.003618][ T30] audit: type=1400 audit(1742403697.598:380): avc: denied { getopt } for pid=7675 comm="syz.0.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.189418][ T30] audit: type=1800 audit(1742403697.738:381): pid=7684 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.463" name="file0" dev="overlay" ino=583 res=0 errno=0 [ 190.238189][ T7687] vcan0 speed is unknown, defaulting to 1000 [ 190.819374][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.933777][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'. [ 191.009412][ T5870] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 191.199460][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 191.238825][ T5870] usb 3-1: config 1 interface 0 altsetting 108 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 191.441450][ T5870] usb 3-1: config 1 interface 0 has no altsetting 0 [ 191.473005][ T30] audit: type=1400 audit(1742403699.068:382): avc: denied { append } for pid=7704 comm="syz.3.468" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 191.528471][ T5870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 191.529101][ T30] audit: type=1400 audit(1742403699.108:383): avc: denied { accept } for pid=7707 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.549303][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.575263][ T5870] usb 3-1: Product: syz [ 191.582333][ T7709] kernel read not supported for file /eth0 (pid: 7709 comm: syz.0.469) [ 191.585357][ T5870] usb 3-1: Manufacturer: 頻∺ꡎö [ 191.604948][ T7705] netlink: 92 bytes leftover after parsing attributes in process `syz.3.468'. [ 191.613115][ T30] audit: type=1400 audit(1742403699.118:384): avc: denied { read } for pid=7707 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 191.623054][ T5870] usb 3-1: SerialNumber: syz [ 191.676135][ T30] audit: type=1800 audit(1742403699.188:385): pid=7709 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.469" name="eth0" dev="mqueue" ino=15780 res=0 errno=0 [ 191.701822][ T30] audit: type=1400 audit(1742403699.188:386): avc: denied { append } for pid=7707 comm="syz.0.469" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 191.704541][ T7692] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.726713][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 191.761032][ T30] audit: type=1400 audit(1742403699.188:387): avc: denied { open } for pid=7707 comm="syz.0.469" path="/dev/usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 191.849353][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.249682][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 192.289690][ T5961] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 192.720487][ T5961] usb 5-1: Using ep0 maxpacket: 32 [ 192.757733][ T5961] usb 5-1: no configurations [ 192.826555][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 192.889340][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.906583][ T5961] usb 5-1: can't read configurations, error -22 [ 193.209557][ T5961] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 193.379495][ T5961] usb 5-1: Using ep0 maxpacket: 32 [ 193.479521][ T5961] usb 5-1: no configurations [ 193.499372][ T5961] usb 5-1: can't read configurations, error -22 [ 193.519174][ T5961] usb usb5-port1: attempt power cycle [ 193.550058][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.479'. [ 193.919737][ T5961] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 193.933539][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.941493][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.950227][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.011413][ T5961] usb 5-1: Using ep0 maxpacket: 32 [ 194.017895][ T5961] usb 5-1: no configurations [ 194.022916][ T5961] usb 5-1: can't read configurations, error -22 [ 194.192615][ T5961] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 194.211747][ T5870] usb 3-1: USB disconnect, device number 15 [ 194.253095][ T5961] usb 5-1: Using ep0 maxpacket: 32 [ 194.274637][ T5961] usb 5-1: no configurations [ 194.279252][ T5961] usb 5-1: can't read configurations, error -22 [ 194.296698][ T5961] usb usb5-port1: unable to enumerate USB device [ 194.969359][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.703725][ T7780] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.993088][ T5961] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 196.009362][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.105425][ T7777] syz.4.487: attempt to access beyond end of device [ 196.105425][ T7777] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 197.049352][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.489351][ T5961] usb 4-1: device descriptor read/64, error -71 [ 198.019434][ T5961] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 198.074625][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'. [ 198.092426][ T30] audit: type=1400 audit(1742403705.678:388): avc: denied { listen } for pid=7800 comm="syz.4.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.099357][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 198.156058][ T7780] bond1 (unregistering): Released all slaves [ 198.179610][ T5961] usb 4-1: device descriptor read/64, error -71 [ 198.289751][ T972] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 198.296292][ T30] audit: type=1400 audit(1742403705.868:389): avc: denied { read } for pid=7800 comm="syz.4.492" path="socket:[15984]" dev="sockfs" ino=15984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.297601][ T5961] usb usb4-port1: attempt power cycle [ 198.530718][ T7812] vcan0 speed is unknown, defaulting to 1000 [ 198.633697][ T30] audit: type=1400 audit(1742403706.228:390): avc: denied { create } for pid=7813 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 198.665308][ T972] usb 3-1: Using ep0 maxpacket: 32 [ 198.675398][ T972] usb 3-1: no configurations [ 198.676105][ T30] audit: type=1400 audit(1742403706.228:391): avc: denied { getattr } for pid=7813 comm="syz.1.495" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 198.688797][ T972] usb 3-1: can't read configurations, error -22 [ 198.860786][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 198.990453][ T972] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 199.139334][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.159369][ T972] usb 3-1: Using ep0 maxpacket: 32 [ 199.167291][ T972] usb 3-1: no configurations [ 199.187378][ T972] usb 3-1: can't read configurations, error -22 [ 199.401374][ T972] usb usb3-port1: attempt power cycle [ 199.561860][ T7831] autofs: Unknown parameter 'ckfsfloor' [ 199.588565][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'. [ 199.773503][ T972] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 199.892870][ T972] usb 3-1: Using ep0 maxpacket: 32 [ 199.983850][ T972] usb 3-1: no configurations [ 199.998839][ T972] usb 3-1: can't read configurations, error -22 [ 200.169365][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.313993][ T972] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 200.344717][ T972] usb 3-1: Using ep0 maxpacket: 32 [ 200.362467][ T972] usb 3-1: no configurations [ 200.367095][ T972] usb 3-1: can't read configurations, error -22 [ 200.510078][ T972] usb usb3-port1: unable to enumerate USB device [ 201.209438][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.647758][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 202.181233][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.506'. [ 202.259351][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.549503][ T7852] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.558392][ T30] audit: type=1400 audit(1742403709.898:392): avc: denied { create } for pid=7857 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 202.616978][ T7852] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.631623][ T30] audit: type=1400 audit(1742403709.928:393): avc: denied { create } for pid=7857 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 202.651117][ T30] audit: type=1400 audit(1742403709.928:394): avc: denied { setopt } for pid=7857 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 202.657793][ T7852] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.990844][ T7852] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 203.289361][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.336177][ T7871] syz.4.509: attempt to access beyond end of device [ 203.336177][ T7871] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 203.463170][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'. [ 203.609649][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.339364][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.347874][ T7883] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 204.558704][ T7886] warning: `syz.4.514' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 204.633198][ T30] audit: type=1400 audit(1742403712.228:395): avc: denied { create } for pid=7889 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 204.653520][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.667384][ T7893] gfs2: not a GFS2 filesystem [ 204.690266][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.515'. [ 204.705079][ T7897] netlink: 'syz.3.515': attribute type 1 has an invalid length. [ 204.720974][ T7897] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.730059][ T7897] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.738746][ T7897] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.747472][ T7897] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.757004][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.781275][ T7897] vxlan0: entered promiscuous mode [ 204.793410][ T7898] vcan0 speed is unknown, defaulting to 1000 [ 205.039426][ T5818] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 205.059468][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 205.189406][ T5818] usb 5-1: Using ep0 maxpacket: 16 [ 205.231850][ T5818] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 205.257074][ T5818] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 205.270995][ T5818] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 205.285486][ T5818] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.308936][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 205.327717][ T5818] usb 5-1: SerialNumber: syz [ 205.348259][ T7886] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 205.379330][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.509732][ T972] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 205.523041][ T7907] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 310.639247][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 310.646217][ C0] rcu: 1-...!: (1 GPs behind) idle=bb2c/1/0x4000000000000000 softirq=21760/21761 fqs=0 [ 310.656771][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P36 [ 310.663908][ C0] rcu: (detected by 0, t=10502 jiffies, g=17169, q=73 ncpus=2) [ 310.671543][ C0] Sending NMI from CPU 0 to CPUs 1: [ 310.671566][ C1] NMI backtrace for cpu 1 [ 310.671575][ C1] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 310.671590][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 310.671601][ C1] Workqueue: bat_events batadv_nc_worker [ 310.671624][ C1] RIP: 0010:do_raw_spin_lock+0x2a/0x2c0 [ 310.671640][ C1] Code: f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 56 41 55 41 54 55 53 48 89 fb 48 83 c7 04 48 83 ec 68 48 c7 44 24 08 b3 8a b5 41 <48> 8d 6c 24 08 48 c7 44 24 10 9c 00 98 8d 48 c1 ed 03 48 c7 44 24 [ 310.671653][ C1] RSP: 0000:ffffc90000a28c48 EFLAGS: 00000096 [ 310.671665][ C1] RAX: dffffc0000000000 RBX: ffffffff9aa567d0 RCX: ffffffff8195c86e [ 310.671674][ C1] RDX: 0000000000000001 RSI: ffffffff8b6cff80 RDI: ffffffff9aa567d4 [ 310.671683][ C1] RBP: 0000000000000002 R08: 0000000000000000 R09: fffffbfff2dd8d98 [ 310.671691][ C1] R10: ffffffff96ec6cc7 R11: 0000000000000004 R12: dffffc0000000000 [ 310.671700][ C1] R13: ffff888059216340 R14: 1ffff920001451a4 R15: ffffffff9aa567c8 [ 310.671710][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 310.671724][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.671733][ C1] CR2: 00007fecf4d92b68 CR3: 00000000658c4000 CR4: 00000000003526f0 [ 310.671742][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 310.671750][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 310.671759][ C1] Call Trace: [ 310.671764][ C1] [ 310.671771][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 310.671787][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 310.671804][ C1] ? nmi_handle+0x1ac/0x5d0 [ 310.671822][ C1] ? do_raw_spin_lock+0x2a/0x2c0 [ 310.671835][ C1] ? default_do_nmi+0x6a/0x160 [ 310.671849][ C1] ? exc_nmi+0x170/0x1e0 [ 310.671862][ C1] ? end_repeat_nmi+0xf/0x53 [ 310.671882][ C1] ? hlock_class+0x4e/0x130 [ 310.671897][ C1] ? do_raw_spin_lock+0x2a/0x2c0 [ 310.671909][ C1] ? do_raw_spin_lock+0x2a/0x2c0 [ 310.671922][ C1] ? do_raw_spin_lock+0x2a/0x2c0 [ 310.671935][ C1] [ 310.671939][ C1] [ 310.671944][ C1] ? debug_object_activate+0x149/0x4a0 [ 310.671962][ C1] ? lock_acquire+0x2f/0xb0 [ 310.671978][ C1] ? debug_object_activate+0x149/0x4a0 [ 310.671994][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 310.672009][ C1] ? debug_object_activate+0x149/0x4a0 [ 310.672025][ C1] debug_object_activate+0x149/0x4a0 [ 310.672040][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 310.672058][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 310.672076][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 310.672088][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 310.672102][ C1] ? __pfx_advance_sched+0x10/0x10 [ 310.672116][ C1] enqueue_hrtimer+0x25/0x3c0 [ 310.672131][ C1] __hrtimer_run_queues+0x903/0xae0 [ 310.672146][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 310.672159][ C1] ? read_tsc+0x9/0x20 [ 310.672175][ C1] hrtimer_interrupt+0x392/0x8e0 [ 310.672193][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 310.672213][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 310.672230][ C1] [ 310.672234][ C1] [ 310.672239][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 310.672257][ C1] RIP: 0010:finish_task_switch.isra.0+0x220/0xcc0 [ 310.672277][ C1] Code: a9 0a 00 00 44 8b 0d b3 e4 d9 0e 45 85 c9 0f 85 c0 01 00 00 48 89 df e8 ae f8 ff ff e8 a9 f2 38 00 fb 65 48 8b 1d a0 20 7b 7e <48> 8d bb 08 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 310.672289][ C1] RSP: 0000:ffffc90000ac7778 EFLAGS: 00000202 [ 310.672299][ C1] RAX: 00000000003613d5 RBX: ffff88801dea2440 RCX: 1ffffffff2de484a [ 310.672308][ C1] RDX: 0000000000000000 RSI: ffffffff8b6cfc80 RDI: ffffffff8bd369a0 [ 310.672317][ C1] RBP: ffffc90000ac77c0 R08: 0000000000000001 R09: fffffbfff2dd8db5 [ 310.672326][ C1] R10: ffffffff96ec6daf R11: 0000000000000003 R12: ffff8880b873fa30 [ 310.672335][ C1] R13: ffff888030514880 R14: 0000000000000000 R15: ffff8880b863ec00 [ 310.672354][ C1] ? finish_task_switch.isra.0+0x217/0xcc0 [ 310.672373][ C1] ? __switch_to+0x749/0x1190 [ 310.672387][ C1] __schedule+0xf4b/0x5890 [ 310.672402][ C1] ? __pfx_mark_lock+0x10/0x10 [ 310.672418][ C1] ? mark_lock+0xb5/0xc60 [ 310.672437][ C1] ? __pfx___schedule+0x10/0x10 [ 310.672455][ C1] ? mark_held_locks+0x9f/0xe0 [ 310.672473][ C1] preempt_schedule_irq+0x51/0x90 [ 310.672489][ C1] irqentry_exit+0x36/0x90 [ 310.672505][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 310.672522][ C1] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 310.672540][ C1] Code: b8 ff ff ff ff 65 0f c1 05 50 c8 6b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 310.672552][ C1] RSP: 0000:ffffc90000ac7a40 EFLAGS: 00000206 [ 310.672563][ C1] RAX: 0000000000000046 RBX: 1ffff92000158f49 RCX: 0000000003770b2a [ 310.672571][ C1] RDX: 0000000000000001 RSI: ffffffff8b6cff80 RDI: ffffffff8bd369a0 [ 310.672580][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dd8d98 [ 310.672589][ C1] R10: ffffffff96ec6cc7 R11: 0000000000000002 R12: 0000000000000000 [ 310.672597][ C1] R13: ffffffff8e1bd140 R14: 0000000000000000 R15: 0000000000000000 [ 310.672611][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 310.672629][ C1] ? rcu_is_watching+0x12/0xc0 [ 310.672643][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 310.672658][ C1] ? batadv_nc_worker+0x164/0x1060 [ 310.672676][ C1] ? lock_acquire+0x2f/0xb0 [ 310.672692][ C1] ? batadv_nc_worker+0x164/0x1060 [ 310.672711][ C1] batadv_nc_worker+0x16a/0x1060 [ 310.672729][ C1] ? batadv_nc_worker+0x164/0x1060 [ 310.672750][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 310.672768][ C1] ? rcu_is_watching+0x12/0xc0 [ 310.672781][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 310.672796][ C1] ? process_one_work+0x921/0x1ba0 [ 310.672813][ C1] ? lock_acquire+0x2f/0xb0 [ 310.672829][ C1] ? process_one_work+0x921/0x1ba0 [ 310.672847][ C1] process_one_work+0x9c5/0x1ba0 [ 310.672866][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 310.672884][ C1] ? __pfx_process_one_work+0x10/0x10 [ 310.672903][ C1] ? assign_work+0x1a0/0x250 [ 310.672920][ C1] worker_thread+0x6c8/0xf00 [ 310.672939][ C1] ? __kthread_parkme+0x148/0x220 [ 310.672952][ C1] ? __pfx_worker_thread+0x10/0x10 [ 310.672969][ C1] kthread+0x3af/0x750 [ 310.672984][ C1] ? __pfx_kthread+0x10/0x10 [ 310.672998][ C1] ? lock_acquire+0x2f/0xb0 [ 310.673016][ C1] ? __pfx_kthread+0x10/0x10 [ 310.673031][ C1] ret_from_fork+0x45/0x80 [ 310.673047][ C1] ? __pfx_kthread+0x10/0x10 [ 310.673062][ C1] ret_from_fork_asm+0x1a/0x30 [ 310.673081][ C1] [ 310.673562][ C0] task:kworker/u8:2 state:R running task stack:24128 pid:36 tgid:36 ppid:2 task_flags:0x4208060 flags:0x00004008 [ 311.333723][ C0] Workqueue: bat_events batadv_nc_worker [ 311.339362][ C0] Call Trace: [ 311.342631][ C0] [ 311.345556][ C0] ? __schedule+0xf4b/0x5890 [ 311.350147][ C0] ? __pfx_mark_lock+0x10/0x10 [ 311.354906][ C0] ? mark_lock+0xb5/0xc60 [ 311.359245][ C0] ? __pfx___schedule+0x10/0x10 [ 311.364100][ C0] ? mark_held_locks+0x9f/0xe0 [ 311.368865][ C0] ? preempt_schedule_irq+0x51/0x90 [ 311.374058][ C0] ? irqentry_exit+0x36/0x90 [ 311.378645][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 311.384284][ C0] ? lock_acquire.part.0+0x155/0x380 [ 311.389570][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 311.395206][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.399963][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 311.405155][ C0] ? batadv_nc_worker+0x164/0x1060 [ 311.410269][ C0] ? lock_acquire+0x2f/0xb0 [ 311.414768][ C0] ? batadv_nc_worker+0x164/0x1060 [ 311.419880][ C0] ? batadv_nc_worker+0x16a/0x1060 [ 311.424988][ C0] ? batadv_nc_worker+0x164/0x1060 [ 311.430108][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 311.435482][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.440251][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 311.445443][ C0] ? process_one_work+0x921/0x1ba0 [ 311.450552][ C0] ? lock_acquire+0x2f/0xb0 [ 311.455055][ C0] ? process_one_work+0x921/0x1ba0 [ 311.460166][ C0] ? process_one_work+0x9c5/0x1ba0 [ 311.465287][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 311.470657][ C0] ? __pfx_process_one_work+0x10/0x10 [ 311.476035][ C0] ? assign_work+0x1a0/0x250 [ 311.480624][ C0] ? worker_thread+0x6c8/0xf00 [ 311.485395][ C0] ? __kthread_parkme+0x148/0x220 [ 311.490428][ C0] ? __pfx_worker_thread+0x10/0x10 [ 311.495538][ C0] ? kthread+0x3af/0x750 [ 311.499780][ C0] ? __pfx_kthread+0x10/0x10 [ 311.504372][ C0] ? lock_acquire+0x2f/0xb0 [ 311.508876][ C0] ? __pfx_kthread+0x10/0x10 [ 311.513464][ C0] ? ret_from_fork+0x45/0x80 [ 311.518049][ C0] ? __pfx_kthread+0x10/0x10 [ 311.522638][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 311.527581][ C0] [ 311.530600][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g17169 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 311.541784][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 311.551739][ C0] rcu: RCU grace-period kthread stack dump: [ 311.557611][ C0] task:rcu_preempt state:R running task stack:27984 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00004000 [ 311.571092][ C0] Call Trace: [ 311.574361][ C0] [ 311.577285][ C0] __schedule+0xf43/0x5890 [ 311.581697][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 311.586905][ C0] ? __pfx___schedule+0x10/0x10 [ 311.591758][ C0] ? schedule+0x298/0x350 [ 311.596080][ C0] ? __pfx_lock_release+0x10/0x10 [ 311.601105][ C0] ? lock_acquire+0x2f/0xb0 [ 311.605607][ C0] ? schedule+0x1fd/0x350 [ 311.609937][ C0] schedule+0xe7/0x350 [ 311.614003][ C0] schedule_timeout+0x124/0x280 [ 311.618849][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 311.624213][ C0] ? __pfx_process_timeout+0x10/0x10 [ 311.629591][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 311.635397][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 311.640857][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 311.645624][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 311.650906][ C0] ? rcu_gp_init+0xc82/0x1630 [ 311.655590][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 311.660789][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 311.666599][ C0] rcu_gp_kthread+0x271/0x380 [ 311.671275][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 311.676472][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 311.681669][ C0] ? __kthread_parkme+0x148/0x220 [ 311.686688][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 311.691900][ C0] kthread+0x3af/0x750 [ 311.695973][ C0] ? __pfx_kthread+0x10/0x10 [ 311.700568][ C0] ? __pfx_kthread+0x10/0x10 [ 311.705165][ C0] ret_from_fork+0x45/0x80 [ 311.709588][ C0] ? __pfx_kthread+0x10/0x10 [ 311.714178][ C0] ret_from_fork_asm+0x1a/0x30 [ 311.718960][ C0] [ 311.721974][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 311.728288][ C0] CPU: 0 UID: 0 PID: 7889 Comm: syz.3.515 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 311.738875][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 311.748924][ C0] RIP: 0010:smp_call_function_many_cond+0x4c6/0x12c0 [ 311.755601][ C0] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 ac 0e 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 08 31 [ 311.775209][ C0] RSP: 0000:ffffc9000f4dfa40 EFLAGS: 00000293 [ 311.781275][ C0] RAX: 0000000000000000 RBX: ffff8880b8744a80 RCX: ffffffff81ade46a [ 311.789241][ C0] RDX: ffff8880217b2440 RSI: ffffffff81ade444 RDI: 0000000000000005 [ 311.797207][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 311.805167][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed10170e8951 [ 311.813130][ C0] R13: 0000000000000001 R14: ffff8880b863fe80 R15: ffff8880b8744a88 [ 311.821092][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 311.830017][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.836591][ C0] CR2: 0000001b2f400ff8 CR3: 00000000658c4000 CR4: 00000000003526f0 [ 311.844555][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 311.852516][ C0] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 311.860478][ C0] Call Trace: [ 311.863749][ C0] [ 311.866585][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 311.872909][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 311.878101][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 311.883562][ C0] ? timekeeping_advance+0x72e/0xa90 [ 311.888841][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 311.894468][ C0] ? __asan_memcpy+0x3c/0x60 [ 311.899060][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 311.904352][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.909113][ C0] ? update_process_times+0x178/0x2d0 [ 311.914485][ C0] ? __pfx_update_process_times+0x10/0x10 [ 311.920209][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 311.925665][ C0] ? update_wall_time+0x1c/0x40 [ 311.930514][ C0] ? tick_nohz_handler+0x376/0x530 [ 311.935625][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 311.941099][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 311.946468][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 311.952178][ C0] ? read_tsc+0x9/0x20 [ 311.956248][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 311.961374][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 311.967528][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 311.973329][ C0] [ 311.976257][ C0] [ 311.979182][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 311.985345][ C0] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 311.991403][ C0] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 311.997464][ C0] ? smp_call_function_many_cond+0x4c6/0x12c0 [ 312.003533][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 312.008729][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 312.013836][ C0] flush_tlb_mm_range+0x271/0x4a0 [ 312.018858][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 312.024404][ C0] tlb_finish_mmu+0x3c9/0x7b0 [ 312.029080][ C0] exit_mmap+0x40e/0xba0 [ 312.033325][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 312.038098][ C0] ? __pfx_mark_lock+0x10/0x10 [ 312.042877][ C0] __mmput+0x12a/0x410 [ 312.046946][ C0] mmput+0x62/0x70 [ 312.050665][ C0] do_exit+0x9ba/0x2db0 [ 312.054818][ C0] ? __pfx_do_exit+0x10/0x10 [ 312.059402][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 312.064774][ C0] do_group_exit+0xd3/0x2a0 [ 312.069273][ C0] __x64_sys_exit_group+0x3e/0x50 [ 312.074291][ C0] x64_sys_call+0x151f/0x1720 [ 312.078965][ C0] do_syscall_64+0xcd/0x250 [ 312.083468][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.089362][ C0] RIP: 0033:0x7fe2ca18d169 [ 312.093771][ C0] Code: Unable to access opcode bytes at 0x7fe2ca18d13f. [ 312.100773][ C0] RSP: 002b:00007ffc5af53ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 312.109182][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe2ca18d169 [ 312.117147][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.125115][ C0] RBP: 00007ffc5af53f5c R08: 0000001e5af53fef R09: 00000000000927c0 [ 312.133076][ C0] R10: 000000000000021c R11: 0000000000000246 R12: 0000000000000072 [ 312.141037][ C0] R13: 00000000000927c0 R14: 0000000000031e66 R15: 00007ffc5af53fb0 [ 312.149012][ C0]