last executing test programs: 16.734638665s ago: executing program 2 (id=2090): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x2, 0x40) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)=0xffffffffffffffff) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, r1, 0x1, 0x80, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x9c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x7c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd353, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x309}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fffffff, 0xff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x3a41}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa2, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0x9}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x4, 0x28}}]}}}]}, 0x9c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000003980)={0x2020}, 0x2020) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, 0x0, 0x0) 13.290339394s ago: executing program 0 (id=2103): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000"], 0x64}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a00)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1301"], 0x16) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 12.860536533s ago: executing program 2 (id=2105): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lgetxattr(0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0xc840, 0x0, 0x0) close(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) 11.950962727s ago: executing program 0 (id=2108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_io_uring_setup(0x10c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1004, 0x1cb}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 11.465554017s ago: executing program 4 (id=2110): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x401}}}, 0x7) sendmmsg$inet_sctp(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) 10.828825824s ago: executing program 4 (id=2111): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x9, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000700)={0xd8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd128}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0xd8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6(0xa, 0x40000080806, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket(0x2, 0x5, 0x0) r3 = syz_open_dev$video(&(0x7f00000005c0), 0x20000000005, 0x8900) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000680)={0x3, "f9008000290215cbab2f111658df5edc0100000000000000000000000400", 0x1, 0x1, 0x4, 0x200, 0x100, 0x4}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe, &(0x7f0000000300)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"/4166], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) ustat(0x5, &(0x7f0000000400)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 8.904977028s ago: executing program 2 (id=2112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) 8.587288506s ago: executing program 4 (id=2113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001007f00000192000000000000000c0019"], 0x44}}, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) close(r1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="574b0000000000c4000008000001"], 0x28}, 0x1, 0x0, 0x0, 0x24044000}, 0x20000000) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14001000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x44, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r7, 0x89ea, &(0x7f0000000180)) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0xffffffffffffff9f, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0x32}, {@in6=@loopback, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x39}, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0x4}, {0xffffffff, 0xfffffffc}, 0x80, 0x3502, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0) close(r7) syz_open_procfs(0xffffffffffffffff, 0x0) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_TIOCINQ(r10, 0x541b, &(0x7f0000000040)) socket$vsock_stream(0x28, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='$%,\x00', 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='esdfs\x00', 0x2008, &(0x7f00000003c0)='\x00') ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000931d88a3a800669900000000000000"]) 8.569688587s ago: executing program 1 (id=2114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) (fail_nth: 1) 8.51377517s ago: executing program 2 (id=2115): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x2, 0x40) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)=0xffffffffffffffff) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, r1, 0x1, 0x80, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x9c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x7c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd353, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x309}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fffffff, 0xff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x3a41}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa2, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0x9}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x4, 0x28}}]}}}]}, 0x9c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000003980)={0x2020}, 0x2020) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000ac0)={0x0, 0x0}, 0x10) 8.073229424s ago: executing program 0 (id=2117): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a000200aaaaaaaaaaaa0000060005"], 0x30}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) open(0x0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000535000/0x800000)=nil, 0x802202, 0x19) 8.050042854s ago: executing program 4 (id=2118): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000"], 0x64}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a00)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1301"], 0x16) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8.049658832s ago: executing program 1 (id=2119): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = io_uring_setup(0x1d06, &(0x7f00000003c0)={0x0, 0x903, 0x10000, 0x0, 0x36d}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r3 = syz_io_uring_setup(0x53e2, &(0x7f0000000140)={0x0, 0x804, 0x0, 0x8000, 0xfffffffe, 0x0, r1}, &(0x7f0000000240), 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000340)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4080) close_range(r1, r3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYBLOB="0000000000000000080004004400000008001b000000000035f22c22387cd1a95b90eaac7b4f0b9ee7d0c19e7534"], 0x30}}, 0x0) r10 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 7.92882952s ago: executing program 3 (id=2120): r0 = socket$inet6(0xa, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x28) open(&(0x7f0000000000)='./file0\x00', 0x41, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$sg(0x0, 0x0, 0x8002) socket$alg(0x26, 0x5, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004240)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x200000100000011, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000040000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x2c, r4, 0x801, 0x70bd21, 0x25ffdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x2c}}, 0x20004804) msgget(0x0, 0x614) 7.580363975s ago: executing program 3 (id=2121): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x401}}}, 0x7) sendmmsg$inet_sctp(r4, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) 7.575799106s ago: executing program 1 (id=2122): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lgetxattr(0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0xc840, 0x0, 0x0) close(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) 7.037029999s ago: executing program 4 (id=2123): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lgetxattr(0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) 6.996042674s ago: executing program 3 (id=2124): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085000000080000009527ea3611e428ad7b3c3c3d2ea7ca9f20c0a6ed31724c"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x101600, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad8f06c5820f2e9d3b003292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000010c0)=0xffff) recvmsg(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002600)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xb}, {0xc, 0xffff}, {0x7, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x402c048) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) r7 = socket$inet6(0xa, 0x80001, 0xb) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @private2, 0x3}}}, 0x108) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) 5.92947756s ago: executing program 2 (id=2125): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) r3 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) link(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r3, 0x48e9, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000d29bd7000fedbdf251b0000000c000600000000000000000010002e800c0004000200aaaaaaaaaaaa10002e800c000400000000000000000008000300653f12dc764f4dc4167a5a1812efc167d3f11acc9ea0675d1e0d5e54f401cfb19eb6d4750ba0438bf4ae76870d716daa9758d16b01efac03c3a7261d333c557d57120c96379644345a254a588b2020c0085b6d236a94b242abdcf5547feb2206486f89ee6fc2fe093c47f4cf963eb018f46c2a376abf", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20000840}, 0x4004010) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x65) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000050000000500190004000000060008000000000005003a000000000006000a00d88909bb6d3592fd522309fe2fb510b9cd14b93c9971fa4661f8a6ab1e72d64a998a71a05aa6b18880df2415c3c5e6490572e923a059"], 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 3.878488398s ago: executing program 3 (id=2126): mknod(&(0x7f0000000280)='./file0\x00', 0x8000, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x0, 0x401, 0x0, 0x1}, 'syz0\x00', 0x39}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x4460430d53af3e63}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000100), 0x0}, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x101401) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000040)={r4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0xd, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0x7, &(0x7f00000002c0)={0x6, 0x81}, 0x0) timerfd_create(0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x4, 0x9, 0x5, 0x32}, {0x6, 0x3, 0xdd, 0xc}, {0x8001, 0x1, 0x21, 0x2a6}, {0x7, 0x6, 0x7, 0xff}]}) 3.12697975s ago: executing program 0 (id=2127): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000f8ffffff0000000001000080186000001000000000000000060000002d835000040000008500000005000000b72200010800000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000280800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000c0152732a2284c49b0beb810a0aae37c50b8f77e2d760b9731a48b36e0a45cba2f159c469f64636a7b3990b4f4ed1fb519b10101059adc9ae35a5ab22649dddefc3fc1", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018240000", @ANYRES32, @ANYBLOB="00000000650000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x56, &(0x7f00000002c0)=""/86, 0x40f00, 0xa, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x0, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x1, 0x1], &(0x7f00000003c0)=[{0x3, 0x1, 0xd, 0xb}, {0x0, 0x2, 0x7, 0x4}, {0x3, 0x2, 0x2, 0x2}], 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x803, 0x0) r3 = socket(0x25, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x800) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x2d4) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/53, 0x0, 0xeeef0000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r6, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000000700)="49723b3ab53a13274c", 0x0}, 0x50) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r8, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 2.87822701s ago: executing program 1 (id=2128): mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x2010, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x4], 0x0, 0x1a2}}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket(0x40000000015, 0x5, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() tkill(r6, 0xb) r7 = socket$kcm(0x2, 0x3, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x700, 0x0, 0x2, 0x1ff, {{0xd, 0x4, 0x1, 0x6, 0x34, 0x66, 0x0, 0x1, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x1a, 0x3, [{0x0, 0xb, "e742f98c21e4253a48"}, {0x7, 0x9, "34173782f047bd"}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d80000001900020029bd7000fbdbdf257f000001000000000000000000000000ac1e00010000000000000000000000004e21000a4e230d600a0020203a000000", @ANYRES32=r9, @ANYRES32, @ANYBLOB="07000000000000000800000000000000080000000000000006000000000000000000000000000000010000000000000000fd920000000000010000000000000001000100000000006a040000000000000608000000000000e09d000000000000070000000000000001000100000000000c0015005c073500090000000a00100001000000000000000800180005000000"], 0xd8}}, 0x8000000) sendmsg$inet(r7, 0x0, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket(0x10, 0x803, 0x0) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x80) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c841, &(0x7f0000b63fe4)={0xa, 0x2, 0x3}, 0x1c) 2.877948275s ago: executing program 2 (id=2129): syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000490001002abd7000fcdbdf250a001f00", @ANYRES32=0x0, @ANYBLOB="ff01000014000100000000000000000000001c0000000001080002000c000000"], 0x38}, 0x1, 0x0, 0x0, 0x60c8000}, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0xb, 0x380000, 0x3ff, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0x7fff, 0x6, 0x7, 0x4, 0xca3, 0x7, 0x80000000, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9, 0x0, 0x100, 0x4, 0x2, 0x7, 0x3, 0x8, 0x5}) memfd_secret(0xfffffffe) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xe, 0x6, 0xf, 0xa, 0x0, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x7ff}) socket$inet6_dccp(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$sndctrl(&(0x7f0000000040), 0x5, 0x24181) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_gettime(0xfffffffffffffff1, &(0x7f0000000000)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x2, 0x1, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7}, 0x1c) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000009a80)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000003fffff) 2.87743659s ago: executing program 4 (id=2130): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect(0x1, 0x16, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 2.565967944s ago: executing program 0 (id=2131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_io_uring_setup(0x10c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1004, 0x1cb}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.722801706s ago: executing program 1 (id=2132): r0 = socket$inet6(0xa, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x28) open(&(0x7f0000000000)='./file0\x00', 0x41, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$sg(0x0, 0x0, 0x8002) socket$alg(0x26, 0x5, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004240)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x200000100000011, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000040000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x2c, r4, 0x801, 0x70bd21, 0x25ffdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x2c}}, 0x20004804) msgget(0x0, 0x614) 1.601739583s ago: executing program 0 (id=2133): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000"], 0x64}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a00)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1301"], 0x16) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 485.352562ms ago: executing program 3 (id=2134): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) syz_open_procfs(0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x401}}}, 0x7) sendmmsg$inet_sctp(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) 482.196045ms ago: executing program 1 (id=2135): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)='7', 0x1) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27050200d40f00000600002f8847", 0xe}], 0x1}, 0x0) syz_usb_disconnect(r0) 0s ago: executing program 3 (id=2136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='mm_page_free\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) write$binfmt_misc(r5, &(0x7f0000000080), 0x3a7) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900090000000000000000001c140000fe000001000000001400120011"], 0x30}}, 0x0) sendto$inet(r5, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x1d4c, 0x0, 0x0) kernel console output (not intermixed with test programs): ad block 0x0: -5 [ 487.685799][T12025] unable to read squashfs_super_block [ 487.714166][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 487.722252][ T53] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 487.722434][ T8] usb 4-1: USB disconnect, device number 50 [ 487.741154][ T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 487.775818][ T5136] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 487.787010][ T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 487.804066][ T8] quatech2 4-1:0.51: device disconnected [ 487.828645][ T25] usb 1-1: USB disconnect, device number 48 [ 488.014171][T12030] tipc: Started in network mode [ 488.019541][T12030] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 488.031066][T12030] tipc: Enabled bearer , priority 10 [ 488.434203][T12032] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 488.440759][T12032] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 488.450471][T12032] vhci_hcd vhci_hcd.0: Device attached [ 488.575582][T12042] FAULT_INJECTION: forcing a failure. [ 488.575582][T12042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.595426][T12042] CPU: 1 UID: 0 PID: 12042 Comm: syz.1.1689 Not tainted 6.14.0-rc2-syzkaller #0 [ 488.595458][T12042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 488.595467][T12042] Call Trace: [ 488.595473][T12042] [ 488.595479][T12042] dump_stack_lvl+0x16c/0x1f0 [ 488.595502][T12042] should_fail_ex+0x50a/0x650 [ 488.595529][T12042] _copy_from_user+0x2e/0xd0 [ 488.595546][T12042] copy_msghdr_from_user+0x99/0x160 [ 488.595567][T12042] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 488.595591][T12042] ? __pfx___lock_acquire+0x10/0x10 [ 488.595620][T12042] ___sys_recvmsg+0xdc/0x1a0 [ 488.595640][T12042] ? __pfx____sys_recvmsg+0x10/0x10 [ 488.595661][T12042] ? __pfx_lock_release+0x10/0x10 [ 488.595681][T12042] ? trace_lock_acquire+0x14e/0x1f0 [ 488.595716][T12042] do_recvmmsg+0x2f8/0x740 [ 488.595739][T12042] ? __pfx_do_recvmmsg+0x10/0x10 [ 488.595758][T12042] ? vfs_write+0x306/0x1150 [ 488.595784][T12042] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 488.595808][T12042] ? __fget_files+0x206/0x3a0 [ 488.595827][T12042] __x64_sys_recvmmsg+0x239/0x290 [ 488.595847][T12042] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 488.595874][T12042] do_syscall_64+0xcd/0x250 [ 488.595894][T12042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.595915][T12042] RIP: 0033:0x7fb43818cde9 [ 488.595928][T12042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.595944][T12042] RSP: 002b:00007fb438f28038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 488.595961][T12042] RAX: ffffffffffffffda RBX: 00007fb4383a5fa0 RCX: 00007fb43818cde9 [ 488.595971][T12042] RDX: 0000000000000001 RSI: 0000400000009500 RDI: 0000000000000004 [ 488.595981][T12042] RBP: 00007fb438f28090 R08: 0000000000000000 R09: 0000000000000000 [ 488.595991][T12042] R10: 0000000000002100 R11: 0000000000000246 R12: 0000000000000001 [ 488.596001][T12042] R13: 0000000000000000 R14: 00007fb4383a5fa0 R15: 00007ffe41721468 [ 488.596022][T12042] [ 488.805486][ T8] vhci_hcd: vhci_device speed not set [ 488.817469][ T29] audit: type=1400 audit(1739215186.405:4290): avc: denied { bind } for pid=12045 comm="syz.3.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 488.890984][ T8] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 489.028325][T12049] all: renamed from bridge_slave_0 (while UP) [ 489.125524][T12051] all: renamed from bridge_slave_0 (while UP) [ 489.134700][T12055] bpf: Bad value for 'mode' [ 489.160820][ T5868] tipc: Node number set to 10005162 [ 489.202660][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1695'. [ 489.203216][ T29] audit: type=1400 audit(1739215186.795:4291): avc: denied { bind } for pid=12057 comm="syz.0.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 489.256800][T12035] vhci_hcd: connection reset by peer [ 489.265556][T12055] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1694'. [ 489.280071][ T3022] vhci_hcd: stop threads [ 489.294419][ T3022] vhci_hcd: release socket [ 489.301472][ T25] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 489.314542][ T3022] vhci_hcd: disconnect device [ 489.431299][ T5834] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 489.450902][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 489.458062][ T25] usb 4-1: config index 0 descriptor too short (expected 16420, got 36) [ 489.482723][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.495308][ T25] usb 4-1: config 0 has no interfaces? [ 489.504784][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 489.517755][ T25] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 490.085398][ T25] usb 4-1: Product: syz [ 490.097627][ T25] usb 4-1: SerialNumber: syz [ 490.106942][ T25] usb 4-1: config 0 descriptor?? [ 490.241741][ T5834] usb 2-1: Using ep0 maxpacket: 8 [ 490.245091][ T5834] usb 2-1: config index 0 descriptor too short (expected 16420, got 36) [ 490.245124][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.245135][ T5834] usb 2-1: config 0 has no interfaces? [ 490.246169][ T5834] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 490.246188][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 490.246199][ T5834] usb 2-1: Product: syz [ 490.246222][ T5834] usb 2-1: SerialNumber: syz [ 490.247877][ T5834] usb 2-1: config 0 descriptor?? [ 490.319869][ T25] usb 4-1: USB disconnect, device number 51 [ 490.452124][T12077] netlink: 'syz.0.1699': attribute type 2 has an invalid length. [ 490.473089][ T5834] usb 2-1: USB disconnect, device number 48 [ 490.510376][T12077] netlink: 'syz.0.1699': attribute type 8 has an invalid length. [ 490.541262][T12077] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1699'. [ 490.711282][T12081] overlayfs: missing 'lowerdir' [ 491.060905][ T29] audit: type=1400 audit(1739215188.645:4292): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 491.467634][ T29] audit: type=1400 audit(1739215189.055:4293): avc: denied { name_bind } for pid=12097 comm="syz.4.1707" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 491.489388][ C1] vkms_vblank_simulate: vblank timer overrun [ 491.622373][T12101] ax25_connect(): syz.1.1706 uses autobind, please contact jreuter@yaina.de [ 492.158102][ T29] audit: type=1400 audit(1739215189.155:4294): avc: denied { create } for pid=12094 comm="syz.1.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 492.200374][ T5868] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 492.253822][ T29] audit: type=1400 audit(1739215189.215:4295): avc: denied { bind } for pid=12094 comm="syz.1.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 492.279240][ T29] audit: type=1400 audit(1739215189.215:4296): avc: denied { connect } for pid=12094 comm="syz.1.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 492.372016][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 492.393075][ T5868] usb 5-1: unable to get BOS descriptor or descriptor too short [ 492.405430][T12117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 492.412339][ T5868] usb 5-1: config 2 has an invalid interface number: 153 but max is 0 [ 492.707380][T12117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 492.716380][ T5868] usb 5-1: config 2 has no interface number 0 [ 492.727175][ T5868] usb 5-1: config 2 interface 153 has no altsetting 0 [ 492.785796][ T5868] usb 5-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=d9.c7 [ 492.805606][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.823191][ T5868] usb 5-1: Product: syz [ 492.828577][ T5868] usb 5-1: Manufacturer: syz [ 492.839947][ T5868] usb 5-1: SerialNumber: syz [ 493.132104][T12098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.140594][T12098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.323815][T12132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.338846][T12132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.219576][ T29] audit: type=1326 audit(1739215191.255:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12133 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43818cde9 code=0x7ffc0000 [ 494.243062][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.280928][ T8] vhci_hcd: vhci_device speed not set [ 494.624290][ T29] audit: type=1326 audit(1739215191.255:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12133 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43818cde9 code=0x7ffc0000 [ 494.667632][ T29] audit: type=1326 audit(1739215191.265:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12133 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb43818cde9 code=0x7ffc0000 [ 494.723060][ T29] audit: type=1326 audit(1739215191.275:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12133 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43818cde9 code=0x7ffc0000 [ 494.746766][ T29] audit: type=1326 audit(1739215191.275:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12133 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43818cde9 code=0x7ffc0000 [ 494.770260][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.790099][ T5868] imon 5-1:2.153: unable to register, err -19 [ 494.797980][ T29] audit: type=1326 audit(1739215191.315:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12133 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb43818cde9 code=0x7ffc0000 [ 494.821403][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.831476][ T5868] usb 5-1: USB disconnect, device number 52 [ 494.842969][ T29] audit: type=1326 audit(1739215191.325:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12133 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43818cde9 code=0x7ffc0000 [ 494.873150][T12150] fuse: Unknown parameter 'grou00000000000000000000' [ 494.907092][ T29] audit: type=1326 audit(1739215191.325:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12133 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43818cde9 code=0x7ffc0000 [ 494.967967][ T29] audit: type=1400 audit(1739215192.335:4305): avc: denied { read } for pid=12142 comm="syz.3.1718" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 494.991146][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.001890][ T29] audit: type=1400 audit(1739215192.335:4306): avc: denied { open } for pid=12142 comm="syz.3.1718" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 495.025850][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.052408][ T5834] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 495.256718][ T5834] usb 1-1: config 0 has an invalid interface number: 100 but max is 0 [ 495.269042][ T5834] usb 1-1: config 0 has no interface number 0 [ 495.306044][ T5834] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=6d.61 [ 495.334943][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.390342][ T5834] usb 1-1: Product: syz [ 495.410953][ T25] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 495.428707][ T5834] usb 1-1: Manufacturer: syz [ 495.508865][ T5834] usb 1-1: SerialNumber: syz [ 495.691147][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 495.750700][ T5834] usb 1-1: config 0 descriptor?? [ 495.758538][ T25] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 495.774798][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.786021][ T25] usb 2-1: Product: syz [ 495.790228][ T25] usb 2-1: Manufacturer: syz [ 495.832892][ T25] usb 2-1: SerialNumber: syz [ 495.855473][ T25] r8152-cfgselector 2-1: Unknown version 0x0000 [ 495.862210][ T25] r8152-cfgselector 2-1: config 0 descriptor?? [ 496.091434][ T5834] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 496.101201][T12147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.177112][T12147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.184791][ T5868] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 496.245005][ T25] r8152-cfgselector 2-1: Unknown version 0x0000 [ 496.306396][ T5834] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 496.306792][T12147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.321264][ T25] r8152-cfgselector 2-1: bad CDC descriptors [ 496.361226][T12147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.379638][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.403872][ T25] r8152-cfgselector 2-1: USB disconnect, device number 49 [ 496.411294][ T51] usb 1-1: USB disconnect, device number 49 [ 496.428706][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.447020][ T5834] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 496.462386][ T5834] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 496.473245][ T5834] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 496.483070][ T5834] usb 4-1: Manufacturer: syz [ 496.496003][ T5834] usb 4-1: config 0 descriptor?? [ 496.513548][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 496.532559][ T5868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.563833][ T5868] usb 5-1: config 0 has no interfaces? [ 496.577271][ T5868] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 496.622356][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 496.641277][ T5868] usb 5-1: Product: syz [ 496.646689][ T5868] usb 5-1: SerialNumber: syz [ 496.659298][ T5868] usb 5-1: config 0 descriptor?? [ 496.877696][ T5868] usb 5-1: USB disconnect, device number 53 [ 496.914271][ T5834] appleir 0003:05AC:8243.0013: item fetching failed at offset 0/1 [ 496.943783][ T5834] appleir 0003:05AC:8243.0013: parse failed [ 496.950526][ T5834] appleir 0003:05AC:8243.0013: probe with driver appleir failed with error -22 [ 497.015856][T12187] tipc: Enabling of bearer rejected, already enabled [ 497.273109][ T5868] usb 4-1: USB disconnect, device number 52 [ 497.401798][T12190] geneve2: entered promiscuous mode [ 497.413047][T12190] geneve2: entered allmulticast mode [ 498.270258][T12211] ptrace attach of "./syz-executor exec"[5814] was attempted by "./syz-executor exec"[12211] [ 498.303597][T12206] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1737'. [ 498.312629][T12206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1737'. [ 498.511597][T12214] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1739'. [ 498.520826][T12214] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1739'. [ 498.533509][T12214] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 499.044354][T12224] sp0: Synchronizing with TNC [ 499.137220][T12227] random: crng reseeded on system resumption [ 499.380802][ T5834] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 499.594315][T12027] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 499.612748][T12027] Bluetooth: hci3: Injecting HCI hardware error event [ 499.620494][ T5834] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 499.641243][ T5834] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 499.641529][ T53] Bluetooth: hci3: hardware error 0x00 [ 499.651790][ T5834] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 499.667055][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.708960][T12224] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 499.766321][ T5834] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 499.837503][T12234] tipc: Started in network mode [ 499.842738][T12234] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 499.850221][T12234] tipc: Enabled bearer , priority 10 [ 500.240341][T12234] geneve2: entered promiscuous mode [ 500.245806][T12234] geneve2: entered allmulticast mode [ 500.744258][T12229] netlink: 'syz.0.1744': attribute type 10 has an invalid length. [ 500.752757][T12229] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1744'. [ 501.350640][ T8] tipc: Node number set to 10005162 [ 501.409032][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.423000][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 501.423034][ T29] audit: type=1400 audit(1739215198.505:4308): avc: denied { mount } for pid=12236 comm="syz.4.1747" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 501.424727][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.681052][ T25] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 501.751038][ T53] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 501.787740][ T5834] usb 2-1: USB disconnect, device number 50 [ 501.804224][T12223] [U] è` [ 501.885721][ T25] usb 4-1: config 2 has no interfaces? [ 501.919458][ T25] usb 4-1: New USB device found, idVendor=2304, idProduct=023a, bcdDevice=2d.94 [ 501.919549][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.919612][ T25] usb 4-1: Product: syz [ 501.919669][ T25] usb 4-1: Manufacturer: syz [ 501.919728][ T25] usb 4-1: SerialNumber: syz [ 502.091251][ T6103] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 502.432358][ T6103] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 502.450758][ T6103] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 502.460613][ T6103] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 502.534316][ T6103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.573392][T12246] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 502.613253][ T6103] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 502.807899][T12255] syzkaller1: entered promiscuous mode [ 502.813579][T12255] syzkaller1: entered allmulticast mode [ 502.940636][ T8] usb 5-1: USB disconnect, device number 54 [ 502.958798][T12258] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 504.171984][ T25] usb 4-1: USB disconnect, device number 53 [ 504.397195][ T29] audit: type=1400 audit(1739215201.985:4309): avc: denied { setopt } for pid=12271 comm="syz.3.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 504.681083][T12278] xt_nfacct: accounting object `syz1' does not exists [ 505.435565][T12275] overlayfs: missing 'lowerdir' [ 506.003691][T12288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1760'. [ 506.118291][T12292] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 506.238058][T12296] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 506.383784][T12300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1767'. [ 506.417179][T12300] netlink: 'syz.1.1767': attribute type 62 has an invalid length. [ 506.482809][T12300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1767'. [ 507.193885][ T53] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 507.204585][ T53] Bluetooth: hci2: Injecting HCI hardware error event [ 507.217397][ T53] Bluetooth: hci2: hardware error 0x00 [ 508.081547][T12322] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1774'. [ 508.090636][T12322] openvswitch: netlink: Flow actions attr not present in new flow. [ 508.549453][T12324] random: crng reseeded on system resumption [ 509.045174][T12336] netlink: 'syz.3.1776': attribute type 2 has an invalid length. [ 509.052992][T12336] netlink: 'syz.3.1776': attribute type 8 has an invalid length. [ 509.060778][T12336] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1776'. [ 509.270987][ T53] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 510.138396][T12325] netlink: 'syz.2.1775': attribute type 10 has an invalid length. [ 510.146397][T12325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1775'. [ 510.670814][ T5834] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 510.930814][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 510.937236][ T5834] usb 5-1: config 0 has no interfaces? [ 510.943187][ T5834] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 510.969206][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.328435][ T5834] usb 5-1: config 0 descriptor?? [ 511.693891][ T5834] usb 5-1: USB disconnect, device number 55 [ 512.755664][ T29] audit: type=1400 audit(1739215210.325:4310): avc: denied { map } for pid=12382 comm="syz.2.1790" path="/351/file0" dev="tmpfs" ino=2011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 512.807255][ T29] audit: type=1400 audit(1739215210.325:4311): avc: denied { remount } for pid=12382 comm="syz.2.1790" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 512.843609][ T29] audit: type=1400 audit(1739215210.375:4312): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 512.960343][T12388] trusted_key: encrypted_key: insufficient parameters specified [ 513.481888][ T29] audit: type=1400 audit(1739215210.585:4313): avc: denied { bind } for pid=12384 comm="syz.2.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 513.573562][ T29] audit: type=1400 audit(1739215211.115:4314): avc: denied { write } for pid=12384 comm="syz.2.1791" path="socket:[39456]" dev="sockfs" ino=39456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 513.890949][ T8] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 513.956466][T12400] ptrace attach of "./syz-executor exec"[5818] was attempted by "./syz-executor exec"[12400] [ 514.047771][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 514.308538][T12404] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1796'. [ 514.318019][T12404] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1796'. [ 514.333088][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.350022][ T8] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 514.361244][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.380809][ T8] usb 5-1: config 0 descriptor?? [ 514.416550][ T8] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 514.707713][ T29] audit: type=1400 audit(1739215212.295:4315): avc: denied { ioctl } for pid=12410 comm="syz.3.1798" path="socket:[39510]" dev="sockfs" ino=39510 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 514.845393][ T29] audit: type=1400 audit(1739215212.435:4316): avc: denied { connect } for pid=12414 comm="syz.2.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 514.961270][T12415] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1799'. [ 514.974687][ T29] audit: type=1400 audit(1739215212.565:4317): avc: denied { write } for pid=12414 comm="syz.2.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 515.049307][T12417] syz.2.1799: attempt to access beyond end of device [ 515.049307][T12417] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 515.065111][T12417] SQUASHFS error: Failed to read block 0x0: -5 [ 515.072075][T12417] unable to read squashfs_super_block [ 515.302526][T12421] random: crng reseeded on system resumption [ 515.388156][T12423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1793'. [ 516.503264][ T29] audit: type=1400 audit(1739215214.065:4318): avc: denied { ioctl } for pid=12442 comm="syz.3.1803" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 516.528747][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.810852][ T8] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 517.080842][ T8] usb 1-1: device descriptor read/64, error -71 [ 517.260818][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 517.320882][ T8] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 517.410809][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 517.418592][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.436938][ T9] usb 2-1: config 0 has no interfaces? [ 517.451652][ T8] usb 1-1: device descriptor read/64, error -71 [ 517.464091][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 517.479076][ T9] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 517.500279][ T9] usb 2-1: Product: syz [ 517.505555][ T9] usb 2-1: SerialNumber: syz [ 517.540017][ T9] usb 2-1: config 0 descriptor?? [ 517.571732][ T8] usb usb1-port1: attempt power cycle [ 517.750460][ T9] usb 2-1: USB disconnect, device number 51 [ 517.838121][T12462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.850653][ T29] audit: type=1400 audit(1739215215.425:4319): avc: denied { ioctl } for pid=12461 comm="syz.2.1809" path="socket:[38373]" dev="sockfs" ino=38373 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 517.875335][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.882811][T12462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.893606][T12462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.904736][ T5868] usb 5-1: USB disconnect, device number 56 [ 517.905974][T12462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.921808][T12462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.932325][ T8] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 517.944182][T12462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.954779][ T8] usb 1-1: device descriptor read/8, error -71 [ 517.967620][T12462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.001413][T12462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.011494][T12462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.022009][T12462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.210931][ T8] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 518.291191][ T8] usb 1-1: device descriptor read/8, error -71 [ 518.354689][ T29] audit: type=1400 audit(1739215215.945:4320): avc: denied { create } for pid=12473 comm="syz.4.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 518.375110][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.396813][T12478] ptrace attach of "./syz-executor exec"[5818] was attempted by "./syz-executor exec"[12478] [ 518.409778][ T8] usb usb1-port1: unable to enumerate USB device [ 518.529146][T12479] overlayfs: missing 'lowerdir' [ 518.698814][ T53] Bluetooth: hci4: unexpected event for opcode 0x200b [ 518.885921][T12481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1814'. [ 518.896250][T12481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1814'. [ 518.910875][T12481] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 519.131699][T12474] netlink: 'syz.4.1813': attribute type 10 has an invalid length. [ 519.142581][T12474] batman_adv: batadv0: Adding interface: team0 [ 519.148729][T12474] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 519.171132][T12474] netlink: 'syz.4.1813': attribute type 10 has an invalid length. [ 519.178957][T12474] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1813'. [ 519.187883][T12474] team0: entered promiscuous mode [ 519.192923][T12474] team_slave_0: entered promiscuous mode [ 519.198660][T12474] team_slave_1: entered promiscuous mode [ 519.205157][T12474] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.211901][T12474] batman_adv: batadv0: Interface activated: team0 [ 519.218332][T12474] batman_adv: batadv0: Interface deactivated: team0 [ 519.226252][T12474] batman_adv: batadv0: Removing interface: team0 [ 519.234492][ T29] audit: type=1400 audit(1739215216.815:4321): avc: denied { bind } for pid=12473 comm="syz.4.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 519.350609][ T29] audit: type=1400 audit(1739215216.915:4322): avc: denied { append } for pid=12473 comm="syz.4.1813" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 519.373986][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.402785][T12484] syz.3.1815 (12484): attempted to duplicate a private mapping with mremap. This is not supported. [ 519.417814][ T29] audit: type=1400 audit(1739215216.915:4323): avc: denied { map } for pid=12473 comm="syz.4.1813" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 519.441715][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.488252][ T29] audit: type=1400 audit(1739215216.915:4324): avc: denied { execute } for pid=12473 comm="syz.4.1813" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 519.512146][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.550893][ T29] audit: type=1400 audit(1739215217.085:4325): avc: denied { bind } for pid=12485 comm="syz.2.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 519.684536][T12493] tipc: Enabling of bearer rejected, already enabled [ 520.216951][ T29] audit: type=1400 audit(1739215217.805:4326): avc: denied { getopt } for pid=12496 comm="syz.2.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 520.301157][ T25] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 520.410389][ T29] audit: type=1400 audit(1739215217.995:4327): avc: denied { ioctl } for pid=12510 comm="syz.2.1823" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 520.435989][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 520.600813][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 520.623749][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.639545][ T25] usb 2-1: config 0 has no interfaces? [ 520.647044][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 520.671131][ T25] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 520.689168][ T25] usb 2-1: Product: syz [ 520.704133][ T25] usb 2-1: SerialNumber: syz [ 520.716360][ T25] usb 2-1: config 0 descriptor?? [ 520.822175][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 520.833272][ T29] audit: type=1400 audit(1739215218.415:4328): avc: denied { read } for pid=12518 comm="syz.2.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 520.863092][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.876360][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.880857][ T53] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 520.895149][ T53] Bluetooth: hci1: Injecting HCI hardware error event [ 520.904887][T12027] Bluetooth: hci1: hardware error 0x00 [ 520.905886][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 520.957910][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 520.958374][ T25] usb 2-1: USB disconnect, device number 52 [ 520.967632][ T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 520.990587][ T9] usb 1-1: Manufacturer: syz [ 521.010415][ T9] usb 1-1: config 0 descriptor?? [ 521.162696][ T8] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 521.323833][ T8] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 521.333411][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.348362][ T8] usb 4-1: config 0 descriptor?? [ 521.422319][ T9] appleir 0003:05AC:8243.0014: item fetching failed at offset 0/1 [ 521.431601][ T9] appleir 0003:05AC:8243.0014: parse failed [ 521.437777][ T9] appleir 0003:05AC:8243.0014: probe with driver appleir failed with error -22 [ 521.564888][T12529] ptrace attach of "./syz-executor exec"[5818] was attempted by "./syz-executor exec"[12529] [ 521.577759][ T8] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 521.727314][T12531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1828'. [ 521.736763][T12531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1828'. [ 521.747739][T12531] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 521.921707][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 522.005099][ T9] usb 1-1: USB disconnect, device number 54 [ 522.024704][ T8] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 522.036770][ T8] [drm] Initialized udl on minor 2 [ 522.325050][ T8] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 522.340812][ T8] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 522.371199][ T5868] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 522.507523][T12532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.598397][T12532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.673551][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.692655][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.727102][ T5868] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 522.758279][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.778693][ T5868] usb 3-1: config 0 descriptor?? [ 522.951021][T12027] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 523.397450][T12538] overlayfs: failed to resolve './file0': -2 [ 523.422622][ T5868] usbhid 3-1:0.0: can't add hid device: -71 [ 523.435424][ T5868] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 523.451897][ T5868] usb 3-1: USB disconnect, device number 50 [ 523.549539][T12548] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 523.601050][T12548] Error validating options; rc = [-22] [ 523.810671][T12551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1835'. [ 523.819775][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1835'. [ 523.916506][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 523.933690][ T8] usb 4-1: USB disconnect, device number 54 [ 523.961078][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 523.982002][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 524.223740][T12558] veth1_macvtap: left promiscuous mode [ 524.229404][T12558] macsec0: entered promiscuous mode [ 524.488611][T12561] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1838'. [ 525.396033][ T29] audit: type=1400 audit(1739215222.985:4329): avc: denied { create } for pid=12578 comm="syz.4.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 526.229009][ T29] audit: type=1400 audit(1739215223.815:4330): avc: denied { setopt } for pid=12586 comm="syz.4.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 526.250842][T12587] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 526.419200][ T29] audit: type=1400 audit(1739215223.845:4331): avc: denied { bind } for pid=12586 comm="syz.4.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 526.438629][ T29] audit: type=1400 audit(1739215223.845:4332): avc: denied { setopt } for pid=12586 comm="syz.4.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 526.458187][ T29] audit: type=1400 audit(1739215223.845:4333): avc: denied { write } for pid=12586 comm="syz.4.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 526.614568][ T29] audit: type=1400 audit(1739215224.195:4334): avc: denied { write } for pid=12592 comm="syz.2.1847" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 526.720657][ T8] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 526.728356][T12027] Bluetooth: hci4: unexpected event 0x3e length: 368 > 260 [ 526.728383][T12027] Bluetooth: hci4: unexpected subevent 0x0d length: 367 > 260 [ 526.743153][T12027] Bluetooth: hci4: adv larger than maximum supported [ 526.743172][T12027] Bluetooth: hci4: adv larger than maximum supported [ 526.891382][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 526.904702][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.914943][ T8] usb 4-1: config 0 has no interfaces? [ 526.922944][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 526.932173][ T8] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 526.940413][ T8] usb 4-1: Product: syz [ 526.944695][ T8] usb 4-1: SerialNumber: syz [ 526.950554][ T8] usb 4-1: config 0 descriptor?? [ 527.011027][ T25] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 527.020820][ T5868] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 527.130034][T12027] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 527.165310][ T8] usb 4-1: USB disconnect, device number 55 [ 527.183306][ T5868] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 527.209893][ T5868] usb 3-1: config 0 has no interface number 0 [ 527.217399][ T5868] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 527.233761][ T5868] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 527.246541][ T5868] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 527.263653][ T5868] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 527.282481][ T25] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 26, changing to 8 [ 527.293956][ T25] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 527.304400][ T5868] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 527.307606][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 527.324994][ T25] usb 1-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 527.331731][ T5868] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 527.334362][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.356150][ T5868] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 527.362517][ T25] usb 1-1: config 0 descriptor?? [ 527.368760][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.442853][T12601] netlink: zone id is out of range [ 527.456757][T12601] netlink: set zone limit has 8 unknown bytes [ 527.848222][ T5868] usb 3-1: config 0 descriptor?? [ 527.868226][T12597] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 527.877988][ T25] topre 0003:0853:0146.0015: hidraw0: USB HID v80.00 Device [HID 0853:0146] on usb-dummy_hcd.0-1/input0 [ 527.878029][T12597] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 527.950934][ T5868] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 528.501565][ T5868] usb 3-1: USB disconnect, device number 51 [ 528.511236][ T5868] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 528.521780][ T29] audit: type=1400 audit(1739215226.085:4335): avc: denied { map } for pid=12596 comm="syz.2.1848" path="/dev/ldusb0" dev="devtmpfs" ino=3668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 528.551159][T12611] ptrace attach of "./syz-executor exec"[5833] was attempted by "./syz-executor exec"[12611] [ 528.569323][ T8] usb 1-1: USB disconnect, device number 55 [ 529.881005][ T5834] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 530.062233][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.093768][ T5834] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 530.114730][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.193479][ T5834] usb 2-1: config 0 descriptor?? [ 530.251058][T12645] tipc: Enabling of bearer rejected, already enabled [ 530.261099][ T5834] pwc: Askey VC010 type 2 USB webcam detected. [ 530.579421][ T5834] pwc: recv_control_msg error -71 req 02 val 2b00 [ 530.646713][ T5834] pwc: recv_control_msg error -71 req 02 val 2700 [ 530.677200][ T5834] pwc: recv_control_msg error -71 req 02 val 2c00 [ 530.692269][ T5834] pwc: recv_control_msg error -71 req 04 val 1000 [ 530.705602][ T5834] pwc: recv_control_msg error -71 req 04 val 1300 [ 530.721059][ T5834] pwc: recv_control_msg error -71 req 04 val 1400 [ 530.738113][ T5834] pwc: recv_control_msg error -71 req 02 val 2000 [ 530.747598][T12657] input: syz0 as /devices/virtual/input/input51 [ 530.774271][ T5834] pwc: recv_control_msg error -71 req 02 val 2100 [ 530.786723][ T29] audit: type=1400 audit(1739215228.375:4336): avc: denied { read } for pid=5177 comm="acpid" name="event4" dev="devtmpfs" ino=3672 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 530.794758][ T5834] pwc: recv_control_msg error -71 req 04 val 1500 [ 530.837167][ T5834] pwc: recv_control_msg error -71 req 02 val 2500 [ 530.845856][ T29] audit: type=1400 audit(1739215228.375:4337): avc: denied { open } for pid=5177 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3672 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 530.852069][ T5834] pwc: recv_control_msg error -71 req 02 val 2400 [ 530.869332][ C0] vkms_vblank_simulate: vblank timer overrun [ 530.888809][ T5834] pwc: recv_control_msg error -71 req 02 val 2600 [ 530.896384][ T5834] pwc: recv_control_msg error -71 req 02 val 2900 [ 530.903215][ T5834] pwc: recv_control_msg error -71 req 02 val 2800 [ 530.910045][ T5834] pwc: recv_control_msg error -71 req 04 val 1100 [ 530.916878][ T5834] pwc: recv_control_msg error -71 req 04 val 1200 [ 530.959855][ T5834] pwc: Registered as video103. [ 531.029789][ T29] audit: type=1400 audit(1739215228.375:4338): avc: denied { ioctl } for pid=5177 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3672 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 531.054783][ C0] vkms_vblank_simulate: vblank timer overrun [ 531.932376][ T5834] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input52 [ 532.111946][T12669] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1863'. [ 532.121181][T12669] openvswitch: netlink: Flow actions attr not present in new flow. [ 532.160813][ T5834] usb 2-1: USB disconnect, device number 53 [ 533.510900][ T8] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 533.737362][ T5834] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 533.991172][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 533.997440][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 534.024676][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 534.035330][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 534.084084][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 534.129015][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 534.147672][ T8] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 534.162283][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.165380][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 534.170395][ T8] usb 1-1: Product: syz [ 534.186574][ T8] usb 1-1: Manufacturer: syz [ 534.193499][T12692] netlink: 'syz.4.1870': attribute type 10 has an invalid length. [ 534.195165][ T8] usb 1-1: SerialNumber: syz [ 534.209696][T12680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.219340][T12680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.237061][ T8] usb 1-1: config 0 descriptor?? [ 534.242489][T12692] syz_tun: entered promiscuous mode [ 534.250602][ T5834] usb 3-1: unable to get BOS descriptor or descriptor too short [ 534.263391][ T5834] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 534.270523][ T8] port100 1-1:0.0: NFC: Could not get supported command types [ 534.307471][T12692] : (slave syz_tun): Enslaving as an active interface with an up link [ 534.315954][ T5834] usb 3-1: can't read configurations, error -71 [ 536.966327][ T29] audit: type=1400 audit(1739215234.555:4339): avc: denied { getopt } for pid=12714 comm="syz.1.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 536.986161][ T5834] usb 1-1: USB disconnect, device number 56 [ 537.293213][T12723] netlink: 'syz.4.1878': attribute type 2 has an invalid length. [ 537.301048][T12723] netlink: 'syz.4.1878': attribute type 8 has an invalid length. [ 537.308792][T12723] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1878'. [ 537.898658][ T5834] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 538.641398][ T5834] usb 1-1: Using ep0 maxpacket: 8 [ 538.660933][ T5834] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 538.661007][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 538.661072][ T5834] usb 1-1: Product: syz [ 538.661141][ T5834] usb 1-1: Manufacturer: syz [ 538.661387][ T5834] usb 1-1: SerialNumber: syz [ 538.721660][ T5834] usb 1-1: config 0 descriptor?? [ 539.083475][T12737] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 539.111616][T12736] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 539.922732][ T5834] usb 1-1: USB disconnect, device number 57 [ 540.060892][ T25] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 540.069572][ T901] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 540.100823][ T8] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 540.133786][T12752] tmpfs: Bad value for 'mpol' [ 540.138471][T10900] udevd[10900]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.250908][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 540.257469][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 540.260947][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 540.267328][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 540.282262][ T901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.299123][T12746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.313202][ T8] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 540.319173][ T901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.329908][T12746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.340169][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.350223][ T8] usb 4-1: Product: syz [ 540.357318][ T8] usb 4-1: Manufacturer: syz [ 540.363403][ T8] usb 4-1: SerialNumber: syz [ 540.368773][ T901] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 540.370596][ T8] usb 4-1: config 0 descriptor?? [ 540.389447][ T901] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 540.402189][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 540.410645][ T901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.419274][ T25] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 540.427141][ T25] usb 2-1: can't read configurations, error -71 [ 540.502923][ T901] usb 5-1: config 0 descriptor?? [ 540.670761][ T29] audit: type=1400 audit(1739215238.245:4340): avc: denied { setopt } for pid=12748 comm="syz.3.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 540.883020][ T5834] usb 4-1: USB disconnect, device number 56 [ 541.003803][ T29] audit: type=1400 audit(1739215238.595:4341): avc: denied { shutdown } for pid=12742 comm="syz.4.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 541.460631][ T901] acrux 0003:1A34:0802.0016: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 541.480233][ T901] acrux 0003:1A34:0802.0016: no inputs found [ 541.496382][ T901] acrux 0003:1A34:0802.0016: Failed to enable force feedback support, error: -19 [ 541.577219][T12770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.666039][T12766] evm: overlay not supported [ 541.750817][ T25] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 541.769390][T12774] random: crng reseeded on system resumption [ 541.931057][ T25] usb 2-1: device descriptor read/64, error -71 [ 542.221958][ T25] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 542.380825][ T25] usb 2-1: device descriptor read/64, error -71 [ 542.412702][T12779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1897'. [ 542.501198][ T25] usb usb2-port1: attempt power cycle [ 542.684135][ T901] usb 5-1: reset high-speed USB device number 57 using dummy_hcd [ 543.445643][ T25] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 543.473915][ T25] usb 2-1: device descriptor read/8, error -71 [ 543.570088][T12776] netlink: 'syz.2.1896': attribute type 10 has an invalid length. [ 543.579182][T12776] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1896'. [ 543.720941][ T901] usb 5-1: device descriptor read/64, error -71 [ 543.960886][ T25] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 543.972184][ T901] usb 5-1: reset high-speed USB device number 57 using dummy_hcd [ 543.983167][ T25] usb 2-1: device descriptor read/8, error -71 [ 543.995393][ T901] usb 5-1: device reset changed ep0 maxpacket size! [ 544.009603][ T5834] usb 5-1: USB disconnect, device number 57 [ 544.101019][ T25] usb usb2-port1: unable to enumerate USB device [ 544.161034][ T5834] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 544.260897][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 544.330818][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 544.342016][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.360896][ T5834] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 544.384369][ T5834] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 544.393488][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.404268][ T5834] usb 5-1: config 0 descriptor?? [ 544.412023][ T5834] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 544.423471][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 544.448104][T12791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.477464][T12791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.508751][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 544.522724][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 544.530316][ T9] usb 4-1: can't read configurations, error -71 [ 544.631039][T12796] FAULT_INJECTION: forcing a failure. [ 544.631039][T12796] name failslab, interval 1, probability 0, space 0, times 0 [ 544.669336][T12796] CPU: 0 UID: 0 PID: 12796 Comm: syz.1.1904 Not tainted 6.14.0-rc2-syzkaller #0 [ 544.669361][T12796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 544.669371][T12796] Call Trace: [ 544.669377][T12796] [ 544.669384][T12796] dump_stack_lvl+0x16c/0x1f0 [ 544.669407][T12796] should_fail_ex+0x50a/0x650 [ 544.669432][T12796] ? fs_reclaim_acquire+0xae/0x150 [ 544.669456][T12796] should_failslab+0xc2/0x120 [ 544.669474][T12796] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 544.669492][T12796] ? __alloc_skb+0x2b1/0x380 [ 544.669513][T12796] __alloc_skb+0x2b1/0x380 [ 544.669532][T12796] ? __pfx___alloc_skb+0x10/0x10 [ 544.669550][T12796] ? selinux_socket_getpeersec_dgram+0x1a5/0x370 [ 544.669572][T12796] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 544.669600][T12796] netlink_alloc_large_skb+0x69/0x130 [ 544.669621][T12796] netlink_sendmsg+0x689/0xd70 [ 544.669644][T12796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.669670][T12796] ____sys_sendmsg+0xaaf/0xc90 [ 544.669695][T12796] ? copy_msghdr_from_user+0x10b/0x160 [ 544.669715][T12796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 544.669752][T12796] ___sys_sendmsg+0x135/0x1e0 [ 544.669774][T12796] ? __pfx____sys_sendmsg+0x10/0x10 [ 544.669802][T12796] ? __pfx_lock_release+0x10/0x10 [ 544.669821][T12796] ? trace_lock_acquire+0x14e/0x1f0 [ 544.669848][T12796] ? __fget_files+0x206/0x3a0 [ 544.669870][T12796] __sys_sendmsg+0x16e/0x220 [ 544.669892][T12796] ? __pfx___sys_sendmsg+0x10/0x10 [ 544.669928][T12796] do_syscall_64+0xcd/0x250 [ 544.669949][T12796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.669971][T12796] RIP: 0033:0x7fb43818cde9 [ 544.669984][T12796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.670000][T12796] RSP: 002b:00007fb438f28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.670017][T12796] RAX: ffffffffffffffda RBX: 00007fb4383a5fa0 RCX: 00007fb43818cde9 [ 544.670028][T12796] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000004 [ 544.670038][T12796] RBP: 00007fb438f28090 R08: 0000000000000000 R09: 0000000000000000 [ 544.670055][T12796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.670064][T12796] R13: 0000000000000000 R14: 00007fb4383a5fa0 R15: 00007ffe41721468 [ 544.670085][T12796] [ 544.898145][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.985769][T12800] trusted_key: encrypted_key: insufficient parameters specified [ 545.028697][T12800] trusted_key: encrypted_key: insufficient parameters specified [ 545.108885][T12800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1906'. [ 545.311182][ T8] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 545.354597][T12807] random: crng reseeded on system resumption [ 545.426433][T12810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1899'. [ 545.565202][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 545.583617][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 545.603101][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.620218][ T8] usb 3-1: Product: syz [ 545.769477][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'. [ 545.779900][T12820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.787938][T12820] batadv_slave_0: entered promiscuous mode [ 546.396631][ T8] usb 3-1: Manufacturer: syz [ 546.465003][ T8] usb 3-1: SerialNumber: syz [ 546.486220][ T8] usb 3-1: config 0 descriptor?? [ 546.724148][ T8] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 546.766261][ T5868] usb 5-1: USB disconnect, device number 58 [ 546.890913][ T9] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 547.100990][ T5834] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 547.404944][ T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 547.414670][ T5834] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 547.418320][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.454872][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.461361][ T9] usb 2-1: config 0 descriptor?? [ 547.517598][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.567994][ T5834] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 547.595999][ T5834] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 547.613027][ T5834] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 547.633517][ T5834] usb 1-1: Manufacturer: syz [ 547.661781][ T5834] usb 1-1: config 0 descriptor?? [ 547.871529][ T9] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 547.890304][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 548.132325][ T9] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 548.165871][ T9] [drm] Initialized udl on minor 2 [ 548.339867][ T5834] appleir 0003:05AC:8243.0017: item fetching failed at offset 0/1 [ 548.372446][ T5834] appleir 0003:05AC:8243.0017: parse failed [ 548.402505][ T5834] appleir 0003:05AC:8243.0017: probe with driver appleir failed with error -22 [ 548.460992][ T25] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 548.616988][ T8] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 548.633954][ T8] usb 3-1: USB disconnect, device number 54 [ 548.659821][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.693612][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.718628][ T25] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 548.729616][ T1207] usb 1-1: USB disconnect, device number 58 [ 548.749725][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.782159][ T25] usb 4-1: config 0 descriptor?? [ 549.368587][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 549.379788][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 549.394033][ T1207] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 549.483639][T12860] netlink: 'syz.2.1919': attribute type 2 has an invalid length. [ 549.491545][T12860] netlink: 'syz.2.1919': attribute type 8 has an invalid length. [ 549.499345][T12860] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1919'. [ 549.544812][ T9] usb 2-1: USB disconnect, device number 60 [ 550.395411][ T1207] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 550.600843][T12863] netlink: 'syz.0.1920': attribute type 2 has an invalid length. [ 550.608597][T12863] netlink: 'syz.0.1920': attribute type 8 has an invalid length. [ 550.616383][T12863] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1920'. [ 550.763625][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 550.769618][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 550.798220][ T25] usb 4-1: USB disconnect, device number 59 [ 551.156190][T12871] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[12871] [ 551.411026][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 551.755190][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 551.799410][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.811515][T12871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1924'. [ 551.820517][T12871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1924'. [ 551.861055][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.863985][T12882] netlink: 'syz.4.1928': attribute type 1 has an invalid length. [ 551.904384][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 551.909131][T12882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.958024][T12887] overlayfs: missing 'lowerdir' [ 552.261686][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 552.271603][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 552.279786][ T9] usb 2-1: Manufacturer: syz [ 552.295358][ T9] usb 2-1: config 0 descriptor?? [ 552.475746][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 552.509260][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 552.532691][ T9] usb 2-1: USB disconnect, device number 61 [ 553.098769][ T25] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 553.622445][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 553.635694][ T25] usb 5-1: config 3 has an invalid interface number: 14 but max is 1 [ 553.644850][ T25] usb 5-1: config 3 has no interface number 0 [ 553.654144][ T25] usb 5-1: config 3 interface 14 has no altsetting 0 [ 553.668132][ T25] usb 5-1: New USB device found, idVendor=0413, idProduct=60f6, bcdDevice=79.82 [ 553.710851][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.718863][ T25] usb 5-1: Product: syz [ 553.844242][ T25] usb 5-1: Manufacturer: syz [ 553.848974][ T25] usb 5-1: SerialNumber: syz [ 554.786075][T12922] [U]  [ 554.857283][ T5834] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 554.886216][T12922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1936'. [ 554.908502][T12925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12925 comm=syz.1.1937 [ 554.919000][T12922] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1936'. [ 555.000900][ T5834] usb 1-1: device descriptor read/64, error -71 [ 555.387595][T12937] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 555.462949][T12937] bridge0: port 3(batadv0) entered disabled state [ 555.471970][T12937] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.480026][T12937] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.815655][ T5919] batman_adv: batadv0: IGMP Querier appeared [ 555.816541][ T5834] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 555.821815][ T5919] batman_adv: batadv0: MLD Querier appeared [ 555.870964][ T901] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 555.976807][ T5834] usb 1-1: device descriptor read/64, error -71 [ 556.018585][ T25] dvb-usb: found a 'Leadtek WinFast DTV Dongle H' in cold state, will try to load a firmware [ 556.041340][ T901] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 556.055229][ T901] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.067064][ T901] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.078405][ T901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 556.085857][ T29] audit: type=1400 audit(1739215253.675:4342): avc: denied { load_policy } for pid=12941 comm="syz.2.1942" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 556.085885][T12942] SELinux: policydb magic number 0x7a4fd6ff does not match expected magic number 0xf97cff8c [ 556.117241][ T5834] usb usb1-port1: attempt power cycle [ 556.125804][ T25] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 556.134140][ T25] dib0700: firmware download failed at 7 with -22 [ 556.141582][ T901] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.150491][ T901] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.162984][T12942] SELinux: failed to load policy [ 556.169911][ T901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 556.176823][ T25] dvb-usb: found a 'Leadtek WinFast DTV Dongle H' in cold state, will try to load a firmware [ 556.188107][ T25] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 556.201335][ T901] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.210234][ T901] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.224420][ T25] dib0700: firmware download failed at 7 with -22 [ 556.240452][ T25] usb 5-1: USB disconnect, device number 59 [ 556.248958][ T901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 556.259507][ T901] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.268691][ T901] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.279606][ T901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 556.287394][ T901] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.296541][ T901] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.307902][ T901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 556.315265][ T901] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.324262][ T901] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.335314][ T901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 556.342802][ T901] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.351722][ T901] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.362635][ T901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 556.370014][ T901] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.379055][ T901] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.389972][ T901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 556.398371][ T901] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 556.407504][ T901] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 556.416985][ T901] usb 4-1: Product: syz [ 556.421193][ T901] usb 4-1: Manufacturer: syz [ 556.425989][ T901] usb 4-1: SerialNumber: syz [ 556.432216][ T901] usb 4-1: config 0 descriptor?? [ 556.440253][ T901] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 556.490849][ T5834] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 556.521494][ T5834] usb 1-1: device descriptor read/8, error -71 [ 556.735276][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 556.800824][ T901] usb 4-1: USB disconnect, device number 60 [ 556.820833][ T5834] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 556.833473][ T901] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 556.989676][T12963] syzkaller1: entered promiscuous mode [ 556.995296][T12963] syzkaller1: entered allmulticast mode [ 557.030876][ T5834] usb 1-1: device not accepting address 62, error -71 [ 557.042371][ T5834] usb usb1-port1: unable to enumerate USB device [ 557.251551][ T5906] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 557.433960][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.511030][ T29] audit: type=1400 audit(1739215255.075:4343): avc: denied { getopt } for pid=12964 comm="syz.0.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 557.681624][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 557.889955][ T5906] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 557.916127][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.937791][ T5906] usb 3-1: config 0 descriptor?? [ 558.286637][T12983] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 558.401245][T12986] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1952'. [ 558.411221][T12986] openvswitch: netlink: Flow actions attr not present in new flow. [ 559.283160][T12983] Error validating options; rc = [-22] [ 559.812996][T12989] overlayfs: failed to resolve './file0': -2 [ 559.816262][T12988] ntfs3(nullb0): Primary boot signature is not NTFS. [ 559.875593][T12988] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 560.261086][ T5906] usbhid 3-1:0.0: can't add hid device: -71 [ 560.280471][ T5906] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 560.302667][ T5906] usb 3-1: USB disconnect, device number 55 [ 562.160527][T13017] ceph: No mds server is up or the cluster is laggy [ 562.252654][ T1207] libceph: connect (1)[c::]:6789 error -101 [ 562.265995][ T1207] libceph: mon0 (1)[c::]:6789 connect error [ 562.467404][ T29] audit: type=1326 audit(1739215260.055:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.1.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43818cde9 code=0x7fc00000 [ 562.556947][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.564394][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.666120][ T29] audit: type=1400 audit(1739215260.255:4345): avc: denied { mount } for pid=13041 comm="syz.4.1971" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 562.768085][T13044] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1968'. [ 562.777244][T13044] netlink: 'syz.2.1968': attribute type 1 has an invalid length. [ 562.886288][T13029] syz.2.1968: attempt to access beyond end of device [ 562.886288][T13029] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 563.616366][ T29] audit: type=1400 audit(1739215261.195:4346): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 563.768998][ T29] audit: type=1400 audit(1739215261.355:4347): avc: denied { append } for pid=13056 comm="syz.4.1974" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 563.898358][ T29] audit: type=1400 audit(1739215261.485:4348): avc: denied { ioctl } for pid=13059 comm="syz.2.1977" path="socket:[43147]" dev="sockfs" ino=43147 ioctlcmd=0x5301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 564.330997][ T1207] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 564.730788][ T1207] usb 5-1: Using ep0 maxpacket: 16 [ 564.843619][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.901729][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.920739][ T1207] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 564.938546][ T1207] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 564.949827][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.030901][ T1207] usb 5-1: config 0 descriptor?? [ 565.385063][ T29] audit: type=1326 audit(1739215262.975:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.1.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb438183da7 code=0x7fc00000 [ 565.646641][T13083] block nbd0: shutting down sockets [ 565.647174][T13065] random: crng reseeded on system resumption [ 565.873315][T13087] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1978'. [ 566.116589][T13096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1985'. [ 566.130923][T13096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1985'. [ 566.214860][T13096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.277548][T13096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.296171][T13096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.309898][T13098] tipc: Enabling of bearer rejected, already enabled [ 566.430897][ T5906] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 566.503092][ T1207] usbhid 5-1:0.0: can't add hid device: -71 [ 566.509419][ T1207] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 566.524567][ T1207] usb 5-1: USB disconnect, device number 60 [ 566.600820][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 566.637260][ T5906] usb 1-1: device descriptor read/all, error -61 [ 566.776802][T13105] FAULT_INJECTION: forcing a failure. [ 566.776802][T13105] name failslab, interval 1, probability 0, space 0, times 0 [ 566.789677][T13105] CPU: 0 UID: 0 PID: 13105 Comm: syz.2.1989 Not tainted 6.14.0-rc2-syzkaller #0 [ 566.789691][T13105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 566.789697][T13105] Call Trace: [ 566.789700][T13105] [ 566.789704][T13105] dump_stack_lvl+0x16c/0x1f0 [ 566.789720][T13105] should_fail_ex+0x50a/0x650 [ 566.789735][T13105] ? fs_reclaim_acquire+0xae/0x150 [ 566.789751][T13105] ? alloc_pipe_info+0x1ec/0x590 [ 566.789761][T13105] should_failslab+0xc2/0x120 [ 566.789773][T13105] __kmalloc_noprof+0xcb/0x510 [ 566.789786][T13105] alloc_pipe_info+0x1ec/0x590 [ 566.789798][T13105] splice_direct_to_actor+0x793/0xa40 [ 566.789814][T13105] ? get_pid_task+0xfc/0x250 [ 566.789826][T13105] ? __pfx_direct_splice_actor+0x10/0x10 [ 566.789843][T13105] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 566.789860][T13105] ? __pfx___might_resched+0x10/0x10 [ 566.789878][T13105] do_splice_direct+0x178/0x250 [ 566.789893][T13105] ? __pfx_do_splice_direct+0x10/0x10 [ 566.789908][T13105] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 566.789924][T13105] ? rw_verify_area+0xcf/0x680 [ 566.789939][T13105] do_sendfile+0xafb/0xe40 [ 566.789956][T13105] ? __pfx_do_sendfile+0x10/0x10 [ 566.789970][T13105] ? __fget_files+0x206/0x3a0 [ 566.789983][T13105] __x64_sys_sendfile64+0x1da/0x220 [ 566.789993][T13105] ? ksys_write+0x1ba/0x250 [ 566.790008][T13105] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 566.790023][T13105] do_syscall_64+0xcd/0x250 [ 566.790035][T13105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.790049][T13105] RIP: 0033:0x7fc858f8cde9 [ 566.790057][T13105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.790067][T13105] RSP: 002b:00007fc859d17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 566.790077][T13105] RAX: ffffffffffffffda RBX: 00007fc8591a5fa0 RCX: 00007fc858f8cde9 [ 566.790083][T13105] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 566.790089][T13105] RBP: 00007fc859d17090 R08: 0000000000000000 R09: 0000000000000000 [ 566.790095][T13105] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 566.790100][T13105] R13: 0000000000000000 R14: 00007fc8591a5fa0 R15: 00007ffe6f2c5048 [ 566.790112][T13105] [ 566.790678][ T29] audit: type=1400 audit(1739215264.355:4350): avc: denied { create } for pid=13104 comm="syz.2.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 566.790928][ T5906] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 567.050927][ T5906] usb 1-1: device descriptor read/64, error -71 [ 567.291315][ T5906] usb usb1-port1: attempt power cycle [ 567.980918][ T1207] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 568.012434][ T5906] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 568.042258][ T5906] usb 1-1: device descriptor read/8, error -71 [ 568.146351][ T1207] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 568.176062][ T1207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.212873][ T1207] usb 2-1: Product: syz [ 568.221110][ T1207] usb 2-1: Manufacturer: syz [ 568.234868][ T1207] usb 2-1: SerialNumber: syz [ 568.252161][T13119] block nbd4: shutting down sockets [ 568.260506][ T1207] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 568.283555][ T5868] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 568.303951][T13122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1995'. [ 568.313128][ T5906] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 568.385775][ T5906] usb 1-1: device descriptor read/8, error -71 [ 568.390147][T13123] Bluetooth: MGMT ver 1.23 [ 568.523993][ T5906] usb usb1-port1: unable to enumerate USB device [ 568.895179][T13127] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[13127] [ 569.075281][T13132] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1997'. [ 569.084535][T13132] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1997'. [ 569.351504][ T5868] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 569.365592][ T5868] ath9k_htc: Failed to initialize the device [ 569.410866][ T5906] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 569.440100][ T5868] usb 2-1: ath9k_htc: USB layer deinitialized [ 569.522716][T13142] random: crng reseeded on system resumption [ 569.582775][ T5906] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 569.598011][ T5906] usb 1-1: config 0 has no interface number 0 [ 569.612724][ T5906] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.631017][ T5906] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.643492][ T5906] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 569.655573][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.688634][ T5906] usb 1-1: config 0 descriptor?? [ 569.991463][T13143] netlink: 'syz.3.2001': attribute type 10 has an invalid length. [ 569.999433][T13143] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2001'. [ 570.320165][ T5906] prodikeys 0003:041E:2801.0018: item fetching failed at offset 5/7 [ 570.365414][ T5906] prodikeys 0003:041E:2801.0018: hid parse failed [ 570.385576][ T5906] prodikeys 0003:041E:2801.0018: probe with driver prodikeys failed with error -22 [ 570.407975][ T5906] usb 1-1: USB disconnect, device number 67 [ 570.517555][T13150] random: crng reseeded on system resumption [ 571.211634][ T5868] usb 2-1: USB disconnect, device number 62 [ 571.238604][T13150] netlink: 'syz.2.2003': attribute type 10 has an invalid length. [ 571.246531][T13150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2003'. [ 572.432007][T13160] block nbd0: shutting down sockets [ 573.290321][ T29] audit: type=1400 audit(1739215270.875:4351): avc: denied { create } for pid=13172 comm="syz.4.2009" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 573.350819][ T29] audit: type=1400 audit(1739215270.875:4352): avc: denied { read } for pid=13172 comm="syz.4.2009" name="file0" dev="tmpfs" ino=2251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 573.462050][ T29] audit: type=1400 audit(1739215270.875:4353): avc: denied { open } for pid=13172 comm="syz.4.2009" path="/390/file0" dev="tmpfs" ino=2251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 573.532097][ T29] audit: type=1400 audit(1739215270.875:4354): avc: denied { ioctl } for pid=13172 comm="syz.4.2009" path="/390/file0" dev="tmpfs" ino=2251 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 573.879015][T13183] netlink: zone id is out of range [ 573.886524][T13183] netlink: set zone limit has 8 unknown bytes [ 573.915446][T13184] overlayfs: missing 'lowerdir' [ 573.987949][T13186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2011'. [ 574.448975][ T29] audit: type=1400 audit(1739215272.015:4355): avc: denied { unlink } for pid=5833 comm="syz-executor" name="file0" dev="tmpfs" ino=2251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 575.808723][ T29] audit: type=1400 audit(1739215273.395:4356): avc: denied { mount } for pid=13199 comm="syz.3.2016" name="/" dev="pstore" ino=4209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 575.996732][ T29] audit: type=1400 audit(1739215273.575:4357): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 576.203572][T13211] netlink: zone id is out of range [ 576.215688][T13211] netlink: set zone limit has 8 unknown bytes [ 576.855161][ T25] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 577.063233][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.100221][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.139757][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 577.183017][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 577.195893][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.235485][ T25] usb 2-1: config 0 descriptor?? [ 577.258752][T12027] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 577.494829][T13223] netlink: zone id is out of range [ 577.509007][T13223] netlink: set zone limit has 8 unknown bytes [ 577.619229][T13223] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2023'. [ 577.954415][ T29] audit: type=1400 audit(1739215275.545:4358): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 577.979020][ C0] vkms_vblank_simulate: vblank timer overrun [ 578.064410][ T29] audit: type=1400 audit(1739215275.545:4359): avc: denied { open } for pid=5822 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 578.089190][ T29] audit: type=1400 audit(1739215275.545:4360): avc: denied { ioctl } for pid=5822 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 578.114763][ C0] vkms_vblank_simulate: vblank timer overrun [ 578.298202][ T25] plantronics 0003:047F:FFFF.0019: ignoring exceeding usage max [ 578.324312][ T25] plantronics 0003:047F:FFFF.0019: ignoring exceeding usage max [ 578.440617][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2026'. [ 578.854595][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 578.854611][ T29] audit: type=1400 audit(1739215275.905:4373): avc: denied { read } for pid=13235 comm="syz.2.2027" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 578.921740][ T29] audit: type=1400 audit(1739215275.905:4374): avc: denied { open } for pid=13235 comm="syz.2.2027" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 578.945379][ C0] vkms_vblank_simulate: vblank timer overrun [ 579.226265][ T29] audit: type=1400 audit(1739215275.995:4375): avc: denied { read } for pid=13233 comm="syz.3.2026" dev="nsfs" ino=4026533404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 579.271171][ T25] plantronics 0003:047F:FFFF.0019: usage index exceeded [ 579.278206][ T25] plantronics 0003:047F:FFFF.0019: item 0 1 2 2 parsing failed [ 579.369407][ T29] audit: type=1400 audit(1739215275.995:4376): avc: denied { open } for pid=13233 comm="syz.3.2026" path="net:[4026533404]" dev="nsfs" ino=4026533404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 579.393310][ T29] audit: type=1400 audit(1739215276.005:4377): avc: denied { create } for pid=13233 comm="syz.3.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 579.413814][ T29] audit: type=1400 audit(1739215276.045:4378): avc: denied { prog_load } for pid=13233 comm="syz.3.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 579.450653][ T29] audit: type=1400 audit(1739215276.045:4379): avc: denied { bpf } for pid=13233 comm="syz.3.2026" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 580.050463][ T25] plantronics 0003:047F:FFFF.0019: parse failed [ 580.057567][ T25] plantronics 0003:047F:FFFF.0019: probe with driver plantronics failed with error -22 [ 580.096761][ T25] usb 2-1: USB disconnect, device number 63 [ 580.210203][ T29] audit: type=1400 audit(1739215276.045:4380): avc: denied { perfmon } for pid=13233 comm="syz.3.2026" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 580.232133][ T29] audit: type=1400 audit(1739215276.055:4381): avc: denied { prog_run } for pid=13233 comm="syz.3.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 580.254967][ T29] audit: type=1400 audit(1739215276.085:4382): avc: denied { create } for pid=13233 comm="syz.3.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 580.377964][T13250] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2029'. [ 580.387115][T13250] openvswitch: netlink: Flow actions attr not present in new flow. [ 581.835186][T13269] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2037'. [ 581.839844][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2038'. [ 581.859112][T13272] vlan2: entered allmulticast mode [ 581.864907][T13272] vlan1: entered allmulticast mode [ 581.941922][T13273] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2034'. [ 581.951169][T13273] openvswitch: netlink: Flow actions attr not present in new flow. [ 582.063628][T13272] veth0_vlan: entered allmulticast mode [ 582.460800][ T25] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 582.632067][ T25] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 582.658683][ T25] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 582.705220][ T25] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 582.735023][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.863998][T13265] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 582.883749][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 583.531551][ T5868] usb 2-1: USB disconnect, device number 64 [ 583.553558][T13286] tipc: Enabling of bearer rejected, already enabled [ 583.942213][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 583.942228][ T29] audit: type=1400 audit(1739215281.535:4437): avc: denied { read } for pid=13295 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.266959][T13300] netlink: zone id is out of range [ 584.273528][T13300] netlink: set zone limit has 8 unknown bytes [ 584.284247][T13300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2043'. [ 585.615308][ T29] audit: type=1400 audit(1739215281.875:4438): avc: denied { create } for pid=13292 comm="syz.2.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 585.650863][ T29] audit: type=1400 audit(1739215281.875:4439): avc: denied { write } for pid=13292 comm="syz.2.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 585.767335][ T29] audit: type=1400 audit(1739215281.885:4440): avc: denied { create } for pid=13264 comm="syz.1.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 586.032005][ T29] audit: type=1400 audit(1739215281.885:4441): avc: denied { write } for pid=13264 comm="syz.1.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 586.092618][ T29] audit: type=1400 audit(1739215282.355:4442): avc: denied { create } for pid=13284 comm="syz.4.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 586.212518][ T29] audit: type=1400 audit(1739215282.365:4443): avc: denied { open } for pid=13295 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.301662][ T29] audit: type=1400 audit(1739215282.365:4444): avc: denied { getattr } for pid=13295 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.327118][ C0] vkms_vblank_simulate: vblank timer overrun [ 586.472729][ T29] audit: type=1400 audit(1739215282.545:4445): avc: denied { getopt } for pid=13284 comm="syz.4.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 586.492742][ C0] vkms_vblank_simulate: vblank timer overrun [ 586.498961][ T29] audit: type=1400 audit(1739215283.475:4446): avc: denied { getattr } for pid=13284 comm="syz.4.2041" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 586.690147][T13318] syz.1.2048: attempt to access beyond end of device [ 586.690147][T13318] loop1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 586.746853][T13318] gfs2: error -5 reading superblock [ 586.905874][T13323] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[13323] [ 587.166435][T13324] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2049'. [ 587.175946][T13324] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2049'. [ 588.570798][T13348] netlink: 'syz.3.2053': attribute type 2 has an invalid length. [ 588.578602][T13348] netlink: 'syz.3.2053': attribute type 8 has an invalid length. [ 588.586400][T13348] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2053'. [ 588.964892][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 588.964922][ T29] audit: type=1400 audit(1739215286.555:4491): avc: denied { create } for pid=13349 comm="syz.0.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 588.975378][ T25] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 589.171221][ T25] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 589.197936][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 589.226160][ T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 589.259646][ T29] audit: type=1400 audit(1739215286.595:4492): avc: denied { write } for pid=13349 comm="syz.0.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 589.284688][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 589.302713][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 589.825140][ T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 589.836700][ T29] audit: type=1400 audit(1739215286.595:4493): avc: denied { read } for pid=13349 comm="syz.0.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 589.870987][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 589.898818][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 589.941942][ T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 589.955596][ T29] audit: type=1400 audit(1739215286.595:4494): avc: denied { ioctl } for pid=13339 comm="syz.1.2052" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 590.026466][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 590.136317][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 590.197057][ T29] audit: type=1400 audit(1739215286.605:4495): avc: denied { ioctl } for pid=13349 comm="syz.0.2055" path="socket:[44454]" dev="sockfs" ino=44454 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 590.222981][ T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 590.259539][ T5906] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 590.369190][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 590.393973][ T29] audit: type=1400 audit(1739215286.605:4496): avc: denied { create } for pid=13349 comm="syz.0.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 590.416914][ T29] audit: type=1400 audit(1739215286.605:4497): avc: denied { read } for pid=13349 comm="syz.0.2055" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 590.440066][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 590.455224][ T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 590.470787][ T29] audit: type=1400 audit(1739215286.605:4498): avc: denied { open } for pid=13349 comm="syz.0.2055" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 590.505000][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 590.525908][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.537821][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.548263][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 590.557294][ T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 590.568202][ T29] audit: type=1400 audit(1739215286.675:4499): avc: denied { read write } for pid=13349 comm="syz.0.2055" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 590.602084][ T5906] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 590.611291][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 590.619874][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.631157][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 590.649809][ T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 590.664846][ T29] audit: type=1400 audit(1739215286.675:4500): avc: denied { open } for pid=13349 comm="syz.0.2055" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 590.695672][ T5906] usb 5-1: config 0 descriptor?? [ 590.702095][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2058'. [ 590.715444][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 590.725546][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 590.744959][ T25] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 590.770863][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 590.802957][ T25] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 590.894722][T13374] tipc: Resetting bearer [ 591.100838][ T1207] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 591.276899][ T1207] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 591.307723][ T1207] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 591.352927][ T1207] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 591.371711][ T1207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.412653][T13380] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 591.429317][ T1207] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 591.663646][ T1207] usb 1-1: USB disconnect, device number 68 [ 591.768715][ T25] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 591.790827][ T25] usb 2-1: Product: syz [ 591.795095][ T5906] usbhid 5-1:0.0: can't add hid device: -71 [ 591.801100][ T5906] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 592.326352][T13390] IPv6: sit2: Disabled Multicast RS [ 592.409768][T13390] sit2: entered allmulticast mode [ 592.708172][ T25] usb 2-1: Manufacturer: syz [ 592.718423][ T5906] usb 5-1: USB disconnect, device number 61 [ 592.726388][ T25] usb 2-1: SerialNumber: syz [ 592.732672][ T25] usb 2-1: config 0 descriptor?? [ 592.740502][ T25] usb 2-1: can't set config #0, error -71 [ 592.752720][ T25] usb 2-1: USB disconnect, device number 65 [ 592.760162][T10900] udevd[10900]: setting mode of /dev/bus/usb/002/065 to 020664 failed: No such file or directory [ 592.772040][T10900] udevd[10900]: setting owner of /dev/bus/usb/002/065 to uid=0, gid=0 failed: No such file or directory [ 593.389909][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2064'. [ 593.407893][T13398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.416323][T13398] batadv_slave_0: entered promiscuous mode [ 593.930128][T13402] trusted_key: syz.3.2062 sent an empty control message without MSG_MORE. [ 594.176789][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 594.177862][ T29] audit: type=1400 audit(1739215291.765:4561): avc: denied { create } for pid=13405 comm="syz.0.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 594.391383][ T5906] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 594.403126][ T29] audit: type=1400 audit(1739215291.855:4562): avc: denied { setopt } for pid=13405 comm="syz.0.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 594.465522][ T29] audit: type=1400 audit(1739215291.995:4563): avc: denied { read } for pid=13411 comm="syz.1.2067" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 594.575121][ T29] audit: type=1400 audit(1739215291.995:4564): avc: denied { open } for pid=13411 comm="syz.1.2067" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 594.612869][ T29] audit: type=1400 audit(1739215292.015:4565): avc: denied { create } for pid=13411 comm="syz.1.2067" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 595.226005][ T29] audit: type=1400 audit(1739215292.015:4566): avc: denied { map } for pid=13411 comm="syz.1.2067" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 595.262960][ T29] audit: type=1400 audit(1739215292.015:4567): avc: denied { read write } for pid=13411 comm="syz.1.2067" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 595.288056][ T5906] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 595.351187][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.410593][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.421333][ T29] audit: type=1400 audit(1739215292.285:4568): avc: denied { ioctl } for pid=13411 comm="syz.1.2067" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 595.684221][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 595.747395][ T5906] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 595.755790][ T29] audit: type=1400 audit(1739215292.955:4569): avc: denied { create } for pid=13405 comm="syz.0.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 595.782252][ T5906] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 595.783332][ T29] audit: type=1400 audit(1739215293.125:4570): avc: denied { write } for pid=13419 comm="syz.1.2070" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 595.974434][ T5906] usb 3-1: Manufacturer: syz [ 596.637514][ T5906] usb 3-1: config 0 descriptor?? [ 596.714525][T13428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2072'. [ 597.073620][ T5906] appleir 0003:05AC:8243.001A: item fetching failed at offset 0/1 [ 597.236699][ T5906] appleir 0003:05AC:8243.001A: parse failed [ 597.261202][ T5906] appleir 0003:05AC:8243.001A: probe with driver appleir failed with error -22 [ 597.681418][ T5906] usb 3-1: USB disconnect, device number 56 [ 597.782832][T13439] block nbd3: shutting down sockets [ 598.088017][T12027] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 598.861152][T13456] netlink: zone id is out of range [ 598.867623][T13456] netlink: set zone limit has 8 unknown bytes [ 598.877252][T13456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2080'. [ 599.240147][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 599.240165][ T29] audit: type=1400 audit(1739215295.885:4578): avc: denied { create } for pid=13445 comm="syz.3.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 599.278503][ T29] audit: type=1400 audit(1739215295.895:4579): avc: denied { bind } for pid=13445 comm="syz.3.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 599.807678][ T25] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 599.833521][ T29] audit: type=1400 audit(1739215296.465:4580): avc: denied { create } for pid=13448 comm="syz.4.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 599.901435][ T29] audit: type=1400 audit(1739215296.465:4581): avc: denied { write } for pid=13448 comm="syz.4.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 600.047204][ T25] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 600.130490][ T25] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 600.212727][ T25] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 600.303698][ T29] audit: type=1400 audit(1739215297.025:4582): avc: denied { write } for pid=13445 comm="syz.3.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 600.310732][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.371890][T13442] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 600.392424][ T29] audit: type=1400 audit(1739215297.415:4583): avc: denied { unlink } for pid=5815 comm="syz-executor" name="file0" dev="tmpfs" ino=2353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 600.394539][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 600.441074][T13467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2085'. [ 600.623851][ T29] audit: type=1400 audit(1739215298.215:4584): avc: denied { append } for pid=13441 comm="syz.0.2078" name="midi3" dev="devtmpfs" ino=3752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 600.625705][ T25] usb 1-1: USB disconnect, device number 69 [ 600.685523][T13475] 9pnet: p9_errstr2errno: server reported unknown error [ 600.797430][T10950] udevd[10950]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 601.001643][T13474] block nbd4: shutting down sockets [ 601.670961][T12027] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 601.679702][T12027] Bluetooth: hci0: Injecting HCI hardware error event [ 601.690342][T12027] Bluetooth: hci0: hardware error 0x00 [ 601.741709][T13490] team_slave_1: left promiscuous mode [ 601.773053][T13490] team0: Port device team_slave_1 removed [ 601.808703][ T29] audit: type=1400 audit(1739215299.395:4585): avc: denied { execute } for pid=13489 comm="syz.4.2091" name="file0" dev="tmpfs" ino=2339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 602.391737][ T29] audit: type=1400 audit(1739215299.945:4586): avc: denied { create } for pid=13495 comm="syz.3.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 602.818151][ T29] audit: type=1400 audit(1739215300.405:4587): avc: denied { write } for pid=13493 comm="syz.1.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 602.850509][T13494] tipc: New replicast peer: 255.255.255.255 [ 602.856875][T13494] tipc: Enabled bearer , priority 10 [ 603.751101][T12027] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 604.072863][T13502] block nbd4: shutting down sockets [ 604.078256][ T53] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 604.088339][ T53] Bluetooth: hci4: Injecting HCI hardware error event [ 604.158923][T12027] Bluetooth: hci4: hardware error 0x00 [ 604.327450][T13514] netlink: 'syz.3.2097': attribute type 2 has an invalid length. [ 604.335335][T13514] netlink: 'syz.3.2097': attribute type 8 has an invalid length. [ 604.343123][T13514] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2097'. [ 604.643070][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 604.643086][ T29] audit: type=1400 audit(1739215302.225:4599): avc: denied { write } for pid=13517 comm="syz.1.2099" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 604.680560][T13520] ptrace attach of "./syz-executor exec"[5833] was attempted by "./syz-executor exec"[13520] [ 604.694929][T13519] [U]  [ 604.716615][T13519] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2099'. [ 604.828173][T13519] netlink: 452 bytes leftover after parsing attributes in process `syz.1.2099'. [ 604.840882][ T29] audit: type=1400 audit(1739215302.415:4600): avc: denied { nlmsg_write } for pid=13517 comm="syz.1.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 604.914918][ T29] audit: type=1400 audit(1739215302.475:4601): avc: denied { create } for pid=13517 comm="syz.1.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 604.922410][T13521] block nbd0: shutting down sockets [ 605.846462][ T29] audit: type=1400 audit(1739215303.435:4602): avc: denied { read } for pid=13538 comm="syz.3.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 606.330776][ T5834] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 606.470859][T12027] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 606.583108][ T5834] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 606.645512][ T5834] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 606.673159][ T5834] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 606.751147][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.799885][T13537] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 606.839869][ T5834] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 606.891041][ T5868] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 606.955898][ T29] audit: type=1400 audit(1739215304.545:4603): avc: denied { create } for pid=13547 comm="syz.1.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 607.332510][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.357065][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 607.362206][ T5906] usb 3-1: USB disconnect, device number 57 [ 607.408946][ T29] audit: type=1400 audit(1739215304.995:4604): avc: denied { write } for pid=13547 comm="syz.1.2107" path="socket:[44962]" dev="sockfs" ino=44962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 607.452120][ T5868] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 607.461496][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.471021][ T5868] usb 4-1: config 0 descriptor?? [ 608.712410][ T29] audit: type=1400 audit(1739215306.155:4605): avc: denied { getopt } for pid=13551 comm="syz.3.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 608.774349][T13564] tipc: Enabling of bearer rejected, already enabled [ 608.824975][ T5868] usbhid 4-1:0.0: can't add hid device: -71 [ 608.831090][ T5868] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 609.078347][ T29] audit: type=1400 audit(1739215306.485:4606): avc: denied { create } for pid=13562 comm="syz.4.2111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 609.172879][ T5868] usb 4-1: USB disconnect, device number 61 [ 609.680167][ T29] audit: type=1400 audit(1739215307.265:4607): avc: denied { getattr } for pid=13562 comm="syz.4.2111" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 609.857591][T13575] [U]  [ 609.863822][T13577] FAULT_INJECTION: forcing a failure. [ 609.863822][T13577] name failslab, interval 1, probability 0, space 0, times 0 [ 609.896218][T13575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2113'. [ 609.916017][T13577] CPU: 0 UID: 0 PID: 13577 Comm: syz.1.2114 Not tainted 6.14.0-rc2-syzkaller #0 [ 609.916041][T13577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 609.916052][T13577] Call Trace: [ 609.916057][T13577] [ 609.916062][T13577] dump_stack_lvl+0x16c/0x1f0 [ 609.916082][T13577] should_fail_ex+0x50a/0x650 [ 609.916102][T13577] ? fs_reclaim_acquire+0xae/0x150 [ 609.916126][T13577] ? tomoyo_realpath_from_path+0xb9/0x720 [ 609.916149][T13577] should_failslab+0xc2/0x120 [ 609.916167][T13577] __kmalloc_noprof+0xcb/0x510 [ 609.916183][T13577] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 609.916210][T13577] tomoyo_realpath_from_path+0xb9/0x720 [ 609.916232][T13577] ? tomoyo_path_number_perm+0x235/0x590 [ 609.916253][T13577] ? tomoyo_path_number_perm+0x235/0x590 [ 609.916275][T13577] tomoyo_path_number_perm+0x248/0x590 [ 609.916290][T13577] ? tomoyo_path_number_perm+0x235/0x590 [ 609.916308][T13577] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 609.916353][T13577] ? __pfx_lock_release+0x10/0x10 [ 609.916372][T13577] ? trace_lock_acquire+0x14e/0x1f0 [ 609.916391][T13577] ? lock_acquire+0x2f/0xb0 [ 609.916408][T13577] ? __fget_files+0x40/0x3a0 [ 609.916426][T13577] ? __fget_files+0x206/0x3a0 [ 609.916445][T13577] security_file_ioctl+0x9b/0x240 [ 609.916467][T13577] __x64_sys_ioctl+0xb7/0x200 [ 609.916490][T13577] do_syscall_64+0xcd/0x250 [ 609.916509][T13577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.916529][T13577] RIP: 0033:0x7fb43818cde9 [ 609.916548][T13577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.916563][T13577] RSP: 002b:00007fb438f28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.916579][T13577] RAX: ffffffffffffffda RBX: 00007fb4383a5fa0 RCX: 00007fb43818cde9 [ 609.916589][T13577] RDX: 0000400000000040 RSI: 00000000400454e2 RDI: 0000000000000003 [ 609.916598][T13577] RBP: 00007fb438f28090 R08: 0000000000000000 R09: 0000000000000000 [ 609.916607][T13577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.916617][T13577] R13: 0000000000000000 R14: 00007fb4383a5fa0 R15: 00007ffe41721468 [ 609.916639][T13577] [ 609.916646][T13577] ERROR: Out of memory at tomoyo_realpath_from_path. [ 609.966842][T13575] netlink: 452 bytes leftover after parsing attributes in process `syz.4.2113'. [ 610.080011][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.302489][T13582] tipc: Enabled bearer , priority 10 [ 610.369502][ T29] audit: type=1400 audit(1739215307.955:4608): avc: denied { write } for pid=13584 comm="syz.0.2117" name="ipv6_route" dev="proc" ino=4026533053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 610.433014][T13587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2119'. [ 611.181132][ T5906] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 611.561038][ T5868] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 611.644609][ T5906] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 612.110906][ T25] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 612.213054][ T5906] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 612.270816][ T5906] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 612.288556][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.295284][ T5868] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 612.311548][ T5868] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 612.335141][T13598] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 612.342596][ T25] usb 4-1: device descriptor read/64, error -71 [ 612.346342][ T5868] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 612.362992][ T5906] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 612.385528][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.462485][T13604] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 612.471917][ T5868] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 612.575224][ T5868] usb 2-1: USB disconnect, device number 66 [ 612.591133][ T25] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 612.676515][ T1207] usb 5-1: USB disconnect, device number 62 [ 612.731323][ T25] usb 4-1: device descriptor read/64, error -71 [ 612.843579][ T25] usb usb4-port1: attempt power cycle [ 613.752759][ T29] audit: type=1400 audit(1739215310.585:4609): avc: denied { create } for pid=13597 comm="syz.1.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 614.526880][ T29] audit: type=1400 audit(1739215312.115:4610): avc: denied { read write } for pid=13623 comm="syz.3.2126" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 614.558663][ T29] audit: type=1400 audit(1739215312.115:4611): avc: denied { open } for pid=13623 comm="syz.3.2126" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 614.587275][ T29] audit: type=1400 audit(1739215312.145:4612): avc: denied { ioctl } for pid=13623 comm="syz.3.2126" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 614.621113][ T25] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 614.780848][ T25] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 614.803240][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 614.812764][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.827445][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.839494][ T25] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 614.849024][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.869936][ T25] usb 4-1: config 0 descriptor?? [ 615.304272][ T29] audit: type=1400 audit(1739215312.895:4613): avc: denied { create } for pid=13625 comm="syz.0.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 615.434922][ T29] audit: type=1400 audit(1739215313.015:4614): avc: denied { setopt } for pid=13625 comm="syz.0.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 615.521843][T13624] input: syz0 as /devices/virtual/input/input53 [ 615.577424][ T29] audit: type=1400 audit(1739215313.165:4615): avc: denied { append } for pid=13623 comm="syz.3.2126" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 615.616724][ T29] audit: type=1400 audit(1739215313.165:4616): avc: denied { open } for pid=13623 comm="syz.3.2126" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 615.642168][ T29] audit: type=1400 audit(1739215313.195:4617): avc: denied { ioctl } for pid=13623 comm="syz.3.2126" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64c7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 615.670901][ T29] audit: type=1400 audit(1739215313.235:4618): avc: denied { read } for pid=5177 comm="acpid" name="event4" dev="devtmpfs" ino=3808 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 615.709417][ T29] audit: type=1400 audit(1739215313.235:4619): avc: denied { open } for pid=5177 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3808 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 615.770825][ T29] audit: type=1400 audit(1739215313.235:4620): avc: denied { ioctl } for pid=5177 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3808 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 615.830899][ T5868] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 616.020217][ T29] audit: type=1400 audit(1739215313.415:4621): avc: denied { wake_alarm } for pid=13623 comm="syz.3.2126" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 616.048187][ T29] audit: type=1400 audit(1739215313.505:4622): avc: denied { ioctl } for pid=13631 comm="syz.1.2128" path="socket:[45469]" dev="sockfs" ino=45469 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 616.082731][ T5868] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 616.590317][ T5868] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 616.600745][ T5868] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 616.609721][ T5868] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 616.624039][ T5868] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 616.652905][ T5868] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 616.662290][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 616.677640][ T5868] usb 5-1: Product: syz [ 616.693796][ T5868] usb 5-1: Manufacturer: syz [ 616.716704][ T5868] cdc_wdm 5-1:1.0: skipping garbage [ 616.836997][ T5868] cdc_wdm 5-1:1.0: skipping garbage [ 616.962295][ T5868] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 617.052070][ T5868] cdc_wdm 5-1:1.0: Unknown control protocol [ 617.871134][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 617.916128][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 617.944067][ T25] usb 4-1: USB disconnect, device number 65 [ 618.261009][ T5906] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 723.440647][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 723.447620][ C1] rcu: (detected by 1, t=10505 jiffies, g=54853, q=136 ncpus=2) [ 723.455326][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10505 (4295009497-4294998992), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 723.468678][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g54853 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 723.479864][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 723.489821][ C1] rcu: RCU grace-period kthread stack dump: [ 723.495700][ C1] task:rcu_preempt state:R running task stack:27168 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 723.509184][ C1] Call Trace: [ 723.512455][ C1] [ 723.515381][ C1] __schedule+0xf43/0x5890 [ 723.519815][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 723.525022][ C1] ? __pfx___schedule+0x10/0x10 [ 723.529876][ C1] ? schedule+0x298/0x350 [ 723.534205][ C1] ? __pfx_lock_release+0x10/0x10 [ 723.539231][ C1] ? lock_acquire+0x2f/0xb0 [ 723.543732][ C1] ? schedule+0x1fd/0x350 [ 723.548064][ C1] schedule+0xe7/0x350 [ 723.552131][ C1] schedule_timeout+0x124/0x280 [ 723.556978][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 723.562349][ C1] ? __pfx_process_timeout+0x10/0x10 [ 723.567633][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 723.573444][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 723.578902][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 723.583666][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 723.588954][ C1] ? rcu_gp_init+0xc82/0x1630 [ 723.593640][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 723.598847][ C1] rcu_gp_kthread+0x271/0x380 [ 723.603525][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 723.608723][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 723.613916][ C1] ? __kthread_parkme+0x148/0x220 [ 723.618933][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 723.624128][ C1] kthread+0x3af/0x750 [ 723.628192][ C1] ? __pfx_kthread+0x10/0x10 [ 723.632781][ C1] ? __pfx_kthread+0x10/0x10 [ 723.637365][ C1] ret_from_fork+0x45/0x80 [ 723.641780][ C1] ? __pfx_kthread+0x10/0x10 [ 723.646368][ C1] ret_from_fork_asm+0x1a/0x30 [ 723.651136][ C1] [ 723.654147][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 723.660456][ C1] Sending NMI from CPU 1 to CPUs 0: [ 723.665649][ C0] NMI backtrace for cpu 0 [ 723.665658][ C0] CPU: 0 UID: 0 PID: 13657 Comm: syz.2.2129 Not tainted 6.14.0-rc2-syzkaller #0 [ 723.665672][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 723.665680][ C0] RIP: 0010:hlock_class+0x56/0x130 [ 723.665695][ C0] Code: 20 66 81 e3 ff 1f 0f b7 db be 08 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 c0 dc eb 96 e8 82 40 87 00 48 0f a3 1d 6a 29 56 15 <73> 13 48 69 c3 c8 00 00 00 5b 48 05 e0 e0 eb 96 c3 cc cc cc cc 48 [ 723.665707][ C0] RSP: 0018:ffffc900000079f0 EFLAGS: 00000047 [ 723.665718][ C0] RAX: 0000000000000001 RBX: 0000000000000021 RCX: ffffffff8195b34e [ 723.665726][ C0] RDX: fffffbfff2dd7b99 RSI: 0000000000000008 RDI: ffffffff96ebdcc0 [ 723.665735][ C0] RBP: ffffc90000007b38 R08: 0000000000000000 R09: fffffbfff2dd7b98 [ 723.665743][ C0] R10: ffffffff96ebdcc7 R11: 0000000000000001 R12: ffff888027ebc880 [ 723.665752][ C0] R13: 0000000000000200 R14: 0000000000000009 R15: 1ffff92000000f46 [ 723.665760][ C0] FS: 00007fc859d176c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 723.665773][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 723.665782][ C0] CR2: 0000001b2f61eff8 CR3: 0000000064eb6000 CR4: 00000000003526f0 [ 723.665790][ C0] Call Trace: [ 723.665795][ C0] [ 723.665800][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 723.665818][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 723.665834][ C0] ? nmi_handle+0x1ac/0x5d0 [ 723.665851][ C0] ? hlock_class+0x56/0x130 [ 723.665863][ C0] ? default_do_nmi+0x6a/0x160 [ 723.665880][ C0] ? exc_nmi+0x170/0x1e0 [ 723.665895][ C0] ? end_repeat_nmi+0xf/0x53 [ 723.665915][ C0] ? hlock_class+0x4e/0x130 [ 723.665928][ C0] ? hlock_class+0x56/0x130 [ 723.665941][ C0] ? hlock_class+0x56/0x130 [ 723.665954][ C0] ? hlock_class+0x56/0x130 [ 723.665966][ C0] [ 723.665970][ C0] [ 723.665975][ C0] mark_lock+0xb5/0xc60 [ 723.665991][ C0] ? __pfx_mark_lock+0x10/0x10 [ 723.666008][ C0] ? hlock_class+0x4e/0x130 [ 723.666020][ C0] ? hlock_class+0x4e/0x130 [ 723.666032][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 723.666049][ C0] __lock_acquire+0x9f1/0x3c40 [ 723.666069][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 723.666085][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 723.666102][ C0] lock_acquire.part.0+0x11b/0x380 [ 723.666118][ C0] ? advance_sched+0x679/0xc60 [ 723.666135][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 723.666152][ C0] ? rcu_is_watching+0x12/0xc0 [ 723.666164][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 723.666178][ C0] ? advance_sched+0x679/0xc60 [ 723.666194][ C0] ? lock_acquire+0x2f/0xb0 [ 723.666209][ C0] ? advance_sched+0x679/0xc60 [ 723.666226][ C0] advance_sched+0x67f/0xc60 [ 723.666241][ C0] ? advance_sched+0x679/0xc60 [ 723.666260][ C0] ? __pfx_advance_sched+0x10/0x10 [ 723.666276][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 723.666291][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 723.666303][ C0] ? read_tsc+0x9/0x20 [ 723.666317][ C0] hrtimer_interrupt+0x392/0x8e0 [ 723.666331][ C0] ? read_tsc+0x9/0x20 [ 723.666345][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 723.666365][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 723.666384][ C0] [ 723.666388][ C0] [ 723.666393][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 723.666410][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 723.666429][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 a8 3d f6 48 89 df e8 7e 27 3e f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 35 fe 2e f6 65 8b 05 a6 e3 aa 74 85 c0 74 16 5b [ 723.666457][ C0] RSP: 0018:ffffc900050efca8 EFLAGS: 00000246 [ 723.666467][ C0] RAX: 0000000000000006 RBX: ffff8880b862c680 RCX: 1ffffffff2dd7c73 [ 723.666475][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cec80 RDI: ffffffff8bd34d40 [ 723.666483][ C0] RBP: 0000000000000282 R08: 0000000000000001 R09: fffffbfff2dd7b98 [ 723.666491][ C0] R10: ffffffff96ebdcc7 R11: 0000000000000001 R12: fc6182462810704c [ 723.666499][ C0] R13: 0000000000000000 R14: 0000008ffa1ec146 R15: dffffc0000000000 [ 723.666512][ C0] clock_was_set+0x591/0x850 [ 723.666526][ C0] ? __pfx_clock_was_set+0x10/0x10 [ 723.666539][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 723.666558][ C0] do_settimeofday64+0x305/0x4c0 [ 723.666574][ C0] ? __pfx_do_settimeofday64+0x10/0x10 [ 723.666587][ C0] ? bpf_lsm_capable+0x9/0x10 [ 723.666602][ C0] ? comedi_device_detach+0x7da/0x9f0 [ 723.666619][ C0] ? capable+0xd4/0x110 [ 723.666635][ C0] do_sys_settimeofday64+0x1dc/0x260 [ 723.666652][ C0] __x64_sys_clock_settime+0x1bf/0x2a0 [ 723.666670][ C0] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 723.666691][ C0] do_syscall_64+0xcd/0x250 [ 723.666705][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.666722][ C0] RIP: 0033:0x7fc858f8cde9 [ 723.666733][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.666744][ C0] RSP: 002b:00007fc859d17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 723.666756][ C0] RAX: ffffffffffffffda RBX: 00007fc8591a5fa0 RCX: 00007fc858f8cde9 [ 723.666764][ C0] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000000 [ 723.666772][ C0] RBP: 00007fc85900e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 723.666780][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.666788][ C0] R13: 0000000000000000 R14: 00007fc8591a5fa0 R15: 00007ffe6f2c5048 [ 723.666800][ C0]