last executing test programs: 32.171831858s ago: executing program 2 (id=1293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400100bd2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x1004) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) socket$inet6(0xa, 0x80000, 0xf9c8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x300, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 30.218623325s ago: executing program 2 (id=1298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) alarm(0x0) socket$inet_udp(0x2, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000003800010326bd7002fa37522506000200"], 0x14}}, 0x0) request_key(&(0x7f0000000340)='user\x00', 0x0, &(0x7f00000003c0)='q\xa9', 0x0) 29.266562731s ago: executing program 0 (id=1301): gettid() r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000080)=0x1, 0x4) sigaltstack(&(0x7f0000000080)={&(0x7f0000000800)=""/4141, 0x0, 0x102d}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010300000000fdffffff00040080000000000000000000040100"/56, @ANYRES32=0x0, @ANYBLOB="070000000000000080fffff0000000000800030011"], 0x54}, 0x1, 0x0, 0x0, 0x20040849}, 0x8010) syz_usb_control_io(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x30, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x200, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}]}}}}}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x800) ioctl$FS_IOC_GETVERSION(r4, 0x80045b09, 0x0) 28.952171909s ago: executing program 1 (id=1302): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c5000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r3}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x20000000) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) (rerun: 64) r6 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) dup(r6) (async, rerun: 64) signalfd4(r6, 0x0, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @desc3}, &(0x7f0000000500)={0x0, "61780aa3b3184b69573cab51787b19da670ac0d112da7fe364aa8d50770d8cb22fb74bd3cb49cc96590476d4ff2d27f3a6463ba506410f435e4c3a314c534d62", 0x1d}, 0x48, 0xfffffffffffffffc) (async) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) link(0x0, &(0x7f0000000140)='./file0\x00') (async) r7 = dup(r2) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="b20c2000000fff31369b022c7766646e6f3d", @ANYRESHEX=r7, @ANYBLOB=',\x00']) 28.65064171s ago: executing program 1 (id=1303): r0 = open(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0xffc, 0xb95a, {0x0}, {0xee01}, 0x5, 0x2}) getgroups(0x2, &(0x7f0000000180)=[0x0, 0xee00]) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2020, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100,usez_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030313030302c616c6c6f775f6f746865722c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030313030302c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303030322c616c6c6f775f6f746865722c7375626a5f747970653d2c726f6f74636f6e746578743d726f6f742c736d61636b66736861743d2d215cb32c61707072616973655f747970653d696d617369672c657569643d", @ANYRESDEC=r4, @ANYBLOB=',subj_type=\x00,fsuuid=a894a57\x00-4bI5-4f41-c1e2-f428b4f3,\x00']) io_uring_setup(0x4d8b, &(0x7f0000000380)={0x0, 0x1ed4, 0x2, 0x3ffc, 0x1e3, 0x0, r0}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(r1, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setrlimit(0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r7, 0x3517, 0x173d, 0x42, 0x0, 0x0) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000040)=0x90000) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r11, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fadvise64(r11, 0x0, 0x8000, 0x4) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000340)={@my=0x0, 0x2}) r12 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r12, 0x8905, &(0x7f0000000280)) 28.429066118s ago: executing program 2 (id=1304): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xad, &(0x7f0000000140)=""/173, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x7, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000280)={0x53, 0xffffffffffffffff, 0x6, 0x6b, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="000000000002", &(0x7f0000002240)=""/4103, 0xffffffff, 0x0, 0x0, 0x0}) 28.414326755s ago: executing program 3 (id=1305): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41063}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1000}, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_vhci(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000000c0)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x56a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x4, 0xa6, 0x0, 0x0, 0x0, 0x13]}) syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) unshare(0x60600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8f5b}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r4, 0x2) pselect6(0x0, 0x0, &(0x7f00000005c0)={0x10009, 0x0, 0x7fe, 0x394, 0x7, 0x10, 0x95, 0x3}, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r5) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') 21.493403826s ago: executing program 4 (id=1307): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$packet(0x11, 0x3, 0x300) socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 20.898605893s ago: executing program 0 (id=1308): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9fe2c56315abfdac18e9490bd219881ec9c60e3070f7c7487beb010018000000000000000c00"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800900010076657468000000006e27c5090000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00 \x00\r'], 0x50}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) eventfd2(0x1, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r5, 0x11, 0x68, 0x0, &(0x7f0000000200)) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r6}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000300)={0xc, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r6, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8}) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000011d40)='stack\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) 20.859135881s ago: executing program 1 (id=1309): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r2) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_io_uring_submit(0x0, 0x0, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) 20.310681718s ago: executing program 4 (id=1310): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41063}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1000}, 0x0) syz_emit_vhci(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000000c0)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x56a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x4, 0xa6, 0x0, 0x0, 0x0, 0x13]}) syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) unshare(0x60600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8f5b}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r3, 0x2) pselect6(0x0, 0x0, &(0x7f00000005c0)={0x10009, 0x0, 0x7fe, 0x394, 0x7, 0x10, 0x95, 0x3}, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') 17.759696968s ago: executing program 0 (id=1311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) alarm(0x0) socket$inet_udp(0x2, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000080)={0x0, 0x9c7, 0x4, {0xa, @pix_mp={0x8, 0x4, 0x32525344, 0x0, 0x8, [{0x1000100, 0x7}, {0x10}, {0x9, 0x9}, {0x9, 0x2}, {0x8, 0x1}, {0x3, 0x7fffffff}, {0x10001, 0x3ff}, {0x10000, 0x6}], 0xc, 0xfe, 0x8, 0x0, 0x7}}}) 17.645963451s ago: executing program 3 (id=1312): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f000001a240)=0x9, 0x4) socket$kcm(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x4d, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 16.462041816s ago: executing program 0 (id=1313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)=""/64, 0x40}], 0x1, 0x3c, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 16.372252019s ago: executing program 2 (id=1314): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9fe2c56315abfdac18e9490bd219881ec9c60e3070f7c7487beb010018000000000000000c00"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800900010076657468000000006e27c5090000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00 \x00\r'], 0x50}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) eventfd2(0x1, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r5, 0x11, 0x68, 0x0, &(0x7f0000000200)) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r6}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000300)={0xc, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r6, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8}) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000011d40)='stack\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) 14.646313958s ago: executing program 0 (id=1315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) alarm(0x0) socket$inet_udp(0x2, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000003800010326bd7002fa37522506000200"], 0x14}}, 0x0) request_key(&(0x7f0000000340)='user\x00', 0x0, &(0x7f00000003c0)='q\xa9', 0x0) 12.833015904s ago: executing program 3 (id=1316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff2}, {0x480bd72125a0c189, 0x5}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4808}, 0x880) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r5, &(0x7f0000000780)=[{0x0}], 0x1, 0x91, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r6, 0xc0285628, &(0x7f0000000080)={0x0, 0x1, 0x3, '\x00', &(0x7f0000000040)}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x9, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf8}, [@jmp={0x5, 0x0, 0x6, 0x0, 0x6, 0x9, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @exit, @exit]}, &(0x7f0000000640)='syzkaller\x00', 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x9, 0x2a211361, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000007c0)=[{0x4, 0x1, 0x10, 0x9}, {0x0, 0x5, 0x3, 0x3}, {0x0, 0x4, 0xd, 0x6}, {0x3, 0x1, 0xf, 0x4}, {0x2, 0x2, 0x3, 0x1}, {0x1, 0x4, 0xc, 0x4}, {0x1, 0x3, 0xc, 0x4}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000900)={r5, 0xffffffffffffffff, 0x4, r7}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 12.618442944s ago: executing program 1 (id=1317): r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0xa402) sched_setscheduler(0x0, 0x3, &(0x7f0000000040)=0xb6) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r5, 0x40000000) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r3, @ANYBLOB="070600000000000000002d000000"], 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0xffffff01, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r9, &(0x7f0000000640)={0x2020}, 0x2020) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xc8) 12.617908872s ago: executing program 4 (id=1318): openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) r0 = gettid() inotify_init1(0x800) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x25000001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}}, 0x20000804) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xb) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) remap_file_pages(&(0x7f0000a95000/0x2000)=nil, 0x2000, 0x8, 0x18, 0x10000) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) lstat(0x0, &(0x7f00000002c0)) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x3000, 0x3, 0x1, 0x80, r1, 0x0, 0x3000}]) io_destroy(0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 10.472415501s ago: executing program 3 (id=1319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000), 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000d80)=ANY=[@ANYBLOB="03000000000000008f04"]) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0xd3123000) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x5290c1, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f00000000c0)) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r4, 0x40096100, &(0x7f0000000280)={{&(0x7f00000001c0)={'Accelerator0\x00', {&(0x7f0000000100)=@adf_hex={@bank={'Bank', '2', 'CoreAffinity\x00'}, {0x1}}}}}, 0x1}) 9.954640753s ago: executing program 4 (id=1320): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c::=\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffd5d, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa8}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f000001a240)=0x9, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x20000}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x37c}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@private=0xa010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x3, 0x0, 0x2, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00', 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}}, 0x0) read$FUSE(r2, &(0x7f0000001080)={0x2020}, 0x2020) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="2e000000010001", 0x7) 9.669074649s ago: executing program 1 (id=1321): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x3ff, 0x8, '9P2000.L'}, 0x15) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @default}, [@rose, @remote, @netrom, @netrom, @null, @null, @default, @netrom]}, &(0x7f0000000100)=0x48) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000140)=0xfffffff9, 0x4) tee(r0, r0, 0x527, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000200)={0x0, "7e5cd4e2f9772b99822f24266fde0a64d54a5c9cf9967bc7313c92098f4b351d", 0x0, 0x61ed3db4de703d19}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000240)) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f0000000280)=""/143, &(0x7f0000000340)=0x8f) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000380)={0x0, 0xff}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000400)={r6, 0x4, 0x5, 0x3bd93891, 0x8, 0xffffffdf}, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000004c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4161, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3b}, {0xa, 0x4e20, 0xb, @mcast2, 0x3ff}, r7, 0xffffff56}}, 0x48) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r8, 0x80044944, &(0x7f0000000540)={0xd0}) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000005c0)={@remote, 0x0, 0x1, 0x0, 0x4, 0x3, 0x7}, 0x20) r10 = syz_open_dev$amidi(&(0x7f0000000600), 0x9, 0x10002) close_range(r0, r10, 0x0) fcntl$addseals(r2, 0x409, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000640)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r9, &(0x7f00000006c0)={0x7, 0x8, 0xfa00, {r11, 0x10001}}, 0x10) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r12, &(0x7f0000000700)="00a0a026628eded7a5d1b1287fedced6e86c295298642e893c0d5bd6abe29afaa3b414f037b47802acf4c9ef44b167ce997e6f223e8573a06d128e21fe4774f89fa89c842f66e5f1e7986e97b255279dbcb239bea2833ebd4b550dc8dd25903db0e653f889aa98e6f0c493632bd637f1f84e570fb4576496d9751cda9f22d6c580904992c6b2790e2a1d83360c2e7fa4fc0aa0df5596fd9623c8d78a9b2aa3eea4bda4715833d15e140948b7bf032651655f501dd0", 0xb5, 0x8c, &(0x7f00000007c0)={0xa, 0x4e22, 0xffffc83f, @remote, 0x3}, 0x1c) connect$inet6(r9, &(0x7f0000000800)={0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}, 0x1c) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, &(0x7f0000000840), &(0x7f0000000880)=0x4) openat$vmci(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) 4.015694462s ago: executing program 3 (id=1322): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000007c0)="3e12d23d346cfdeb1708e9b982bf3187ef6b10dac616f738274bc1c03bee4423fa20837e6e86b86592e9be8351aa0000000037d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8bb844bf127ee741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c03", 0xc1, 0xfffffffffffffffe) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0xfffe}, 0x90) (async) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) (async) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x12}, 0x20048004) (async) r6 = io_uring_setup(0x9da, &(0x7f0000000140)={0x0, 0xfffffffe, 0x100, 0x0, 0x1c3}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) (async) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0xff7ffffd, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}, 0x1c) (async) keyctl$unlink(0x9, r0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40001100, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) r10 = syz_io_uring_setup(0x6, &(0x7f0000000a80)={0x0, 0xd52c, 0x100, 0x22, 0x31a}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) syz_open_dev$vcsa(0x0, 0x1, 0x2a42) (async) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r9, 0x5, &(0x7f0000000040)=[{0x0}], 0x1, 0x1a, 0x1}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x7c8eb8d6, 0x4000, 0xffffffff, 0x0, 0x1a, "90737f0000ff256003abbc74dd8e277fffffeb"}) io_uring_enter(r10, 0x617, 0xf7ad, 0x0, 0x0, 0x0) (async, rerun: 64) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, 0x0, 0x4000000) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)=@nfc_llcp, 0x80, 0x0}, 0x10000) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r6, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000000)=[{0x0}], 0x1) connect$x25(r0, &(0x7f0000000a80), 0x12) 3.635697077s ago: executing program 1 (id=1325): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fremovexattr(r4, &(0x7f0000000100)=@known='trusted.overlay.nlink\x00') 3.536200558s ago: executing program 0 (id=1326): openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r1, 0x4) listen(r1, 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) write(r0, &(0x7f0000000200)="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", 0xff) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) pipe2(0x0, 0x84800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000240)=[{{&(0x7f0000000100)={0x2, 0xe23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=@random={'os2.', ')\\\x00'}) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) sendto$inet6(r3, &(0x7f0000000300)="96a6d106c9be2f71f19d1a1be01fc28f2fecc459c414b88f96fbddb584615d74f6c1c21f59a2bf2dc48bf097acfad81d67bd7e7ddae021c518c95c682fd79d972c6f30556a503cb3a675bcfccfccda2928c996929375131842bb85143155f17eb32e37c875ff5fe84013b5b9426074cf0d19bb88170cbce8c99a0661499c35da1ad883984809051cb5ad33842250e843b640cfa549823a616d3ec155", 0x9c, 0x4010, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_clone(0x22000100, &(0x7f00000003c0)="90577362a664b5202c92117eb0ae824165673c08edbfd702c579475b8530b11bd38a2671886899fa568b10a23089f5e0f17105962280c1a1ca0d16b8c03218447f4fc8500b7bce9834d44200a8aa4c71f06d2799ea77d36de1ad6f9f", 0x5c, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000440)="f5bc25abe959c3b7575f22597c4342abad475b2e342e80e7dadaa8a1bf0590480687547926c8c7ed84671983b2a0a055715967b47e8d11744505067db3e64a670b88df94786669ec1ebcdbbcfad59003d41fa56f00327d18ecb39da22f9eed91302e106888665073ac3c99b89aeeaf7815426906936787bf511b314d2f4cb54d7e9e08ee8f134490") setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000040)=0x5, 0x4) sendfile(r0, r3, 0x0, 0x8000002b) 1.95471585s ago: executing program 2 (id=1327): syz_open_dev$rtc(0x0, 0x0, 0x20080) r0 = io_uring_setup(0x1612, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000002c0)={0x0, 0x6c, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 999.312032ms ago: executing program 4 (id=1328): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41063}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1000}, 0x0) syz_emit_vhci(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000000c0)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x56a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x4, 0xa6, 0x0, 0x0, 0x0, 0x13]}) syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) unshare(0x60600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8f5b}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r3, 0x2) pselect6(0x0, 0x0, &(0x7f00000005c0)={0x10009, 0x0, 0x7fe, 0x394, 0x7, 0x10, 0x95, 0x3}, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') 0s ago: executing program 3 (id=1329): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000010500)={0x3, 0xc, &(0x7f0000010500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x7d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getpid() prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) socket(0x25, 0x800, 0xa74) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): etlink: 24 bytes leftover after parsing attributes in process `syz.3.304'. [ 159.178782][ T6987] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 159.740721][ T6988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.578250][ T6998] netlink: 'syz.0.307': attribute type 21 has an invalid length. [ 160.586183][ T6998] netlink: 132 bytes leftover after parsing attributes in process `syz.0.307'. [ 162.135053][ T7013] FAULT_INJECTION: forcing a failure. [ 162.135053][ T7013] name failslab, interval 1, probability 0, space 0, times 1 [ 162.153978][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.3.312 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 162.154003][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 162.154013][ T7013] Call Trace: [ 162.154018][ T7013] [ 162.154025][ T7013] dump_stack_lvl+0x16c/0x1f0 [ 162.154053][ T7013] should_fail_ex+0x512/0x640 [ 162.154071][ T7013] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 162.154090][ T7013] should_failslab+0xc2/0x120 [ 162.154108][ T7013] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 162.154125][ T7013] ? ptlock_alloc+0x1f/0x70 [ 162.154153][ T7013] ptlock_alloc+0x1f/0x70 [ 162.154176][ T7013] pte_alloc_one+0x6d/0x380 [ 162.154196][ T7013] __do_fault+0x320/0x490 [ 162.154216][ T7013] do_pte_missing+0x1031/0x3fb0 [ 162.154239][ T7013] ? mtree_range_walk+0x718/0xc00 [ 162.154261][ T7013] ? find_held_lock+0x2b/0x80 [ 162.154284][ T7013] __handle_mm_fault+0x103d/0x2a40 [ 162.154314][ T7013] ? __pfx___handle_mm_fault+0x10/0x10 [ 162.154354][ T7013] ? find_vma+0xbf/0x140 [ 162.154372][ T7013] ? __pfx_find_vma+0x10/0x10 [ 162.154395][ T7013] handle_mm_fault+0x3fe/0xad0 [ 162.154423][ T7013] do_user_addr_fault+0x7a6/0x1370 [ 162.154444][ T7013] ? rcu_is_watching+0x12/0xc0 [ 162.154466][ T7013] exc_page_fault+0x5c/0xc0 [ 162.154492][ T7013] asm_exc_page_fault+0x26/0x30 [ 162.154507][ T7013] RIP: 0010:__get_user_4+0x14/0x20 [ 162.154526][ T7013] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 162.154541][ T7013] RSP: 0018:ffffc9001c637e20 EFLAGS: 00050287 [ 162.154555][ T7013] RAX: 0000200000000100 RBX: ffffc9001c637e78 RCX: ffffc9001c637dc4 [ 162.154565][ T7013] RDX: 00007ffffffff000 RSI: ffffffff81906b5e RDI: ffffffff8bf46440 [ 162.154575][ T7013] RBP: 0000200000000100 R08: 2cfb7b1ab8be5804 R09: 0000000000000001 [ 162.154585][ T7013] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 162.154593][ T7013] R13: 0000200000000100 R14: 0000000000000000 R15: 0000000000000000 [ 162.154612][ T7013] ? sched_copy_attr+0x2e/0x1d0 [ 162.154630][ T7013] sched_copy_attr+0x36/0x1d0 [ 162.154648][ T7013] __x64_sys_sched_setattr+0x105/0x280 [ 162.154669][ T7013] ? __pfx___x64_sys_sched_setattr+0x10/0x10 [ 162.154699][ T7013] ? rcu_is_watching+0x12/0xc0 [ 162.154720][ T7013] do_syscall_64+0xcd/0x260 [ 162.154744][ T7013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.154759][ T7013] RIP: 0033:0x7f37b978e169 [ 162.154772][ T7013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.154787][ T7013] RSP: 002b:00007f37ba55a038 EFLAGS: 00000246 ORIG_RAX: 000000000000013a [ 162.154801][ T7013] RAX: ffffffffffffffda RBX: 00007f37b99b5fa0 RCX: 00007f37b978e169 [ 162.154811][ T7013] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 162.154820][ T7013] RBP: 00007f37ba55a090 R08: 0000000000000000 R09: 0000000000000000 [ 162.154829][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.154844][ T7013] R13: 0000000000000000 R14: 00007f37b99b5fa0 R15: 00007ffd506bc138 [ 162.154865][ T7013] [ 162.646118][ T7021] block device autoloading is deprecated and will be removed. [ 163.453993][ T7036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 164.605434][ T7045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.320'. [ 164.914877][ T7046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 165.265910][ T7055] netlink: 'syz.4.324': attribute type 21 has an invalid length. [ 165.274098][ T7055] netlink: 132 bytes leftover after parsing attributes in process `syz.4.324'. [ 165.747900][ T7058] trusted_key: encrypted_key: insufficient parameters specified [ 166.072767][ T7061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.326'. [ 166.182093][ T7064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.718364][ T7125] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 172.355717][ T7146] block device autoloading is deprecated and will be removed. [ 172.692002][ T7154] block device autoloading is deprecated and will be removed. [ 172.847046][ T1210] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 173.237103][ T1210] usb 2-1: Using ep0 maxpacket: 16 [ 173.244618][ T1210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 173.306538][ T1210] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 173.320625][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.336564][ T1210] usb 2-1: Product: syz [ 173.344343][ T1210] usb 2-1: Manufacturer: syz [ 173.352080][ T1210] usb 2-1: SerialNumber: syz [ 173.366044][ T1210] usb 2-1: config 0 descriptor?? [ 173.378255][ T1210] hub 2-1:0.0: bad descriptor, ignoring hub [ 173.397920][ T1210] hub 2-1:0.0: probe with driver hub failed with error -5 [ 173.429559][ T1210] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15 [ 173.508347][ T30] audit: type=1400 audit(1745052776.401:263): avc: denied { write } for pid=7162 comm="syz.3.357" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 173.565592][ T30] audit: type=1400 audit(1745052776.431:264): avc: denied { ioctl } for pid=7162 comm="syz.3.357" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x556a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 173.598894][ T7163] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7163 comm=syz.3.357 [ 173.658713][ T30] audit: type=1400 audit(1745052776.451:265): avc: denied { ioctl } for pid=7162 comm="syz.3.357" path="socket:[12746]" dev="sockfs" ino=12746 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 173.738937][ T30] audit: type=1400 audit(1745052776.451:266): avc: denied { setopt } for pid=7162 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 173.878930][ T30] audit: type=1400 audit(1745052776.511:267): avc: denied { read } for pid=7162 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 173.899581][ T30] audit: type=1400 audit(1745052776.511:268): avc: denied { read write } for pid=7162 comm="syz.3.357" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 174.410565][ T30] audit: type=1400 audit(1745052776.511:269): avc: denied { open } for pid=7162 comm="syz.3.357" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 175.070192][ T7151] block nbd1: NBD_DISCONNECT [ 175.168149][ T7150] block nbd1: Disconnected due to user request. [ 175.191195][ T7150] block nbd1: shutting down sockets [ 175.357404][ T24] usb 2-1: USB disconnect, device number 6 [ 176.086052][ T30] audit: type=1326 audit(1745052778.961:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7192 comm="syz.4.368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe24e98e169 code=0x0 [ 176.115305][ T7193] overlayfs: failed to resolve './file0': -2 [ 177.066660][ T7202] trusted_key: encrypted_key: insufficient parameters specified [ 178.254112][ T7223] overlayfs: failed to resolve './file0': -2 [ 179.279088][ T7235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.382'. [ 180.091202][ T7235] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.175527][ T7241] trusted_key: encrypted_key: insufficient parameters specified [ 180.568467][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 180.568881][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 180.574587][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 180.580768][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 180.997116][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 181.201473][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 181.275106][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.397218][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.417886][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 181.474088][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 181.514894][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.818088][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 181.829747][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 181.859112][ T24] usb 2-1: Manufacturer: syz [ 181.877874][ T24] usb 2-1: config 0 descriptor?? [ 182.617741][ T24] rc_core: IR keymap rc-hauppauge not found [ 182.626420][ T24] Registered IR keymap rc-empty [ 182.632448][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 182.741459][ T7282] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 183.268359][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 183.301912][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 183.326787][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 183.343358][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 183.377674][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 183.407710][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 183.430002][ T7290] trusted_key: encrypted_key: insufficient parameters specified [ 183.476270][ T7291] overlayfs: failed to resolve './file0': -2 [ 183.597944][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 183.668693][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 183.758229][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 183.827146][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 183.847378][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 183.927767][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 183.967096][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 184.067420][ T5899] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 184.075300][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 184.103620][ T24] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 184.113551][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 184.191905][ T24] usb 2-1: USB disconnect, device number 7 [ 184.208720][ T7300] netlink: 'syz.3.402': attribute type 21 has an invalid length. [ 184.216651][ T7300] netlink: 132 bytes leftover after parsing attributes in process `syz.3.402'. [ 184.577426][ T7300] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 184.592911][ T5899] usb 5-1: config 0 has an invalid interface number: 175 but max is 0 [ 184.602527][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.616193][ T5899] usb 5-1: config 0 has no interface number 0 [ 184.625902][ T5899] usb 5-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 184.648463][ T5899] usb 5-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 184.662369][ T5899] usb 5-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 184.720564][ T5899] usb 5-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 184.738743][ T5899] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 184.765673][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.801337][ T5899] usb 5-1: Product: syz [ 184.893550][ T5899] usb 5-1: Manufacturer: syz [ 184.909247][ T5899] usb 5-1: SerialNumber: syz [ 184.996755][ T5899] usb 5-1: config 0 descriptor?? [ 185.091599][ T5899] symbolserial 5-1:0.175: symbol converter detected [ 185.655782][ T5899] usb 5-1: symbol converter now attached to ttyUSB0 [ 185.825721][ T7314] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 186.152168][ T30] audit: type=1400 audit(1745052789.041:271): avc: denied { create } for pid=7292 comm="syz.4.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 186.520492][ T7333] overlayfs: failed to resolve './file1': -2 [ 187.277298][ T1210] usb 5-1: USB disconnect, device number 5 [ 187.293141][ T1210] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 187.336110][ T1210] symbolserial 5-1:0.175: device disconnected [ 188.318049][ T7344] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 190.744308][ T7365] overlayfs: failed to resolve './file0': -2 [ 191.098922][ T7383] trusted_key: encrypted_key: insufficient parameters specified [ 191.412254][ T7378] block device autoloading is deprecated and will be removed. [ 191.666805][ T7389] trusted_key: encrypted_key: insufficient parameters specified [ 192.528525][ T7403] netlink: 'syz.2.431': attribute type 21 has an invalid length. [ 192.536492][ T7403] netlink: 132 bytes leftover after parsing attributes in process `syz.2.431'. [ 194.311344][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.320499][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.898219][ T5819] block device autoloading is deprecated and will be removed. [ 197.104372][ T30] audit: type=1400 audit(1745052799.881:272): avc: denied { mount } for pid=7430 comm="syz.0.439" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 197.435047][ T30] audit: type=1400 audit(1745052799.891:273): avc: denied { read write } for pid=7430 comm="syz.0.439" name="mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 197.469198][ T30] audit: type=1400 audit(1745052799.891:274): avc: denied { open } for pid=7430 comm="syz.0.439" path="/dev/input/mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 197.512336][ T30] audit: type=1400 audit(1745052799.931:275): avc: denied { ioctl } for pid=7430 comm="syz.0.439" path="/dev/input/mouse0" dev="devtmpfs" ino=1000 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 197.733268][ T7460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.447'. [ 197.801002][ T7461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 198.427077][ T5899] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 198.977174][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 198.984149][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 199.008722][ T5899] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 199.018053][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.026304][ T5899] usb 5-1: Product: syz [ 199.034566][ T5899] usb 5-1: Manufacturer: syz [ 199.064414][ T5899] usb 5-1: SerialNumber: syz [ 199.106456][ T5899] usb 5-1: config 0 descriptor?? [ 199.125802][ T5899] hub 5-1:0.0: bad descriptor, ignoring hub [ 199.194704][ T5899] hub 5-1:0.0: probe with driver hub failed with error -5 [ 199.586669][ T5899] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 199.614568][ T7487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.456'. [ 199.700823][ T7488] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.948067][ T7490] block nbd4: NBD_DISCONNECT [ 200.107939][ T7462] block nbd4: Disconnected due to user request. [ 200.114344][ T7462] block nbd4: shutting down sockets [ 200.876593][ T30] audit: type=1400 audit(1745052803.761:276): avc: denied { create } for pid=7507 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 200.922850][ T5899] usb 5-1: USB disconnect, device number 6 [ 200.930433][ T30] audit: type=1400 audit(1745052803.771:277): avc: denied { write } for pid=7507 comm="syz.4.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 200.973530][ T7509] netlink: 68 bytes leftover after parsing attributes in process `syz.1.461'. [ 201.038372][ T30] audit: type=1400 audit(1745052803.911:278): avc: denied { bind } for pid=7503 comm="syz.1.461" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 201.231305][ T30] audit: type=1400 audit(1745052803.911:279): avc: denied { node_bind } for pid=7503 comm="syz.1.461" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 201.235862][ T7517] netlink: 'syz.0.465': attribute type 25 has an invalid length. [ 201.255302][ T30] audit: type=1400 audit(1745052803.911:280): avc: denied { connect } for pid=7503 comm="syz.1.461" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 201.728601][ T30] audit: type=1400 audit(1745052803.921:281): avc: denied { getopt } for pid=7503 comm="syz.1.461" laddr=172.20.20.170 lport=255 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 201.765560][ T7517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.465'. [ 202.228501][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 202.228514][ T30] audit: type=1400 audit(1745052805.121:283): avc: denied { map } for pid=7527 comm="syz.1.469" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 202.321351][ T7530] tc_dump_action: action bad kind [ 202.357311][ T30] audit: type=1400 audit(1745052805.221:284): avc: denied { connect } for pid=7523 comm="syz.4.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.781283][ T7538] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 203.973116][ T7546] FAULT_INJECTION: forcing a failure. [ 203.973116][ T7546] name failslab, interval 1, probability 0, space 0, times 0 [ 203.998235][ T7546] CPU: 0 UID: 0 PID: 7546 Comm: syz.1.473 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 203.998262][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.998271][ T7546] Call Trace: [ 203.998278][ T7546] [ 203.998284][ T7546] dump_stack_lvl+0x16c/0x1f0 [ 203.998312][ T7546] should_fail_ex+0x512/0x640 [ 203.998327][ T7546] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 203.998346][ T7546] should_failslab+0xc2/0x120 [ 203.998363][ T7546] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 203.998381][ T7546] ? __alloc_skb+0x2b2/0x380 [ 203.998405][ T7546] __alloc_skb+0x2b2/0x380 [ 203.998422][ T7546] ? __pfx___alloc_skb+0x10/0x10 [ 203.998443][ T7546] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 203.998469][ T7546] netlink_alloc_large_skb+0x69/0x130 [ 203.998490][ T7546] netlink_sendmsg+0x6a1/0xdd0 [ 203.998514][ T7546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.998541][ T7546] ____sys_sendmsg+0xa95/0xc70 [ 203.998568][ T7546] ? copy_msghdr_from_user+0x10a/0x160 [ 203.998586][ T7546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.998618][ T7546] ___sys_sendmsg+0x134/0x1d0 [ 203.998638][ T7546] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.998683][ T7546] __sys_sendmsg+0x16d/0x220 [ 203.998701][ T7546] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.998726][ T7546] ? rcu_is_watching+0x12/0xc0 [ 203.998752][ T7546] do_syscall_64+0xcd/0x260 [ 203.998774][ T7546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.998790][ T7546] RIP: 0033:0x7f429d78e169 [ 203.998804][ T7546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.998820][ T7546] RSP: 002b:00007f429e554038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.998834][ T7546] RAX: ffffffffffffffda RBX: 00007f429d9b6080 RCX: 00007f429d78e169 [ 203.998844][ T7546] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 203.998851][ T7546] RBP: 00007f429e554090 R08: 0000000000000000 R09: 0000000000000000 [ 203.998859][ T7546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.998866][ T7546] R13: 0000000000000000 R14: 00007f429d9b6080 R15: 00007ffdd3162378 [ 203.998883][ T7546] [ 204.407063][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 204.468817][ T30] audit: type=1400 audit(1745052807.351:285): avc: denied { read } for pid=7547 comm="syz.2.474" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 204.493416][ T30] audit: type=1400 audit(1745052807.351:286): avc: denied { open } for pid=7547 comm="syz.2.474" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 204.783052][ T7556] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 204.822431][ T30] audit: type=1400 audit(1745052807.711:287): avc: denied { ioctl } for pid=7547 comm="syz.2.474" path="socket:[14994]" dev="sockfs" ino=14994 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 205.280244][ T30] audit: type=1400 audit(1745052808.171:288): avc: denied { mount } for pid=7566 comm="syz.1.479" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 205.497037][ T5912] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 205.781397][ T5912] usb 2-1: config 253 has an invalid interface number: 160 but max is 0 [ 205.831246][ T5912] usb 2-1: config 253 has no interface number 0 [ 205.848543][ T5912] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=11.32 [ 205.858336][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.876535][ T7587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.484'. [ 207.129578][ T7590] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.002877][ T7600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.489'. [ 208.153878][ T7603] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.481339][ T5945] usb 2-1: USB disconnect, device number 8 [ 208.584822][ T30] audit: type=1400 audit(1745052811.471:289): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 209.743226][ T7614] overlayfs: failed to resolve './file0': -2 [ 210.773066][ T7633] tc_dump_action: action bad kind [ 211.283881][ T7648] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 212.641355][ T7669] overlayfs: failed to resolve './file0': -2 [ 213.049187][ T7677] overlayfs: failed to resolve './file0': -2 [ 213.319613][ T7680] FAULT_INJECTION: forcing a failure. [ 213.319613][ T7680] name failslab, interval 1, probability 0, space 0, times 0 [ 213.544695][ T7680] CPU: 1 UID: 0 PID: 7680 Comm: syz.4.511 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 213.544723][ T7680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 213.544733][ T7680] Call Trace: [ 213.544739][ T7680] [ 213.544747][ T7680] dump_stack_lvl+0x16c/0x1f0 [ 213.544775][ T7680] should_fail_ex+0x512/0x640 [ 213.544792][ T7680] ? __kmalloc_noprof+0xbf/0x510 [ 213.544811][ T7680] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 213.544838][ T7680] should_failslab+0xc2/0x120 [ 213.544856][ T7680] __kmalloc_noprof+0xd2/0x510 [ 213.544872][ T7680] ? __pfx___mutex_lock+0x10/0x10 [ 213.544899][ T7680] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 213.544931][ T7680] genl_start+0x18f/0x980 [ 213.544956][ T7680] __netlink_dump_start+0x60b/0x990 [ 213.544990][ T7680] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 213.545017][ T7680] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 213.545041][ T7680] ? genl_rcv_msg+0x577/0x800 [ 213.545069][ T7680] ? __pfx_genl_get_cmd+0x10/0x10 [ 213.545091][ T7680] ? __pfx_genl_start+0x10/0x10 [ 213.545112][ T7680] ? __pfx_genl_dumpit+0x10/0x10 [ 213.545134][ T7680] ? __pfx_genl_done+0x10/0x10 [ 213.545160][ T7680] ? __local_bh_enable_ip+0xa4/0x120 [ 213.545181][ T7680] ? __dev_queue_xmit+0x896/0x43e0 [ 213.545197][ T7680] ? __radix_tree_lookup+0x21f/0x2c0 [ 213.545222][ T7680] genl_rcv_msg+0x46e/0x800 [ 213.545249][ T7680] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.545272][ T7680] ? __pfx___dev_queue_xmit+0x10/0x10 [ 213.545288][ T7680] ? __pfx_smcr_nl_get_device+0x10/0x10 [ 213.545315][ T7680] ? __lock_acquire+0xaa4/0x1ba0 [ 213.545336][ T7680] netlink_rcv_skb+0x16a/0x440 [ 213.545358][ T7680] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.545384][ T7680] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 213.545418][ T7680] ? __pfx_down_read+0x10/0x10 [ 213.545441][ T7680] ? netlink_deliver_tap+0x1ae/0xd30 [ 213.545466][ T7680] genl_rcv+0x28/0x40 [ 213.545487][ T7680] netlink_unicast+0x53a/0x7f0 [ 213.545512][ T7680] ? __pfx_netlink_unicast+0x10/0x10 [ 213.545541][ T7680] netlink_sendmsg+0x8d1/0xdd0 [ 213.545567][ T7680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.545599][ T7680] ____sys_sendmsg+0xa95/0xc70 [ 213.545624][ T7680] ? copy_msghdr_from_user+0x10a/0x160 [ 213.545644][ T7680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.545680][ T7680] ___sys_sendmsg+0x134/0x1d0 [ 213.545701][ T7680] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.545750][ T7680] __sys_sendmsg+0x16d/0x220 [ 213.545771][ T7680] ? __pfx___sys_sendmsg+0x10/0x10 [ 213.545799][ T7680] ? rcu_is_watching+0x12/0xc0 [ 213.545826][ T7680] do_syscall_64+0xcd/0x260 [ 213.545850][ T7680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.545866][ T7680] RIP: 0033:0x7fe24e98e169 [ 213.545879][ T7680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.545895][ T7680] RSP: 002b:00007fe24f7a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.545911][ T7680] RAX: ffffffffffffffda RBX: 00007fe24ebb5fa0 RCX: 00007fe24e98e169 [ 213.545921][ T7680] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 213.545930][ T7680] RBP: 00007fe24f7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 213.545939][ T7680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.545948][ T7680] R13: 0000000000000000 R14: 00007fe24ebb5fa0 R15: 00007ffcda66a1b8 [ 213.545970][ T7680] [ 214.487037][ T5945] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 214.752330][ T7709] netlink: 'syz.1.521': attribute type 21 has an invalid length. [ 214.760316][ T7709] netlink: 132 bytes leftover after parsing attributes in process `syz.1.521'. [ 214.780331][ T5899] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 215.075318][ T5945] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.09 [ 215.087969][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.096121][ T5945] usb 3-1: Product: syz [ 215.106851][ T5945] usb 3-1: Manufacturer: syz [ 215.160309][ T5945] usb 3-1: SerialNumber: syz [ 215.177722][ T5945] usb 3-1: config 0 descriptor?? [ 215.248835][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 215.269863][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.283835][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.299954][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 215.310245][ T5899] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 215.329859][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.423146][ T5899] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 215.433899][ T5899] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 215.442922][ T5899] usb 4-1: Manufacturer: syz [ 215.449859][ T5899] usb 4-1: config 0 descriptor?? [ 215.703169][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'. [ 215.726647][ T30] audit: type=1400 audit(1745052818.591:290): avc: denied { nlmsg_read } for pid=7688 comm="syz.2.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.786298][ T7721] overlayfs: failed to resolve './file0': -2 [ 215.827192][ T5899] rc_core: IR keymap rc-hauppauge not found [ 215.843689][ T5899] Registered IR keymap rc-empty [ 216.095943][ T5899] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 216.982879][ T5899] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 217.056039][ T5899] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 217.182203][ T5899] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input19 [ 217.216077][ T5899] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 217.601220][ T7735] overlayfs: failed to resolve './file0': -2 [ 217.718421][ T5899] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 217.827693][ T5899] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 217.871859][ T5899] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 217.917182][ T5899] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.057071][ T5899] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.157082][ T5899] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.179162][ T5899] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.411314][ T5945] usb 3-1: USB disconnect, device number 9 [ 218.447300][ T5899] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.487164][ T5899] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.628391][ T5899] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 218.715084][ T5899] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 218.751970][ T5899] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 218.823014][ T7756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.533'. [ 218.917585][ T7757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.168544][ T5899] usb 4-1: USB disconnect, device number 6 [ 220.005368][ T7767] block device autoloading is deprecated and will be removed. [ 220.270978][ T7777] netlink: 36 bytes leftover after parsing attributes in process `syz.2.539'. [ 221.704771][ T7800] overlayfs: failed to resolve './file0': -2 [ 221.973688][ T7807] sctp: [Deprecated]: syz.0.549 (pid 7807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.973688][ T7807] Use struct sctp_sack_info instead [ 222.047025][ T7808] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[7808] [ 222.209260][ T30] audit: type=1400 audit(1745052824.891:291): avc: denied { mount } for pid=7802 comm="syz.1.548" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 222.319612][ T7811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.550'. [ 222.393789][ T7812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.860210][ T30] audit: type=1400 audit(1745052825.741:292): avc: denied { mount } for pid=7813 comm="syz.1.551" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 223.052246][ T30] audit: type=1400 audit(1745052825.751:293): avc: denied { mounton } for pid=7813 comm="syz.1.551" path="/113/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 223.075641][ T30] audit: type=1400 audit(1745052825.831:294): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 223.108873][ T7825] block device autoloading is deprecated and will be removed. [ 223.607276][ T7834] netlink: 36 bytes leftover after parsing attributes in process `syz.4.556'. [ 225.262182][ T30] audit: type=1400 audit(1745052828.131:295): avc: denied { watch watch_reads } for pid=7853 comm="syz.3.563" path="/105" dev="tmpfs" ino=590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 225.600673][ T7864] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 225.668666][ T30] audit: type=1400 audit(1745052828.421:296): avc: denied { map } for pid=7855 comm="syz.2.564" path="socket:[15695]" dev="sockfs" ino=15695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 226.177460][ T30] audit: type=1400 audit(1745052828.421:297): avc: denied { read } for pid=7855 comm="syz.2.564" path="socket:[15695]" dev="sockfs" ino=15695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 226.526596][ T7876] netlink: 36 bytes leftover after parsing attributes in process `syz.0.571'. [ 226.598398][ T7878] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 227.296367][ T30] audit: type=1400 audit(1745052830.181:298): avc: denied { read } for pid=7883 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 227.391997][ T7890] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 227.907167][ T7896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.577'. [ 228.057934][ T7897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.088225][ T30] audit: type=1400 audit(1745052830.911:299): avc: denied { read } for pid=7894 comm="syz.2.577" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.574790][ T30] audit: type=1400 audit(1745052830.911:300): avc: denied { open } for pid=7894 comm="syz.2.577" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.670435][ T30] audit: type=1400 audit(1745052830.921:301): avc: denied { ioctl } for pid=7894 comm="syz.2.577" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.687090][ T7922] netlink: 'syz.0.583': attribute type 21 has an invalid length. [ 229.695028][ T7922] netlink: 132 bytes leftover after parsing attributes in process `syz.0.583'. [ 230.606934][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 230.690560][ T7931] netlink: 36 bytes leftover after parsing attributes in process `syz.0.587'. [ 230.743008][ T30] audit: type=1326 audit(1745052833.631:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.3.589" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37b978e169 code=0x0 [ 230.745237][ T7937] syz.2.590 uses obsolete (PF_INET,SOCK_PACKET) [ 230.801064][ T7937] lo: entered promiscuous mode [ 230.810671][ T7936] lo: left promiscuous mode [ 231.272382][ T30] audit: type=1400 audit(1745052834.161:303): avc: denied { create } for pid=7947 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 231.330732][ T30] audit: type=1400 audit(1745052834.181:304): avc: denied { setopt } for pid=7947 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 231.437862][ T7952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.595'. [ 232.018090][ T7955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.605123][ T7962] netlink: 'syz.4.597': attribute type 21 has an invalid length. [ 232.613148][ T7962] netlink: 132 bytes leftover after parsing attributes in process `syz.4.597'. [ 233.556236][ T30] audit: type=1400 audit(1745052836.381:305): avc: denied { write } for pid=7970 comm="syz.4.601" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.175035][ T7978] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 234.187278][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 234.193538][ T7978] process 'syz.0.603' launched './file0' with NULL argv: empty string added [ 234.194917][ T30] audit: type=1400 audit(1745052837.081:306): avc: denied { execute } for pid=7977 comm="syz.0.603" name="file0" dev="tmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 234.227773][ T30] audit: type=1400 audit(1745052837.101:307): avc: denied { execute_no_trans } for pid=7977 comm="syz.0.603" path="/125/file0" dev="tmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 234.438195][ T7981] 9pnet_fd: Insufficient options for proto=fd [ 234.497091][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 234.503581][ T9] usb 5-1: no configurations [ 234.509234][ T9] usb 5-1: can't read configurations, error -22 [ 234.782096][ T30] audit: type=1400 audit(1745052837.151:308): avc: denied { append } for pid=7974 comm="syz.3.602" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 235.115471][ T7991] netlink: 36 bytes leftover after parsing attributes in process `syz.2.606'. [ 235.400425][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 235.423824][ T30] audit: type=1400 audit(1745052838.311:309): avc: denied { create } for pid=7992 comm="syz.3.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 235.446580][ T30] audit: type=1400 audit(1745052838.331:310): avc: denied { setopt } for pid=7992 comm="syz.3.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 235.567086][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 235.577528][ T9] usb 5-1: no configurations [ 235.582206][ T9] usb 5-1: can't read configurations, error -22 [ 235.597126][ T9] usb usb5-port1: attempt power cycle [ 236.055479][ T8003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.610'. [ 236.201914][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 236.397872][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 236.403803][ T9] usb 5-1: no configurations [ 236.570557][ T9] usb 5-1: can't read configurations, error -22 [ 237.167056][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 237.237238][ T5945] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 237.667756][ T8031] overlayfs: failed to resolve './file1': -2 [ 237.726754][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 237.734787][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.744667][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 237.757030][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 237.770004][ T5945] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.780534][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 237.791001][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.808188][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.828485][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 237.983093][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 237.992667][ T5945] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 238.003110][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.025325][ T5945] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.090607][ T5945] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 238.182892][ T5945] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 238.319919][ T5945] usb 4-1: Manufacturer: syz [ 238.334610][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 238.409584][ T24] usbtmc 2-1:16.0: can't read capabilities [ 238.447313][ T5945] usb 4-1: config 0 descriptor?? [ 238.603528][ T8040] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 238.605463][ T8040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65305 sclass=netlink_route_socket pid=8040 comm=syz.0.622 [ 238.787028][ T30] audit: type=1400 audit(1745052841.651:311): avc: denied { listen } for pid=8039 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 238.813999][ T5908] usb 2-1: USB disconnect, device number 9 [ 238.820836][ T30] audit: type=1400 audit(1745052841.681:312): avc: denied { write } for pid=8039 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 238.874742][ T30] audit: type=1400 audit(1745052841.681:313): avc: denied { map } for pid=8039 comm="syz.0.622" path="socket:[17260]" dev="sockfs" ino=17260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 238.946008][ T30] audit: type=1400 audit(1745052841.701:314): avc: denied { accept } for pid=8039 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 238.969967][ T5945] rc_core: IR keymap rc-hauppauge not found [ 238.975892][ T5945] Registered IR keymap rc-empty [ 238.993205][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 239.027077][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 239.049811][ T5945] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 239.073486][ T5945] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input20 [ 239.099362][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 239.137341][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 239.139279][ T5867] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 239.170041][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 239.207697][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 239.289407][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 239.306998][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 239.487785][ T5867] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 239.500669][ T5867] usb 3-1: can't read configurations, error -61 [ 239.506453][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 239.527773][ T30] audit: type=1400 audit(1745052842.421:315): avc: denied { create } for pid=8054 comm="syz.0.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 239.560176][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 239.581862][ T8059] Invalid source name [ 239.597191][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 239.608786][ T8059] UBIFS error (pid: 8059): cannot open "usrquota", error -22 [ 239.627056][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 239.667175][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 239.734808][ T30] audit: type=1400 audit(1745052842.571:316): avc: denied { setopt } for pid=8054 comm="syz.0.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 239.744965][ T5867] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 239.777977][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 240.262647][ T5945] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 240.313229][ T5945] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 240.360272][ T5945] usb 4-1: USB disconnect, device number 7 [ 240.480841][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 240.575633][ T5867] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 240.593519][ T5867] usb 3-1: can't read configurations, error -61 [ 240.630680][ T5867] usb usb3-port1: attempt power cycle [ 240.998299][ T8072] block device autoloading is deprecated and will be removed. [ 241.373166][ T8071] overlayfs: failed to resolve './file0': -2 [ 241.379345][ T5867] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 241.432613][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 241.450378][ T5867] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 241.477787][ T5867] usb 3-1: can't read configurations, error -61 [ 241.637018][ T5867] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 241.707187][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 241.734588][ T8076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.633'. [ 241.754111][ T5867] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 241.768388][ T5867] usb 3-1: can't read configurations, error -61 [ 241.780938][ T8076] overlayfs: failed to resolve './file1': -2 [ 241.808477][ T5867] usb usb3-port1: unable to enumerate USB device [ 241.832416][ T8077] overlayfs: missing 'lowerdir' [ 241.884566][ T30] audit: type=1400 audit(1745052844.771:317): avc: denied { bind } for pid=8075 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 241.889413][ T8076] input: syz0 as /devices/virtual/input/input21 [ 241.968031][ T8077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.633'. [ 242.119369][ T30] audit: type=1400 audit(1745052844.771:318): avc: denied { node_bind } for pid=8075 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 242.149677][ T8081] netlink: 368 bytes leftover after parsing attributes in process `syz.1.635'. [ 242.404639][ T8090] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 242.814460][ T30] audit: type=1400 audit(1745052845.031:319): avc: denied { create } for pid=8082 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 243.033026][ T8094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.638'. [ 243.052078][ T8096] overlayfs: missing 'lowerdir' [ 243.102963][ T8097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.367040][ T30] audit: type=1400 audit(1745052845.041:320): avc: denied { connect } for pid=8082 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 243.771403][ T8107] usb usb8: usbfs: process 8107 (syz.1.641) did not claim interface 0 before use [ 243.807312][ T8108] FAULT_INJECTION: forcing a failure. [ 243.807312][ T8108] name failslab, interval 1, probability 0, space 0, times 0 [ 243.827547][ T8108] CPU: 1 UID: 0 PID: 8108 Comm: syz.2.640 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 243.827573][ T8108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.827583][ T8108] Call Trace: [ 243.827588][ T8108] [ 243.827594][ T8108] dump_stack_lvl+0x16c/0x1f0 [ 243.827621][ T8108] should_fail_ex+0x512/0x640 [ 243.827642][ T8108] should_failslab+0xc2/0x120 [ 243.827661][ T8108] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 243.827679][ T8108] ? _raw_spin_unlock+0x28/0x50 [ 243.827697][ T8108] ? __alloc_skb+0x2b2/0x380 [ 243.827719][ T8108] __alloc_skb+0x2b2/0x380 [ 243.827738][ T8108] ? __pfx___alloc_skb+0x10/0x10 [ 243.827756][ T8108] ? class_for_each_device+0x1c0/0x280 [ 243.827781][ T8108] ieee802154_nl_new_reply+0x32/0x110 [ 243.827803][ T8108] ieee802154_add_iface+0x26b/0xa90 [ 243.827825][ T8108] ? __nla_parse+0x40/0x60 [ 243.827846][ T8108] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 243.827868][ T8108] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 243.827901][ T8108] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 243.827931][ T8108] genl_family_rcv_msg_doit+0x206/0x2f0 [ 243.827958][ T8108] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 243.827992][ T8108] ? bpf_lsm_capable+0x9/0x10 [ 243.828007][ T8108] ? security_capable+0x7e/0x260 [ 243.828031][ T8108] genl_rcv_msg+0x55c/0x800 [ 243.828058][ T8108] ? __pfx_genl_rcv_msg+0x10/0x10 [ 243.828084][ T8108] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 243.828108][ T8108] ? __lock_acquire+0xaa4/0x1ba0 [ 243.828129][ T8108] netlink_rcv_skb+0x16a/0x440 [ 243.828151][ T8108] ? __pfx_genl_rcv_msg+0x10/0x10 [ 243.828176][ T8108] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 243.828209][ T8108] ? __pfx_down_read+0x10/0x10 [ 243.828234][ T8108] ? netlink_deliver_tap+0x1ae/0xd30 [ 243.828258][ T8108] genl_rcv+0x28/0x40 [ 243.828281][ T8108] netlink_unicast+0x53a/0x7f0 [ 243.828307][ T8108] ? __pfx_netlink_unicast+0x10/0x10 [ 243.828337][ T8108] netlink_sendmsg+0x8d1/0xdd0 [ 243.828363][ T8108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.828394][ T8108] ____sys_sendmsg+0xa95/0xc70 [ 243.828419][ T8108] ? copy_msghdr_from_user+0x10a/0x160 [ 243.828438][ T8108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.828474][ T8108] ___sys_sendmsg+0x134/0x1d0 [ 243.828495][ T8108] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.828545][ T8108] __sys_sendmsg+0x16d/0x220 [ 243.828564][ T8108] ? __pfx___sys_sendmsg+0x10/0x10 [ 243.828601][ T8108] do_syscall_64+0xcd/0x260 [ 243.828625][ T8108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.828640][ T8108] RIP: 0033:0x7f471cd8e169 [ 243.828653][ T8108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.828668][ T8108] RSP: 002b:00007f471dc12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.828685][ T8108] RAX: ffffffffffffffda RBX: 00007f471cfb5fa0 RCX: 00007f471cd8e169 [ 243.828695][ T8108] RDX: 0000000000040800 RSI: 0000200000000280 RDI: 0000000000000005 [ 243.828704][ T8108] RBP: 00007f471dc12090 R08: 0000000000000000 R09: 0000000000000000 [ 243.828713][ T8108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.828722][ T8108] R13: 0000000000000000 R14: 00007f471cfb5fa0 R15: 00007ffe1a62f8b8 [ 243.828745][ T8108] [ 244.277164][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 244.817991][ T9] usb 1-1: device descriptor read/64, error -71 [ 245.058050][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 245.823196][ T9] usb 1-1: device descriptor read/64, error -71 [ 245.947560][ T9] usb usb1-port1: attempt power cycle [ 246.308645][ T8138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.652'. [ 246.354634][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 246.435221][ T8139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.456650][ T9] usb 1-1: device descriptor read/8, error -71 [ 246.720193][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 246.937050][ T9] usb 1-1: device not accepting address 7, error -71 [ 247.004103][ T9] usb usb1-port1: unable to enumerate USB device [ 248.480795][ T8163] netlink: 24 bytes leftover after parsing attributes in process `syz.1.659'. [ 248.765737][ T8164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.327122][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 249.697057][ T9] usb 2-1: device descriptor read/64, error -71 [ 250.072559][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 250.377103][ T9] usb 2-1: device descriptor read/64, error -71 [ 250.487472][ T9] usb usb2-port1: attempt power cycle [ 250.873903][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 251.021405][ T9] usb 2-1: device descriptor read/8, error -71 [ 251.429841][ T8200] block device autoloading is deprecated and will be removed. [ 251.860975][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 252.292855][ T9] usb 2-1: device descriptor read/8, error -71 [ 252.420170][ T9] usb usb2-port1: unable to enumerate USB device [ 252.427240][ T8208] netlink: 'syz.0.670': attribute type 21 has an invalid length. [ 252.435316][ T8208] netlink: 132 bytes leftover after parsing attributes in process `syz.0.670'. [ 252.463290][ T8208] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 252.669691][ T8222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.677'. [ 252.927525][ T8225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.083558][ T8248] netlink: 'syz.0.682': attribute type 21 has an invalid length. [ 255.091554][ T8248] netlink: 132 bytes leftover after parsing attributes in process `syz.0.682'. [ 255.289801][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.296292][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.679058][ T5899] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 255.912661][ T8259] block device autoloading is deprecated and will be removed. [ 256.369357][ T5899] usb 2-1: device descriptor read/64, error -71 [ 257.054323][ T8271] netlink: 'syz.3.690': attribute type 21 has an invalid length. [ 257.062249][ T8271] netlink: 132 bytes leftover after parsing attributes in process `syz.3.690'. [ 257.307633][ T5899] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 257.517007][ T5899] usb 2-1: device descriptor read/64, error -71 [ 257.757331][ T5899] usb usb2-port1: attempt power cycle [ 257.915535][ T8283] block device autoloading is deprecated and will be removed. [ 258.560905][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 258.560920][ T30] audit: type=1400 audit(1745052861.451:324): avc: denied { setattr } for pid=8291 comm="syz.1.698" name="SMC" dev="sockfs" ino=18658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 258.649109][ T8296] netlink: 'syz.3.696': attribute type 21 has an invalid length. [ 258.657203][ T8296] netlink: 132 bytes leftover after parsing attributes in process `syz.3.696'. [ 259.922722][ T8310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.704'. [ 260.054302][ T8312] block device autoloading is deprecated and will be removed. [ 260.493119][ T8313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.057530][ T8320] netlink: 'syz.1.705': attribute type 21 has an invalid length. [ 261.065813][ T8320] netlink: 132 bytes leftover after parsing attributes in process `syz.1.705'. [ 261.757736][ T8325] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 261.971983][ T8329] netlink: 24 bytes leftover after parsing attributes in process `syz.1.707'. [ 262.052188][ T8332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.657471][ T8339] netlink: 'syz.2.710': attribute type 21 has an invalid length. [ 262.665418][ T8339] netlink: 132 bytes leftover after parsing attributes in process `syz.2.710'. [ 263.937106][ T8345] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 264.243855][ T8349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.713'. [ 264.344941][ T8353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.556404][ T8354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.715'. [ 264.630509][ T8355] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 265.230395][ T8362] block device autoloading is deprecated and will be removed. [ 265.785016][ T8368] netlink: 'syz.1.718': attribute type 21 has an invalid length. [ 265.793000][ T8368] netlink: 132 bytes leftover after parsing attributes in process `syz.1.718'. [ 265.977836][ T8368] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 266.230930][ T8378] netlink: 'syz.2.722': attribute type 21 has an invalid length. [ 266.238746][ T8378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.722'. [ 266.723737][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 266.997137][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 267.023455][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.003725][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.027174][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 268.237134][ T5945] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 268.370147][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 268.379885][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.401986][ T8392] block device autoloading is deprecated and will be removed. [ 268.410697][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 268.437608][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 268.455865][ T9] usb 1-1: Manufacturer: syz [ 268.478980][ T9] usb 1-1: config 0 descriptor?? [ 268.587187][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 268.598301][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 268.614311][ T5945] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 268.644378][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.693455][ T8401] xt_nat: multiple ranges no longer supported [ 268.803025][ T5945] usb 3-1: Product: syz [ 268.875313][ T5945] usb 3-1: Manufacturer: syz [ 268.952626][ T5945] usb 3-1: SerialNumber: syz [ 269.065662][ T5945] usb 3-1: config 0 descriptor?? [ 269.076306][ T8405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.733'. [ 269.079665][ T5945] hub 3-1:0.0: bad descriptor, ignoring hub [ 269.172050][ T5945] hub 3-1:0.0: probe with driver hub failed with error -5 [ 269.173102][ T9] rc_core: IR keymap rc-hauppauge not found [ 269.181969][ T5945] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input24 [ 269.206403][ T9] Registered IR keymap rc-empty [ 269.284066][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 269.376070][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 269.518676][ T8407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.547914][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 269.570263][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23 [ 269.610491][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 269.647141][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 269.977076][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 269.999699][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 270.023195][ T8390] block nbd2: NBD_DISCONNECT [ 270.047100][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 270.150753][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 270.315587][ T8386] block nbd2: Disconnected due to user request. [ 270.361174][ T8386] block nbd2: shutting down sockets [ 270.377877][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 270.397042][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 270.417267][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 270.417347][ T5868] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 270.450298][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 270.477105][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 270.490108][ T5945] usb 3-1: USB disconnect, device number 14 [ 270.512505][ T8421] overlayfs: failed to resolve './file1': -2 [ 270.521310][ T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 270.532483][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 270.549391][ T9] usb 1-1: USB disconnect, device number 8 [ 270.584731][ T30] audit: type=1326 audit(1745052873.471:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.0.739" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65d0d8e169 code=0x0 [ 270.619107][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 270.631161][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 270.664516][ T5868] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 270.687506][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.715825][ T5868] usb 4-1: Product: syz [ 270.731383][ T5868] usb 4-1: Manufacturer: syz [ 270.746168][ T5868] usb 4-1: SerialNumber: syz [ 270.759429][ T5868] usb 4-1: config 0 descriptor?? [ 270.782454][ T5868] hub 4-1:0.0: bad descriptor, ignoring hub [ 270.789889][ T5868] hub 4-1:0.0: probe with driver hub failed with error -5 [ 270.811307][ T5868] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25 [ 271.069598][ T8436] block nbd3: NBD_DISCONNECT [ 271.080166][ T8415] block nbd3: Disconnected due to user request. [ 271.107015][ T8415] block nbd3: shutting down sockets [ 271.932782][ T5868] usb 4-1: USB disconnect, device number 8 [ 272.438492][ T8456] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 272.483201][ T8462] trusted_key: encrypted_key: insufficient parameters specified [ 272.594520][ T8465] trusted_key: encrypted_key: insufficient parameters specified [ 273.845418][ T8477] overlayfs: failed to resolve './file0': -2 [ 273.909957][ T8486] netlink: 'syz.3.756': attribute type 21 has an invalid length. [ 273.917764][ T8486] netlink: 132 bytes leftover after parsing attributes in process `syz.3.756'. [ 275.439540][ T30] audit: type=1326 audit(1745052878.331:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8497 comm="syz.3.762" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37b978e169 code=0x0 [ 275.704020][ T8505] block device autoloading is deprecated and will be removed. [ 276.649578][ T8517] netlink: 'syz.1.770': attribute type 21 has an invalid length. [ 276.657375][ T8517] netlink: 132 bytes leftover after parsing attributes in process `syz.1.770'. [ 276.744078][ T8524] trusted_key: encrypted_key: insufficient parameters specified [ 276.997123][ T5868] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 277.016826][ T8527] overlayfs: failed to resolve './file0': -2 [ 277.237070][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 277.262991][ T5868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.567169][ T30] audit: type=1400 audit(1745052881.441:327): avc: denied { create } for pid=8530 comm="syz.1.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 278.619188][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 279.207357][ T30] audit: type=1400 audit(1745052881.451:328): avc: denied { write } for pid=8530 comm="syz.1.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 279.227502][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 279.238850][ T5868] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 279.250154][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.317485][ T5868] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 279.418487][ T5868] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 279.725624][ T5868] usb 5-1: Manufacturer: syz [ 279.857231][ T5868] usb 5-1: config 0 descriptor?? [ 279.878162][ T5868] usb 5-1: can't set config #0, error -71 [ 279.904478][ T5868] usb 5-1: USB disconnect, device number 11 [ 281.016064][ T8560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.783'. [ 281.115156][ T8563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.658935][ T8567] overlayfs: failed to resolve './file0': -2 [ 282.319158][ T8577] overlayfs: failed to resolve './file1': -2 [ 283.432962][ T30] audit: type=1326 audit(1745052886.321:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8587 comm="syz.2.792" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f471cd8e169 code=0x0 [ 287.870263][ T8642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.805'. [ 287.960358][ T8643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.204578][ T8645] overlayfs: failed to resolve './file1': -2 [ 289.322483][ T8655] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 289.762075][ T8666] netlink: 'syz.3.812': attribute type 21 has an invalid length. [ 289.770209][ T8666] netlink: 132 bytes leftover after parsing attributes in process `syz.3.812'. [ 290.169099][ T7704] udevd[7704]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 290.216129][ T30] audit: type=1326 audit(1745052893.091:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8669 comm="syz.1.813" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f429d78e169 code=0x0 [ 290.497756][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 290.538343][ T8682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.818'. [ 290.703072][ T8684] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.095637][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 291.103712][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.128823][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 291.154835][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 291.182497][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 291.219169][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.258596][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 291.281037][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 291.313572][ T9] usb 4-1: Manufacturer: syz [ 291.337560][ T9] usb 4-1: config 0 descriptor?? [ 291.636985][ T9] rc_core: IR keymap rc-hauppauge not found [ 291.645171][ T9] Registered IR keymap rc-empty [ 291.669826][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.707112][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 291.750715][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 291.806292][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input26 [ 292.010440][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 292.104337][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 292.127185][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 292.287933][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 292.307094][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 292.327065][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 292.347481][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 292.377094][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 292.410012][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 292.437252][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 292.457800][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 292.479322][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 292.533916][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 292.583991][ T9] usb 4-1: USB disconnect, device number 9 [ 293.034443][ T8714] block device autoloading is deprecated and will be removed. [ 294.877773][ T8729] overlayfs: failed to resolve './file0': -2 [ 295.253493][ T8742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.834'. [ 295.431863][ T8743] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 296.786330][ T30] audit: type=1326 audit(1745052899.671:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8757 comm="syz.3.839" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37b978e169 code=0x0 [ 297.764398][ T8770] overlayfs: failed to resolve './file0': -2 [ 298.987615][ T8787] block device autoloading is deprecated and will be removed. [ 300.152203][ T8808] block device autoloading is deprecated and will be removed. [ 301.027044][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 301.187047][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 301.202300][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.248394][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.287553][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 301.402119][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 301.422706][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.436827][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 301.756233][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 301.764356][ T9] usb 4-1: Manufacturer: syz [ 301.775237][ T9] usb 4-1: config 0 descriptor?? [ 302.204174][ T8833] blktrace: Concurrent blktraces are not allowed on loop0 [ 302.228459][ T9] rc_core: IR keymap rc-hauppauge not found [ 302.383776][ T9] Registered IR keymap rc-empty [ 302.468713][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 302.559440][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 302.590685][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 302.604675][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input27 [ 302.622968][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 302.647408][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 302.799588][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 302.839664][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 302.884187][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 303.115352][ T8842] overlayfs: failed to resolve './file1': -2 [ 303.125318][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 303.157282][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 303.267114][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 303.298594][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 303.311470][ T8848] overlayfs: failed to resolve './file0': -2 [ 303.347202][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 303.377044][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 303.392347][ T8858] trusted_key: encrypted_key: insufficient parameters specified [ 303.408833][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 303.432137][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 303.458103][ T9] usb 4-1: USB disconnect, device number 10 [ 304.059598][ T8860] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 305.934463][ T8894] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 306.798706][ T8906] netlink: 24 bytes leftover after parsing attributes in process `syz.4.884'. [ 306.971955][ T8912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.344929][ T8910] overlayfs: failed to resolve './file0': -2 [ 308.771320][ T8931] block device autoloading is deprecated and will be removed. [ 309.301023][ T8942] trusted_key: encrypted_key: insufficient parameters specified [ 309.310855][ T8942] trusted_key: encrypted_key: insufficient parameters specified [ 310.052663][ T8945] overlayfs: failed to resolve './file1': -2 [ 310.427565][ T8955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.898'. [ 310.516044][ T8956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 310.777921][ T30] audit: type=1400 audit(1745052913.671:332): avc: denied { mount } for pid=8952 comm="syz.3.897" name="/" dev="hugetlbfs" ino=22096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 310.845098][ T30] audit: type=1400 audit(1745052913.731:333): avc: denied { mounton } for pid=8952 comm="syz.3.897" path="/173/file0/bus" dev="hugetlbfs" ino=21495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 310.934399][ T8957] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 311.121317][ T8957] overlayfs: failed to set xattr on upper [ 311.270384][ T8968] block device autoloading is deprecated and will be removed. [ 311.413744][ T8957] overlayfs: ...falling back to redirect_dir=nofollow. [ 311.625174][ T8957] overlayfs: ...falling back to index=off. [ 311.639254][ T8957] overlayfs: ...falling back to uuid=null. [ 311.654141][ T8957] overlayfs: maximum fs stacking depth exceeded [ 312.357013][ T873] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 313.310107][ T8982] blktrace: Concurrent blktraces are not allowed on loop2 [ 313.312303][ T8979] overlayfs: failed to resolve './file1': -2 [ 313.337198][ T8983] block device autoloading is deprecated and will be removed. [ 313.406986][ T873] usb 4-1: Using ep0 maxpacket: 8 [ 313.414397][ T873] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 313.422655][ T873] usb 4-1: config 0 has no interface number 1 [ 313.429955][ T873] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 313.617187][ T873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 12543, setting to 1024 [ 313.632655][ T873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 313.737666][ T30] audit: type=1400 audit(1745052916.601:334): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 313.837869][ T873] usb 4-1: string descriptor 0 read error: -71 [ 313.844154][ T873] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 313.857470][ T873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.235411][ T873] usb 4-1: config 0 descriptor?? [ 314.356049][ T873] usb 4-1: can't set config #0, error -71 [ 314.374954][ T873] usb 4-1: USB disconnect, device number 11 [ 314.885880][ T9001] trusted_key: encrypted_key: insufficient parameters specified [ 315.230651][ T9003] overlayfs: failed to resolve './file1': -2 [ 316.008629][ T9010] overlayfs: failed to resolve './file0': -2 [ 316.829798][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.848141][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.455003][ T9031] block device autoloading is deprecated and will be removed. [ 319.607129][ T5912] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 319.877132][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 319.950640][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 319.997445][ T5912] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 320.033066][ T9063] netlink: 'syz.2.926': attribute type 21 has an invalid length. [ 320.041095][ T9063] netlink: 132 bytes leftover after parsing attributes in process `syz.2.926'. [ 320.197110][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.208566][ T5912] usb 4-1: Product: syz [ 320.215408][ T5912] usb 4-1: Manufacturer: syz [ 320.220642][ T5912] usb 4-1: SerialNumber: syz [ 320.230910][ T5912] usb 4-1: config 0 descriptor?? [ 320.253465][ T5912] hub 4-1:0.0: bad descriptor, ignoring hub [ 320.956667][ T5912] hub 4-1:0.0: probe with driver hub failed with error -5 [ 321.031296][ T5912] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input28 [ 321.438196][ T9072] block nbd3: NBD_DISCONNECT [ 321.607416][ T9069] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 321.954393][ T9081] block device autoloading is deprecated and will be removed. [ 322.634236][ T9080] overlayfs: failed to resolve './file0': -2 [ 324.990803][ T9113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.939'. [ 325.097125][ T9114] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 325.679901][ T9118] blktrace: Concurrent blktraces are not allowed on loop2 [ 327.051538][ T5868] usb 4-1: USB disconnect, device number 12 [ 327.329053][ T9130] trusted_key: encrypted_key: insufficient parameters specified [ 327.622581][ T9134] overlayfs: failed to resolve './file0': -2 [ 328.935543][ T9153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.951'. [ 329.029509][ T9154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.683072][ T9163] blktrace: Concurrent blktraces are not allowed on loop4 [ 331.352643][ T9187] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 332.521920][ T9209] blktrace: Concurrent blktraces are not allowed on loop4 [ 335.892545][ T30] audit: type=1326 audit(1745052938.781:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.0.972" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65d0d8e169 code=0x0 [ 336.619727][ T9244] netlink: 'syz.4.973': attribute type 21 has an invalid length. [ 336.627565][ T9244] netlink: 132 bytes leftover after parsing attributes in process `syz.4.973'. [ 338.513546][ T9269] trusted_key: encrypted_key: insufficient parameters specified [ 339.389231][ T9278] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 339.500979][ T9277] overlayfs: failed to resolve './file0': -2 [ 341.905752][ T9314] overlayfs: failed to resolve './file1': -2 [ 341.985261][ T30] audit: type=1326 audit(1745052944.871:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9317 comm="syz.4.994" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe24e98e169 code=0x0 [ 342.345794][ T9324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.995'. [ 342.528429][ T9326] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.902268][ T9330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.997'. [ 342.911447][ T5912] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 342.980844][ T9331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.105629][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 343.204627][ T5912] usb 1-1: config 0 has no interfaces? [ 343.223726][ T5912] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 343.251508][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.259664][ T9313] syz.1.993 (9313) used greatest stack depth: 20360 bytes left [ 343.364631][ T5912] usb 1-1: Product: syz [ 343.368953][ T5912] usb 1-1: Manufacturer: syz [ 343.378018][ T5912] usb 1-1: SerialNumber: syz [ 343.405645][ T5912] usb 1-1: config 0 descriptor?? [ 343.734539][ T9328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.750408][ T9342] netlink: 'syz.2.999': attribute type 21 has an invalid length. [ 343.778854][ T9328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.287274][ T9342] netlink: 132 bytes leftover after parsing attributes in process `syz.2.999'. [ 344.370226][ T5912] usb 1-1: USB disconnect, device number 9 [ 345.559321][ T9354] overlayfs: failed to resolve './file1': -2 [ 345.993034][ T9357] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 347.417700][ T9382] overlayfs: failed to resolve './file1': -2 [ 347.503515][ T9386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1010'. [ 347.747325][ T9389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.284832][ T9396] block device autoloading is deprecated and will be removed. [ 350.477858][ T9421] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 351.783857][ T9444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1025'. [ 351.954124][ T9445] block device autoloading is deprecated and will be removed. [ 352.325345][ T9447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.614912][ T9451] overlayfs: failed to resolve './file1': -2 [ 356.040914][ T9497] block device autoloading is deprecated and will be removed. [ 357.225956][ T9506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1039'. [ 357.335330][ T9508] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.775919][ T9510] block device autoloading is deprecated and will be removed. [ 358.902312][ T9517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1043'. [ 360.184466][ T9519] blktrace: Concurrent blktraces are not allowed on loop2 [ 360.212973][ T9521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.557932][ T9524] overlayfs: failed to resolve './file1': -2 [ 361.778212][ T9544] netlink: 'syz.1.1050': attribute type 21 has an invalid length. [ 361.857112][ T9544] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1050'. [ 362.342980][ T9543] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 363.351225][ T9564] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 364.017522][ T9571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1059'. [ 364.614800][ T9576] block device autoloading is deprecated and will be removed. [ 364.644128][ T9578] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.072641][ T9579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1057'. [ 365.582994][ T9580] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 365.925294][ T9588] trusted_key: encrypted_key: insufficient parameters specified [ 365.939155][ T9588] trusted_key: encrypted_key: insufficient parameters specified [ 367.025520][ T9598] block device autoloading is deprecated and will be removed. [ 368.640671][ T9608] netlink: 'syz.3.1062': attribute type 21 has an invalid length. [ 368.648803][ T9608] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1062'. [ 369.582844][ T9616] block device autoloading is deprecated and will be removed. [ 370.462641][ T9623] trusted_key: encrypted_key: insufficient parameters specified [ 370.476482][ T9623] trusted_key: encrypted_key: insufficient parameters specified [ 372.232902][ T9636] block nbd4: NBD_DISCONNECT [ 372.519892][ T9635] block nbd4: Disconnected due to user request. [ 372.526251][ T9635] block nbd4: shutting down sockets [ 373.152288][ T9648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1077'. [ 373.567359][ T9652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.132973][ T9666] block device autoloading is deprecated and will be removed. [ 375.106329][ T9674] overlayfs: failed to resolve './file0': -2 [ 375.460634][ T9684] trusted_key: encrypted_key: insufficient parameters specified [ 375.477779][ T9682] relay: one or more items not logged [item size (56) > sub-buffer size (7)] [ 376.737836][ T9690] block device autoloading is deprecated and will be removed. [ 377.452003][ T9704] netlink: 'syz.4.1088': attribute type 21 has an invalid length. [ 377.459972][ T9704] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1088'. [ 377.661369][ T9714] trusted_key: encrypted_key: insufficient parameters specified [ 378.173682][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.184207][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.876275][ T9724] block device autoloading is deprecated and will be removed. [ 379.537000][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 379.776155][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 379.877231][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.892344][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 379.914462][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 379.924564][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 379.935970][ T9737] trusted_key: encrypted_key: insufficient parameters specified [ 380.397032][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.419000][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 380.428376][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 380.436401][ T9] usb 5-1: Manufacturer: syz [ 380.443667][ T9] usb 5-1: config 0 descriptor?? [ 381.337002][ T9] rc_core: IR keymap rc-hauppauge not found [ 381.343007][ T9] Registered IR keymap rc-empty [ 381.478622][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 381.509867][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 382.115457][ T9751] block device autoloading is deprecated and will be removed. [ 382.221891][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 382.312369][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input29 [ 382.364552][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 382.481241][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 382.508613][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 382.537017][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 382.969858][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 383.078376][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 383.107026][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 383.148949][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 383.174383][ T9762] overlayfs: failed to resolve './file0': -2 [ 383.203035][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 383.337073][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 383.388604][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 383.436722][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 383.537591][ T9] usb 5-1: USB disconnect, device number 12 [ 384.565317][ T9777] block device autoloading is deprecated and will be removed. [ 385.524075][ T9786] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1111'. [ 387.808598][ T9812] overlayfs: failed to resolve './file0': -2 [ 388.663219][ T9816] netlink: 'syz.3.1116': attribute type 21 has an invalid length. [ 388.698067][ T9816] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1116'. [ 390.314217][ T9837] trusted_key: encrypted_key: insufficient parameters specified [ 391.389756][ T9852] block device autoloading is deprecated and will be removed. [ 392.455035][ T9862] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1131'. [ 392.531627][ T9863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.906432][ T9866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1134'. [ 393.014269][ T9870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 394.454200][ T9888] block device autoloading is deprecated and will be removed. [ 395.169036][ T9897] trusted_key: encrypted_key: insufficient parameters specified [ 395.246234][ T9899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1141'. [ 395.357155][ T9900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.546481][ T9913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1144'. [ 397.505379][ T5818] block device autoloading is deprecated and will be removed. [ 397.622454][ T9920] overlayfs: failed to resolve './file0': -2 [ 398.813927][ T9934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1148'. [ 398.919130][ T9935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.222217][ T9956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1155'. [ 403.566705][ T30] audit: type=1400 audit(1745053006.451:337): avc: denied { setopt } for pid=9984 comm="syz.0.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 403.655257][ T9988] overlayfs: failed to resolve './file0': -2 [ 403.800194][ T873] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 403.978070][ T873] usb 1-1: Using ep0 maxpacket: 32 [ 403.985385][ T873] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.995799][ T873] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 404.047013][ T873] usb 1-1: config 1 interface 0 has no altsetting 0 [ 404.069345][ T873] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.40 [ 404.079448][ T873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.250624][ T873] usb 1-1: Product: 浪乗灝뢝憑冇能曰೛ㅶꢄ [ 404.361175][ T873] usb 1-1: Manufacturer: 즊碁厼ᚘ⢯蟮ո금楧㯸鄟턱垒귈奩尴鷝馢驂ꭨ１䮏Ⲝߍꊟ䟫ʻ善늾⌟ꨤ⇻쪴؛གྷ꒕㳁끪쥲䅡攄꭬撾뫣甯ꕄ퇬레䚺葵迓쓖ﯙ犩嶇䞘賍ಌ癁묝䠞嬱泉뒊눷ᮠ蟦෎듮䗜㧴ኇ侸ⷠ襪䳱殿⒬ᫍ亿㥤ꕷ亞相ᡏ〞撉⛶欢蔽Ӣ彐秉컳颎拘괧匓䗅毥ㅉ鰹謀 [ 404.462786][ T873] usb 1-1: SerialNumber: п [ 404.514008][ T30] audit: type=1400 audit(1745053007.401:338): avc: denied { connect } for pid=9999 comm="syz.2.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 404.540280][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1167'. [ 404.841355][ T30] audit: type=1400 audit(1745053007.681:339): avc: denied { remount } for pid=9999 comm="syz.2.1167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 405.076972][ T5867] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 405.527555][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 405.541431][ T5867] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 405.567053][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.575124][ T5867] usb 3-1: Product: syz [ 405.579414][ T5867] usb 3-1: Manufacturer: syz [ 405.584020][ T5867] usb 3-1: SerialNumber: syz [ 405.597521][ T5867] usb 3-1: config 0 descriptor?? [ 405.609828][ T5867] gm12u320 3-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 405.632708][ T5867] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5 [ 405.663710][ T5867] usb-storage 3-1:0.0: USB Mass Storage device detected [ 405.696138][ T5867] usb-storage 3-1:0.0: device ignored [ 405.842892][ T5867] usb 3-1: USB disconnect, device number 15 [ 406.754378][ T873] usbhid 1-1:1.0: can't add hid device: -71 [ 406.763845][ T873] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 406.781607][ T873] usb 1-1: USB disconnect, device number 10 [ 407.118017][ T8044] udevd[8044]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 407.437067][ T5867] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 407.758218][ T5867] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 407.771304][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.782022][ T5867] usb 2-1: config 0 descriptor?? [ 407.909988][T10039] block device autoloading is deprecated and will be removed. [ 408.465673][T10032] pim6reg: entered allmulticast mode [ 408.472554][T10032] pim6reg: left allmulticast mode [ 408.542614][ T5867] usb 2-1: Cannot read MAC address [ 408.662627][ T30] audit: type=1400 audit(1745053011.431:340): avc: denied { getopt } for pid=10031 comm="syz.1.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 408.682756][ T5867] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 409.636793][T10058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1183'. [ 409.729936][T10059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.393886][ T5867] usb 2-1: USB disconnect, device number 17 [ 410.520008][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1185'. [ 410.522196][ T30] audit: type=1400 audit(1745053013.411:341): avc: denied { getopt } for pid=10067 comm="syz.3.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 411.414488][T10077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1189'. [ 411.762570][T10078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 411.948629][T10090] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.956000][T10090] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.073339][T10090] bridge0: entered allmulticast mode [ 412.208001][T10094] bridge_slave_1: left allmulticast mode [ 412.218296][T10094] bridge_slave_1: left promiscuous mode [ 412.718153][T10094] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.774040][T10094] bridge_slave_0: left allmulticast mode [ 412.779925][T10094] bridge_slave_0: left promiscuous mode [ 412.787656][T10094] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.601862][T10119] netlink: 'syz.3.1195': attribute type 21 has an invalid length. [ 414.603652][T10122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1200'. [ 414.976746][T10119] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1195'. [ 415.038532][T10127] overlayfs: missing 'lowerdir' [ 416.837795][ T30] audit: type=1400 audit(1745053019.671:342): avc: denied { connect } for pid=10144 comm="syz.4.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 417.223387][T10150] netlink: zone id is out of range [ 417.228562][T10150] netlink: zone id is out of range [ 417.233653][T10150] netlink: zone id is out of range [ 417.238783][T10150] netlink: zone id is out of range [ 417.243866][T10150] netlink: zone id is out of range [ 417.248971][T10150] netlink: zone id is out of range [ 417.254049][T10150] netlink: zone id is out of range [ 417.259144][T10150] netlink: zone id is out of range [ 417.264771][T10150] netlink: zone id is out of range [ 417.269869][T10150] netlink: zone id is out of range [ 417.550991][T10156] FAULT_INJECTION: forcing a failure. [ 417.550991][T10156] name failslab, interval 1, probability 0, space 0, times 0 [ 417.551024][T10156] CPU: 1 UID: 0 PID: 10156 Comm: syz.1.1207 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 417.551043][T10156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 417.551051][T10156] Call Trace: [ 417.551056][T10156] [ 417.551062][T10156] dump_stack_lvl+0x16c/0x1f0 [ 417.551088][T10156] should_fail_ex+0x512/0x640 [ 417.551108][T10156] should_failslab+0xc2/0x120 [ 417.551123][T10156] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 417.551137][T10156] ? skb_clone+0x190/0x3f0 [ 417.551154][T10156] ? __lock_acquire+0x5ca/0x1ba0 [ 417.551168][T10156] skb_clone+0x190/0x3f0 [ 417.551184][T10156] dev_queue_xmit_nit+0x3e7/0xca0 [ 417.551206][T10156] dev_hard_start_xmit+0x5b6/0x740 [ 417.551225][T10156] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 417.551242][T10156] __dev_queue_xmit+0x7eb/0x43e0 [ 417.551263][T10156] ? __pfx___dev_queue_xmit+0x10/0x10 [ 417.551293][T10156] ? __asan_memcpy+0x3c/0x60 [ 417.551313][T10156] ? __asan_memcpy+0x3c/0x60 [ 417.551332][T10156] ? __skb_clone+0x570/0x760 [ 417.551352][T10156] netlink_deliver_tap+0xa87/0xd30 [ 417.551377][T10156] netlink_unicast+0x5df/0x7f0 [ 417.551400][T10156] ? __pfx_netlink_unicast+0x10/0x10 [ 417.551427][T10156] netlink_sendmsg+0x8d1/0xdd0 [ 417.551451][T10156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.551479][T10156] ____sys_sendmsg+0xa95/0xc70 [ 417.551502][T10156] ? copy_msghdr_from_user+0x10a/0x160 [ 417.551520][T10156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.551553][T10156] ___sys_sendmsg+0x134/0x1d0 [ 417.551570][T10156] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.551611][T10156] __sys_sendmsg+0x16d/0x220 [ 417.551626][T10156] ? __pfx___sys_sendmsg+0x10/0x10 [ 417.551649][T10156] ? rcu_is_watching+0x12/0xc0 [ 417.551671][T10156] do_syscall_64+0xcd/0x260 [ 417.551692][T10156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.551706][T10156] RIP: 0033:0x7f429d78e169 [ 417.551719][T10156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.551732][T10156] RSP: 002b:00007f429e575038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.551745][T10156] RAX: ffffffffffffffda RBX: 00007f429d9b5fa0 RCX: 00007f429d78e169 [ 417.551754][T10156] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 417.551763][T10156] RBP: 00007f429e575090 R08: 0000000000000000 R09: 0000000000000000 [ 417.551771][T10156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.551779][T10156] R13: 0000000000000000 R14: 00007f429d9b5fa0 R15: 00007ffdd3162378 [ 417.551798][T10156] [ 418.502434][T10168] FAULT_INJECTION: forcing a failure. [ 418.502434][T10168] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 418.515578][T10168] CPU: 0 UID: 0 PID: 10168 Comm: syz.1.1212 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 418.515592][T10168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 418.515597][T10168] Call Trace: [ 418.515601][T10168] [ 418.515605][T10168] dump_stack_lvl+0x16c/0x1f0 [ 418.515623][T10168] should_fail_ex+0x512/0x640 [ 418.515635][T10168] _copy_from_user+0x2e/0xd0 [ 418.515647][T10168] copy_msghdr_from_user+0x98/0x160 [ 418.515660][T10168] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 418.515674][T10168] ? kfree+0x252/0x4d0 [ 418.515687][T10168] ? __lock_acquire+0x5ca/0x1ba0 [ 418.515699][T10168] ___sys_recvmsg+0xdb/0x1a0 [ 418.515711][T10168] ? __pfx____sys_recvmsg+0x10/0x10 [ 418.515728][T10168] ? __pfx___might_resched+0x10/0x10 [ 418.515745][T10168] do_recvmmsg+0x2fe/0x740 [ 418.515758][T10168] ? __pfx_do_recvmmsg+0x10/0x10 [ 418.515772][T10168] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 418.515789][T10168] ? __fget_files+0x20e/0x3c0 [ 418.515802][T10168] __x64_sys_recvmmsg+0x22a/0x280 [ 418.515815][T10168] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 418.515826][T10168] ? rcu_is_watching+0x12/0xc0 [ 418.515841][T10168] do_syscall_64+0xcd/0x260 [ 418.515856][T10168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.515866][T10168] RIP: 0033:0x7f429d78e169 [ 418.515874][T10168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.515884][T10168] RSP: 002b:00007f429e575038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 418.515893][T10168] RAX: ffffffffffffffda RBX: 00007f429d9b5fa0 RCX: 00007f429d78e169 [ 418.515899][T10168] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000005 [ 418.515904][T10168] RBP: 00007f429e575090 R08: 0000000000000000 R09: 0000000000000000 [ 418.515910][T10168] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 418.515915][T10168] R13: 0000000000000000 R14: 00007f429d9b5fa0 R15: 00007ffdd3162378 [ 418.515927][T10168] [ 420.700296][ T30] audit: type=1400 audit(1745053023.591:343): avc: denied { create } for pid=10185 comm="syz.4.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 421.191734][ T30] audit: type=1400 audit(1745053023.691:344): avc: denied { write } for pid=10182 comm="syz.0.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 421.219233][ T30] audit: type=1400 audit(1745053024.061:345): avc: denied { search } for pid=5177 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.242021][ T55] Bluetooth: hci4: unexpected event for opcode 0x2011 [ 421.619456][ T30] audit: type=1400 audit(1745053024.501:346): avc: denied { write } for pid=10195 comm="syz.4.1224" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 421.907251][ T55] Bluetooth: Unexpected continuation frame (len 12) [ 422.297319][ T873] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 422.817816][ T30] audit: type=1400 audit(1745053025.701:347): avc: denied { mount } for pid=10195 comm="syz.4.1224" name="/" dev="ramfs" ino=28050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 422.998924][ T873] usb 2-1: Using ep0 maxpacket: 8 [ 423.025284][ T873] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 423.146190][ T873] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 423.156268][ T873] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 423.166200][ T873] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.179219][ T873] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 423.647608][ T873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.941453][ T873] usb 2-1: GET_CAPABILITIES returned 0 [ 424.021744][ T873] usbtmc 2-1:16.0: can't read capabilities [ 424.173637][T10226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1229'. [ 425.024812][T10231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.101295][T10231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.121890][T10226] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 425.317120][ T55] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 425.327095][ T55] Bluetooth: hci4: Injecting HCI hardware error event [ 425.335053][ T5835] Bluetooth: hci4: hardware error 0x00 [ 425.479127][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 425.707171][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 425.716704][ T9] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 425.734981][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.743084][ T9] usb 3-1: Product: syz [ 425.750346][ T9] usb 3-1: Manufacturer: syz [ 425.755288][ T9] usb 3-1: SerialNumber: syz [ 425.775266][ T9] usb 3-1: config 0 descriptor?? [ 425.789596][ T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 426.186819][ T873] usb 2-1: USB disconnect, device number 18 [ 427.026371][ T9] gspca_topro: reg_w err -110 [ 427.048536][T10233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.057028][ T9] gspca_topro: Sensor soi763a [ 427.097150][T10233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.121595][ T9] usb 3-1: USB disconnect, device number 16 [ 427.459187][T10267] FAULT_INJECTION: forcing a failure. [ 427.459187][T10267] name failslab, interval 1, probability 0, space 0, times 0 [ 427.472177][T10267] CPU: 0 UID: 0 PID: 10267 Comm: syz.4.1241 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 427.472199][T10267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 427.472206][T10267] Call Trace: [ 427.472210][T10267] [ 427.472214][T10267] dump_stack_lvl+0x16c/0x1f0 [ 427.472231][T10267] should_fail_ex+0x512/0x640 [ 427.472242][T10267] ? fs_reclaim_acquire+0xae/0x150 [ 427.472257][T10267] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 427.472272][T10267] should_failslab+0xc2/0x120 [ 427.472283][T10267] __kmalloc_noprof+0xd2/0x510 [ 427.472296][T10267] tomoyo_realpath_from_path+0xc2/0x6e0 [ 427.472311][T10267] ? tomoyo_profile+0x47/0x60 [ 427.472322][T10267] tomoyo_path_number_perm+0x245/0x580 [ 427.472333][T10267] ? tomoyo_path_number_perm+0x237/0x580 [ 427.472345][T10267] ? lockdep_hardirqs_on+0x23/0x110 [ 427.472358][T10267] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 427.472383][T10267] ? current_check_access_path+0x335/0x460 [ 427.472395][T10267] ? current_check_access_path+0x33c/0x460 [ 427.472406][T10267] ? __pfx_current_check_access_path+0x10/0x10 [ 427.472418][T10267] ? kasan_quarantine_put+0x10a/0x240 [ 427.472427][T10267] ? lockdep_hardirqs_on+0x7c/0x110 [ 427.472440][T10267] tomoyo_path_mknod+0x10c/0x190 [ 427.472449][T10267] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 427.472458][T10267] ? putname+0x154/0x1a0 [ 427.472469][T10267] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 427.472482][T10267] security_path_mknod+0x161/0x310 [ 427.472497][T10267] unix_bind+0x2b8/0x1680 [ 427.472507][T10267] ? lockdep_hardirqs_on+0x7c/0x110 [ 427.472521][T10267] ? __pfx_unix_bind+0x10/0x10 [ 427.472530][T10267] ? __pfx_unix_bind+0x10/0x10 [ 427.472538][T10267] ? __sys_bind+0x149/0x260 [ 427.472549][T10267] __sys_bind+0x211/0x260 [ 427.472558][T10267] ? __pfx___sys_bind+0x10/0x10 [ 427.472577][T10267] __x64_sys_bind+0x72/0xb0 [ 427.472586][T10267] do_syscall_64+0xcd/0x260 [ 427.472600][T10267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.472610][T10267] RIP: 0033:0x7fe24e98e169 [ 427.472618][T10267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.472628][T10267] RSP: 002b:00007fe24f786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 427.472637][T10267] RAX: ffffffffffffffda RBX: 00007fe24ebb6080 RCX: 00007fe24e98e169 [ 427.472643][T10267] RDX: 000000000000006e RSI: 0000200000003000 RDI: 0000000000000008 [ 427.472649][T10267] RBP: 00007fe24f786090 R08: 0000000000000000 R09: 0000000000000000 [ 427.472654][T10267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.472660][T10267] R13: 0000000000000000 R14: 00007fe24ebb6080 R15: 00007ffcda66a1b8 [ 427.472672][T10267] [ 427.475345][T10267] ERROR: Out of memory at tomoyo_realpath_from_path. [ 427.477071][ T5835] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 428.723802][T10275] block device autoloading is deprecated and will be removed. [ 429.500218][T10292] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1251'. [ 429.537096][T10288] kvm: kvm [10287]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000008e) [ 430.343276][ T30] audit: type=1400 audit(1745053033.231:348): avc: denied { setattr } for pid=10287 comm="syz.4.1248" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 430.418280][T10292] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 430.639224][ T30] audit: type=1400 audit(1745053033.531:349): avc: denied { ioctl } for pid=10307 comm="syz.2.1256" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 430.670212][T10308] FAULT_INJECTION: forcing a failure. [ 430.670212][T10308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.686077][T10308] CPU: 1 UID: 0 PID: 10308 Comm: syz.2.1256 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 430.686103][T10308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 430.686113][T10308] Call Trace: [ 430.686118][T10308] [ 430.686124][T10308] dump_stack_lvl+0x16c/0x1f0 [ 430.686151][T10308] should_fail_ex+0x512/0x640 [ 430.686172][T10308] _copy_to_user+0x32/0xd0 [ 430.686199][T10308] drm_read+0x3cb/0x960 [ 430.686230][T10308] ? __pfx_drm_read+0x10/0x10 [ 430.686252][T10308] ? avc_policy_seqno+0x9/0x20 [ 430.686266][T10308] ? selinux_file_permission+0x11f/0x580 [ 430.686294][T10308] ? bpf_lsm_file_permission+0x9/0x10 [ 430.686317][T10308] ? security_file_permission+0x71/0x210 [ 430.686339][T10308] ? rw_verify_area+0xcf/0x680 [ 430.686360][T10308] ? __pfx_drm_read+0x10/0x10 [ 430.686381][T10308] vfs_readv+0x6bc/0x8a0 [ 430.686408][T10308] ? __pfx_vfs_readv+0x10/0x10 [ 430.686445][T10308] ? __fget_files+0x20e/0x3c0 [ 430.686459][T10308] ? __fget_files+0x200/0x3c0 [ 430.686479][T10308] ? do_readv+0x132/0x330 [ 430.686499][T10308] do_readv+0x132/0x330 [ 430.686521][T10308] ? __pfx_do_readv+0x10/0x10 [ 430.686540][T10308] ? rcu_is_watching+0x12/0xc0 [ 430.686567][T10308] do_syscall_64+0xcd/0x260 [ 430.686590][T10308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.686612][T10308] RIP: 0033:0x7f471cd8e169 [ 430.686625][T10308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.686640][T10308] RSP: 002b:00007f471dc12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 430.686654][T10308] RAX: ffffffffffffffda RBX: 00007f471cfb5fa0 RCX: 00007f471cd8e169 [ 430.686664][T10308] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 430.686673][T10308] RBP: 00007f471dc12090 R08: 0000000000000000 R09: 0000000000000000 [ 430.686682][T10308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.686690][T10308] R13: 0000000000000000 R14: 00007f471cfb5fa0 R15: 00007ffe1a62f8b8 [ 430.686712][T10308] [ 430.889830][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.900799][ T30] audit: type=1400 audit(1745053033.791:350): avc: denied { write } for pid=5177 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.964200][T10312] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 430.977474][T10312] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 431.168012][ T30] audit: type=1400 audit(1745053033.791:351): avc: denied { remove_name } for pid=5177 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.348006][ T30] audit: type=1400 audit(1745053033.791:352): avc: denied { add_name } for pid=5177 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.377005][ T30] audit: type=1400 audit(1745053034.131:353): avc: denied { mount } for pid=10322 comm="syz.2.1258" name="/" dev="autofs" ino=28337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 432.416938][ T30] audit: type=1400 audit(1745053035.301:354): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 432.603721][T10337] capability: warning: `syz.3.1263' uses 32-bit capabilities (legacy support in use) [ 432.650257][ T30] audit: type=1400 audit(1745053035.541:355): avc: denied { setopt } for pid=10336 comm="syz.3.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 432.698685][ T30] audit: type=1400 audit(1745053035.541:356): avc: denied { read } for pid=10336 comm="syz.3.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 432.774668][ T30] audit: type=1400 audit(1745053035.621:357): avc: denied { write } for pid=10336 comm="syz.3.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 433.872397][ T5867] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 434.806981][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 434.866585][T10366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1273'. [ 434.886351][ T5867] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 434.970774][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 434.992523][T10366] capability: warning: `syz.1.1273' uses deprecated v2 capabilities in a way that may be insecure [ 434.995515][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24929, setting to 1024 [ 435.017148][ T5867] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 435.029543][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.044879][ T5867] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 435.082263][ T5867] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 435.112344][ T5867] usb 3-1: Manufacturer: syz [ 435.132593][ T5867] usb 3-1: config 0 descriptor?? [ 435.151428][T10366] ======================================================= [ 435.151428][T10366] WARNING: The mand mount option has been deprecated and [ 435.151428][T10366] and is ignored by this kernel. Remove the mand [ 435.151428][T10366] option from the mount to silence this warning. [ 435.151428][T10366] ======================================================= [ 435.527322][ T5867] rc_core: IR keymap rc-hauppauge not found [ 435.533502][ T5867] Registered IR keymap rc-empty [ 435.551878][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 435.606031][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 435.653866][ T5867] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 435.716281][ T5867] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30 [ 436.076030][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 436.107514][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 436.170374][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 436.207215][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 436.235515][T10388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1277'. [ 436.467204][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 436.538609][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 436.567367][T10391] SELinux: security_context_str_to_sid (unconfned_u) failed with errno=-22 [ 436.578618][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 437.197219][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 437.243954][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 437.267294][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 437.287196][ T5867] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 437.309833][ T5867] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 437.333332][ T5867] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 437.367191][ T5867] usb 3-1: USB disconnect, device number 17 [ 437.580954][ T873] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 437.958517][ T873] usb 2-1: config 7 has an invalid interface number: 252 but max is 0 [ 437.969415][ T873] usb 2-1: config 7 has no interface number 0 [ 437.976257][ T873] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 437.991139][ T873] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 438.002565][ T873] usb 2-1: config 7 interface 252 has no altsetting 0 [ 438.015176][ T873] usb 2-1: string descriptor 0 read error: -22 [ 438.042770][ T873] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 438.063492][ T873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.087810][ T873] idmouse 2-1:7.252: Unable to find bulk-in endpoint. [ 438.477108][ T5867] usb 2-1: USB disconnect, device number 19 [ 439.609804][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.616103][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.669409][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 439.669424][ T30] audit: type=1400 audit(1745053042.561:360): avc: denied { name_bind } for pid=10428 comm="syz.0.1290" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 439.775186][T10433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1291'. [ 439.869860][T10441] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.925135][ T30] audit: type=1400 audit(1745053042.811:361): avc: denied { ioctl } for pid=10431 comm="syz.3.1292" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 440.446964][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'. [ 440.648993][ T30] audit: type=1400 audit(1745053043.391:362): avc: denied { mount } for pid=10431 comm="syz.3.1292" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 440.790324][T10434] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 440.812234][T10446] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 440.829594][ T30] audit: type=1400 audit(1745053043.671:363): avc: denied { mounton } for pid=10431 comm="syz.3.1292" path="/252/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 440.991939][T10446] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 441.000788][ T30] audit: type=1400 audit(1745053043.881:364): avc: denied { firmware_load } for pid=10436 comm="syz.2.1293" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 441.034588][T10434] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 441.100562][T10451] netlink: 'syz.1.1294': attribute type 21 has an invalid length. [ 441.108684][T10451] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1294'. [ 442.237447][ T30] audit: type=1400 audit(1745053045.131:365): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 442.257797][ T873] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 442.411354][ T30] audit: type=1400 audit(1745053045.301:366): avc: denied { ioctl } for pid=10467 comm="syz.1.1299" path="socket:[29000]" dev="sockfs" ino=29000 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 442.627284][ T873] usb 5-1: Using ep0 maxpacket: 16 [ 442.675235][ T873] usb 5-1: config 0 has no interfaces? [ 442.748373][ T873] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 442.762772][ T873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.788077][ T873] usb 5-1: Product: syz [ 442.792389][ T873] usb 5-1: Manufacturer: syz [ 442.798076][ T873] usb 5-1: SerialNumber: syz [ 442.804058][ T873] usb 5-1: config 0 descriptor?? [ 443.205905][ T30] audit: type=1400 audit(1745053046.091:367): avc: denied { sqpoll } for pid=10485 comm="syz.1.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 443.227494][ T873] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 443.360296][ T5945] usb 5-1: USB disconnect, device number 13 [ 443.368982][ T30] audit: type=1400 audit(1745053046.201:368): avc: denied { read } for pid=10485 comm="syz.1.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 443.477101][ T873] usb 1-1: Using ep0 maxpacket: 8 [ 443.539099][ T873] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 443.605953][ T873] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 443.656570][ T873] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 443.840997][ T873] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.855949][ T873] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 443.866827][ T873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.921378][ T30] audit: type=1400 audit(1745053046.791:369): avc: denied { ioctl } for pid=10485 comm="syz.1.1303" path="socket:[29038]" dev="sockfs" ino=29038 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 444.321517][ T873] usb 1-1: usb_control_msg returned -32 [ 444.333024][ T873] usbtmc 1-1:16.0: can't read capabilities [ 450.313364][ T15] sched: DL replenish lagged too much [ 450.827749][ T9965] usb 1-1: USB disconnect, device number 11 [ 451.439057][T10511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1308'. [ 451.578034][T10516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.732768][T10534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1314'. [ 458.458984][T10536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.161652][ T30] audit: type=1400 audit(1745053066.051:370): avc: denied { getopt } for pid=10559 comm="syz.1.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 467.540148][ T30] audit: type=1400 audit(1745053070.111:371): avc: denied { setopt } for pid=10559 comm="syz.1.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 467.924257][ T30] audit: type=1400 audit(1745053070.111:372): avc: denied { create } for pid=10559 comm="syz.1.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 509.268685][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.280903][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.428955][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.440849][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 678.796819][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 678.803800][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5908/1:b..l P36/1:b..l [ 678.813029][ C0] rcu: (detected by 0, t=10502 jiffies, g=33113, q=140730 ncpus=2) [ 678.821009][ C0] task:kworker/u8:2 state:R running task stack:24040 pid:36 tgid:36 ppid:2 task_flags:0x24248160 flags:0x00004000 [ 678.835521][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 678.841528][ C0] Call Trace: [ 678.844799][ C0] [ 678.847725][ C0] __schedule+0x116f/0x5de0 [ 678.852238][ C0] ? sbitmap_find_bit+0x39d/0x670 [ 678.857269][ C0] ? __pfx___schedule+0x10/0x10 [ 678.862122][ C0] ? sbitmap_get_shallow+0x1d2/0x2d0 [ 678.867413][ C0] ? mark_held_locks+0x49/0x80 [ 678.872172][ C0] preempt_schedule_irq+0x51/0x90 [ 678.877198][ C0] irqentry_exit+0x36/0x90 [ 678.881613][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 678.887590][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 678.892782][ C0] Code: b0 0e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 f2 15 ee 0e 0f 82 74 02 00 00 8b 35 8a 45 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 c9 af 0e 12 0f 85 c7 02 00 00 48 83 c4 [ 678.912387][ C0] RSP: 0018:ffffc90000ad6c28 EFLAGS: 00000206 [ 678.918448][ C0] RAX: 0000000000000046 RBX: ffffffff8e3bf5c0 RCX: 0000000020237f36 [ 678.926411][ C0] RDX: 0000000000000000 RSI: ffffffff8dbca21f RDI: ffffffff8bf46440 [ 678.934372][ C0] RBP: 0000000000000002 R08: 7b3ca939467abe87 R09: 0000000000000000 [ 678.942334][ C0] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 678.950295][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 678.958275][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 678.963476][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 678.969637][ C0] unwind_next_frame+0xd1/0x20a0 [ 678.974574][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 678.979681][ C0] ? __free_frozen_pages+0x69d/0xff0 [ 678.984967][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 678.991121][ C0] arch_stack_walk+0x94/0x100 [ 678.995801][ C0] ? __free_frozen_pages+0x69d/0xff0 [ 679.001089][ C0] stack_trace_save+0x8e/0xc0 [ 679.005763][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 679.011137][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 679.016069][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 679.020997][ C0] save_stack+0x160/0x1f0 [ 679.025320][ C0] ? __pfx_save_stack+0x10/0x10 [ 679.030159][ C0] ? __free_frozen_pages+0x69d/0xff0 [ 679.035450][ C0] ? page_ext_put+0x3e/0xd0 [ 679.039948][ C0] __reset_page_owner+0x84/0x1a0 [ 679.044880][ C0] __free_frozen_pages+0x69d/0xff0 [ 679.049998][ C0] __put_partials+0x16d/0x1c0 [ 679.054680][ C0] qlist_free_all+0x4e/0x120 [ 679.059272][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 679.064726][ C0] __kasan_slab_alloc+0x69/0x90 [ 679.069571][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 679.075026][ C0] ? ext4_init_io_end+0x24/0x170 [ 679.079964][ C0] ext4_init_io_end+0x24/0x170 [ 679.084725][ C0] ext4_do_writepages+0x985/0x3490 [ 679.089833][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 679.094776][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 679.100327][ C0] ? ext4_writepages+0x37a/0x7d0 [ 679.105260][ C0] ext4_writepages+0x37a/0x7d0 [ 679.110016][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 679.115293][ C0] ? wb_update_bandwidth+0xa0/0xe0 [ 679.120417][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 679.125693][ C0] do_writepages+0x1b2/0x820 [ 679.130280][ C0] ? __pfx_do_writepages+0x10/0x10 [ 679.135379][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 679.140316][ C0] ? reacquire_held_locks+0xcd/0x1f0 [ 679.145598][ C0] __writeback_single_inode+0x160/0xfb0 [ 679.151146][ C0] ? __pfx___writeback_single_inode+0x10/0x10 [ 679.157206][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 679.162407][ C0] writeback_sb_inodes+0x601/0xf90 [ 679.167529][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 679.173187][ C0] ? _raw_spin_unlock+0x28/0x50 [ 679.178034][ C0] ? move_expired_inodes+0x5a0/0x850 [ 679.183318][ C0] __writeback_inodes_wb+0xf8/0x2d0 [ 679.188522][ C0] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 679.194324][ C0] ? queue_io+0x3f6/0x520 [ 679.198656][ C0] wb_writeback+0x7f3/0xb70 [ 679.203162][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 679.208188][ C0] ? get_nr_dirty_inodes+0x170/0x1e0 [ 679.213471][ C0] wb_workfn+0x8ca/0xbe0 [ 679.217718][ C0] ? try_to_wake_up+0x157/0x1680 [ 679.222650][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 679.227422][ C0] ? rcu_is_watching+0x12/0xc0 [ 679.232188][ C0] process_one_work+0x9cc/0x1b70 [ 679.237131][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 679.242766][ C0] ? __pfx_process_one_work+0x10/0x10 [ 679.248140][ C0] ? assign_work+0x1a0/0x250 [ 679.252730][ C0] worker_thread+0x6c8/0xf10 [ 679.257326][ C0] ? __pfx_worker_thread+0x10/0x10 [ 679.262434][ C0] kthread+0x3c2/0x780 [ 679.266502][ C0] ? __pfx_kthread+0x10/0x10 [ 679.271084][ C0] ? __pfx_kthread+0x10/0x10 [ 679.275665][ C0] ? __pfx_kthread+0x10/0x10 [ 679.280246][ C0] ? __pfx_kthread+0x10/0x10 [ 679.284826][ C0] ? rcu_is_watching+0x12/0xc0 [ 679.289588][ C0] ? __pfx_kthread+0x10/0x10 [ 679.294170][ C0] ret_from_fork+0x45/0x80 [ 679.298582][ C0] ? __pfx_kthread+0x10/0x10 [ 679.303165][ C0] ret_from_fork_asm+0x1a/0x30 [ 679.307957][ C0] [ 679.310970][ C0] task:kworker/0:8 state:R running task stack:24728 pid:5908 tgid:5908 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 679.324544][ C0] Workqueue: events_power_efficient gc_worker [ 679.330619][ C0] Call Trace: [ 679.333892][ C0] [ 679.336844][ C0] __schedule+0x116f/0x5de0 [ 679.341364][ C0] ? __pfx___schedule+0x10/0x10 [ 679.346221][ C0] ? debug_object_activate+0x2ec/0x4c0 [ 679.351692][ C0] ? mark_held_locks+0x49/0x80 [ 679.356454][ C0] preempt_schedule_irq+0x51/0x90 [ 679.361476][ C0] irqentry_exit+0x36/0x90 [ 679.365912][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 679.371922][ C0] RIP: 0010:gc_worker+0x2d5/0x16e0 [ 679.377035][ C0] Code: 00 00 48 c7 c7 c8 f1 86 90 e8 47 7e 03 f8 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 15 a0 26 f8 58 48 85 db 0f 85 d4 0f 00 00 96 a4 26 f8 8b 1d c0 46 f2 06 41 89 dc 31 ff 41 83 e4 01 44 89 [ 679.396640][ C0] RSP: 0018:ffffc90002ed7b60 EFLAGS: 00000293 [ 679.402699][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8994b639 [ 679.410663][ C0] RDX: ffff88807df74880 RSI: ffffffff8994b648 RDI: 0000000000000007 [ 679.418626][ C0] RBP: ffffffff9afdbb4c R08: 0000000000000007 R09: 0000000000000000 [ 679.426590][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888024400000 [ 679.434555][ C0] R13: 0000000000040000 R14: dffffc0000000000 R15: 0000000000001770 [ 679.442529][ C0] ? gc_worker+0xe19/0x16e0 [ 679.447031][ C0] ? gc_worker+0xe28/0x16e0 [ 679.451553][ C0] ? __pfx_gc_worker+0x10/0x10 [ 679.456314][ C0] ? rcu_is_watching+0x12/0xc0 [ 679.461077][ C0] process_one_work+0x9cc/0x1b70 [ 679.466017][ C0] ? __pfx_vmstat_shepherd+0x10/0x10 [ 679.471301][ C0] ? __pfx_process_one_work+0x10/0x10 [ 679.476675][ C0] ? assign_work+0x1a0/0x250 [ 679.481262][ C0] worker_thread+0x6c8/0xf10 [ 679.485865][ C0] ? __pfx_worker_thread+0x10/0x10 [ 679.490968][ C0] kthread+0x3c2/0x780 [ 679.495034][ C0] ? __pfx_kthread+0x10/0x10 [ 679.499617][ C0] ? __pfx_kthread+0x10/0x10 [ 679.504197][ C0] ? __pfx_kthread+0x10/0x10 [ 679.508776][ C0] ? __pfx_kthread+0x10/0x10 [ 679.513355][ C0] ? rcu_is_watching+0x12/0xc0 [ 679.518125][ C0] ? __pfx_kthread+0x10/0x10 [ 679.522719][ C0] ret_from_fork+0x45/0x80 [ 679.527138][ C0] ? __pfx_kthread+0x10/0x10 [ 679.531727][ C0] ret_from_fork_asm+0x1a/0x30 [ 679.536509][ C0] [ 679.539523][ C0] rcu: rcu_preempt kthread starved for 9323 jiffies! g33113 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 679.550624][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 679.560615][ C0] rcu: RCU grace-period kthread stack dump: [ 679.566493][ C0] task:rcu_preempt state:R running task stack:27704 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 679.579982][ C0] Call Trace: [ 679.583251][ C0] [ 679.586183][ C0] __schedule+0x116f/0x5de0 [ 679.590692][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 679.595628][ C0] ? __pfx___schedule+0x10/0x10 [ 679.600477][ C0] ? find_held_lock+0x2b/0x80 [ 679.605153][ C0] ? schedule+0x2d7/0x3a0 [ 679.609479][ C0] schedule+0xe7/0x3a0 [ 679.613546][ C0] schedule_timeout+0x123/0x290 [ 679.618391][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 679.623763][ C0] ? __pfx_process_timeout+0x10/0x10 [ 679.629058][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 679.634857][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 679.640320][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 679.645080][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 679.650358][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 679.655210][ C0] rcu_gp_kthread+0x270/0x380 [ 679.659877][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 679.665065][ C0] ? rcu_is_watching+0x12/0xc0 [ 679.669829][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 679.675024][ C0] ? __kthread_parkme+0x19e/0x250 [ 679.680048][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 679.685239][ C0] kthread+0x3c2/0x780 [ 679.689303][ C0] ? __pfx_kthread+0x10/0x10 [ 679.693887][ C0] ? __pfx_kthread+0x10/0x10 [ 679.698467][ C0] ? __pfx_kthread+0x10/0x10 [ 679.703056][ C0] ? __pfx_kthread+0x10/0x10 [ 679.707638][ C0] ? rcu_is_watching+0x12/0xc0 [ 679.712412][ C0] ? __pfx_kthread+0x10/0x10 [ 679.717005][ C0] ret_from_fork+0x45/0x80 [ 679.721420][ C0] ? __pfx_kthread+0x10/0x10 [ 679.726020][ C0] ret_from_fork_asm+0x1a/0x30 [ 679.730799][ C0] [ 679.733811][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 679.740122][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 679.751742][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 679.761795][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 679.767432][ C0] Code: 45 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 5a 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 679.787038][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 679.793098][ C0] RAX: 0000000004469595 RBX: 0000000000000000 RCX: ffffffff8b729419 [ 679.801061][ C0] RDX: 0000000000000000 RSI: ffffffff8dbef7a7 RDI: ffffffff8bf46440 [ 679.809109][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 679.817074][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 679.825041][ C0] R13: ffffffff8e097740 R14: ffffffff90864610 R15: 0000000000000000 [ 679.833006][ C0] FS: 0000000000000000(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 679.841938][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 679.848531][ C0] CR2: 00007fe24f786d58 CR3: 000000006248a000 CR4: 00000000003526f0 [ 679.856502][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 679.864474][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 679.872469][ C0] Call Trace: [ 679.875741][ C0] [ 679.878662][ C0] default_idle+0x13/0x20 [ 679.882995][ C0] default_idle_call+0x6d/0xb0 [ 679.887755][ C0] do_idle+0x391/0x510 [ 679.891830][ C0] ? __pfx_do_idle+0x10/0x10 [ 679.896415][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 679.901617][ C0] cpu_startup_entry+0x4f/0x60 [ 679.906380][ C0] rest_init+0x16b/0x2b0 [ 679.910613][ C0] ? acpi_subsystem_init+0x133/0x180 [ 679.915893][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 679.921437][ C0] start_kernel+0x3e9/0x4d0 [ 679.925940][ C0] x86_64_start_reservations+0x18/0x30 [ 679.931402][ C0] x86_64_start_kernel+0xb0/0xc0 [ 679.936339][ C0] common_startup_64+0x13e/0x148 [ 679.941283][ C0]