last executing test programs: 42.346086952s ago: executing program 1 (id=806): capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000fc0), 0x0, 0x5) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000780)}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000006c0)=@newtaction={0x18, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000000c0)) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x1c, 0x3, 0xb, 0x7, 0xfffffffa, 0x81}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x1, 0x1}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)=r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000380)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) syz_80211_inject_frame(0x0, 0x0, 0x1e) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 36.774011565s ago: executing program 1 (id=820): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000001000"/28], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@o_path={0x0, 0x0, 0x8000, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000068000000060a010400000000000000000500400008000b4000000000400004803c0001800b00010074756e6e656c00002c0002800800034000000000080001400000000108000340000000020800014000000000080002400000000c0900010073797a30"], 0x5d54}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0xffffd6c0, r3, 0x0, 0x20}, 0x38) socket(0x10, 0x2, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r5, 0x2, &(0x7f0000000380)=[0x0, 0x0]) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x80047453, &(0x7f00000002c0)={0x18, 0x4000000, {0x4, @remote, 'erspan0\x00'}}) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) 36.159259385s ago: executing program 1 (id=824): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2c4000, 0x0) write$snapshot(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="16000000000000000000030001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r3, 0x0, 0x0}, 0x20) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) 34.829574227s ago: executing program 0 (id=831): r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000580), 0x80800, 0x0) ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0x7, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) 33.993876282s ago: executing program 2 (id=832): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x1f) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1d}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) 33.953784904s ago: executing program 0 (id=833): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000500)=0x40000) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000180)={0x1f0, [0x0, 0x4, 0x3, 0x4, 0xa556, 0x2, 0xc662, 0x7ff, 0x7, 0x8, 0x6, 0x6, 0xffff, 0x3, 0x7, 0x9, 0x7, 0xc, 0x3, 0x401, 0xb, 0x7f, 0x563, 0x1, 0x2, 0x9, 0xf800, 0x6, 0x3, 0x6, 0x8, 0x1ff, 0x6, 0x1, 0xf, 0x7fff, 0xfff, 0x3ff, 0x200, 0x3, 0x87a, 0x1ca1, 0x0, 0x0, 0x200, 0x0, 0xfff9, 0x6], 0x7}) 33.894807841s ago: executing program 3 (id=835): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000180)={0x1f0, [0x0, 0x4, 0x3, 0x4, 0xa556, 0x2, 0xc662, 0x7ff, 0x7, 0x8, 0x6, 0x6, 0xffff, 0x3, 0x7, 0x9, 0x7, 0xc, 0x3, 0x401, 0xb, 0x7f, 0x563, 0x1, 0x2, 0x9, 0xf800, 0x6, 0x3, 0x6, 0x8, 0x1ff, 0x6, 0x1, 0xf, 0x7fff, 0xfff, 0x3ff, 0x200, 0x3, 0x87a, 0x1ca1, 0x0, 0x0, 0x200, 0x0, 0xfff9, 0x6], 0x7}) 33.525830236s ago: executing program 3 (id=836): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r2, 0x409, 0x12) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11, r2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_mtu=0xd}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, &(0x7f00000005c0), &(0x7f0000000080)=""/29}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 33.520187367s ago: executing program 0 (id=837): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCFLSH(r1, 0x80044704, 0x40000020001100) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/mcfilter\x00') close(0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000940)=0xffff, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x1, @pix={0x203, 0x807c2, 0x32314d59, 0x32315659, 0xffffffff, 0x10004, 0x4, 0x807, 0xfeedcafe, 0x3, 0x2, 0x3}}) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, 0x0, 0x88) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0x129, 0x0, 0x8, 0x57, 0x9], 0x2, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) ptrace(0x10, r6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x0, 0x989680}, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000240)={0x28, 0x2, r8, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r8, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r8, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r9, 0x0, 0x1, 0x0, 0x0, 0x1001, 0x1fff}) ptrace$poke(0x5, r2, &(0x7f0000000200), 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 33.42751211s ago: executing program 2 (id=838): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x200000000248}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x300, 0xa0363159, 0x3, 0x0, [{0x8, 0xf}, {0xb, 0x7fffffff}, {0xd, 0x8}, {0x5, 0x2000008}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x710002, 0x81) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c) bind$inet(0xffffffffffffffff, 0x0, 0x0) r7 = dup(r0) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f00000002c0)={0x1, 0x102, 0x4, {0x4a4, 0x4, 0x780000, 0xfcad}}) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(0x0, r9, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 33.426950791s ago: executing program 4 (id=839): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$dri(0x0, 0x1, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe09) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0xd, 0x0, 0x2, 0x40, 0x0, 0x8281, 0x7, 0x10000}, &(0x7f0000000080)={0x6, 0x23, 0x3, 0x7, 0x7a66, 0x8, 0x2, 0x2}, &(0x7f00000000c0)={0x81, 0x1, 0x9, 0xfffffffffffffef7, 0x4b, 0x6, 0x9, 0x9}, &(0x7f0000000140)={r3, r4+60000000}, &(0x7f0000000240)={0x0}) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x1c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4800) 31.734235953s ago: executing program 2 (id=840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000002305000100071000001c000780180008000000000000004879e1768ab5c867cb8fb6e6f7fce2dc91a69a66155992c42c213da2edc488c3fe665216c0fc2aad60a27ffb3b44e386e56c1bf7011abf916138727bf4ff4e3a96d1cc8ec28028037914dffe588e6ae7644a1335f10b375ab5997d3fd5d2fc7d01a6dff9fe9d425f1b1f79eb8e27c511398342bc49cb8d68989bd77dfc2caed7ffc0af785fa9226e3291"], 0x44}}, 0x40180c4) 31.617996068s ago: executing program 3 (id=841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x4827e, 0x1ce) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x10) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x3032}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) copy_file_range(r4, 0x0, r3, &(0x7f00000000c0)=0x8010083, 0x400000, 0x0) r6 = gettid() getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x9, 0x7, 0xc, 0xb, 0x2, 0x5, 0x4, 0xffffffffffffbe92, 0x4, 0x7, 0x1, 0x75e7, 0x80, 0x5, 0x7]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={r7, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000180)=0x84) tkill(r6, 0xb) syz_pidfd_open(r6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="30020000", @ANYRES16=r1, @ANYBLOB="f0a31c0100fe00001f000000003b00000008", @ANYRES16=r6, @ANYBLOB="12023300103405000802110000010802110000005050505050507d0008905d0002000108368c0c60820c816c2d1a80000d480000000000000001000700190000000600040000000bddd574fc66d25e03193d000e2040cc83cdf463c87d756bd2def8b4a30e7caac1e2a136c79a7a28cfcf33c2b765e562b75a4b5d3d9e2205e9b8f816b9f2b35e720fe69c8e25d143af5324e5cbcad18e2f641e0202b826c2062794097a5472be9e276df383d1c3799227356e9be92b3d22e6d5ebf99d35535039fa7db56f1c767a3606acb3b1553298ecd694a57d37161ccacbff71fc64f7dbe89cc67c656354d2901e33dc33c18801677877bd6daae9df3fc2d57b07e69ad1904fd17a75aec3add4c19e92ee8c5eda0bfd6b38ef3918c34334e466274a11dd74dae1ce5e1fa7e339f352b26b0b6354670555f254cd04333963785df7f3ae59832d05491db38152969eb8aac1608b9cf54a6c75bed30818c7dcf96bf96e8cd3e6ffff93ab1d4d936faa86dc21badd56043248ca4e62a160ddf82b94f2f7a71b1cb43d99ba7fe9ca695a36433d276ba16672650a4add7b51fadd35978e9da969904ab580c837c788118dccd2a5cdf5fdeabd9d11227746b13451b665eec08571883c1def86c7bc56f86f2c359d4352079d1d6e68e222e27b6387e181a6acac1f599aac109f4961db1f91f45408cd33338abd1737c8f4fc312cb29216fd2830d1c5a163519859413a0c5c07a065ab6f8b44790000"], 0x230}}, 0x0) 31.258023347s ago: executing program 2 (id=842): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, &(0x7f000011d340)={0x1, &(0x7f000011d200)=[{0x8000000, 0x0, 0x0, 0x1, 0x7}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x7b9, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34000001) setsockopt$sock_attach_bpf(r7, 0x6, 0xd, &(0x7f0000000000), 0x4) read(r0, &(0x7f0000000180)=""/73, 0x49) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x2, 0x0, {0x2, 0xff}, {0x2, 0xf0, 0x3}, 0xfe, 0x2}, {0x0, 0x2, {0x2, 0x0, 0x88122bc10271e7e0}, {0x0, 0xff, 0x1}, 0xff, 0xfd}], 0x4000) 31.252957954s ago: executing program 1 (id=843): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2002, 0x4, 0x5}, 0x50) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0xd4) 31.207621811s ago: executing program 4 (id=844): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x9491426, 0x0, 0x0, 0x41100, 0x28, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0xfffffffe}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x1], &(0x7f0000000340)=[{0x2, 0x5, 0xf, 0x3}, {0x0, 0x5, 0xf, 0xa}]}, 0x94) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYRESOCT=r1, @ANYRES16]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r2 = dup(0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x6, 0x2, 0x2, 0x6, 0x3, 0x5}, 0xfffffd72) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000940)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000008f00)=ANY=[@ANYBLOB="18020000fbffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000100008500000086000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x8b32, &(0x7f0000000040)) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c38387af3be7d6a14", 0x9) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="092a0000ce6095c9eabb31e5902b0bf2d7e5aad81b87fd7f5a91c9b71f7910965115b933b6d29ebd0f9aa5a673fd4e8af20fbf8c23f28dc130eae20a79e1e0965d3e4fad7e72c8805c26e43a2c338b5ac53fea094a28dd0ff68bfbe544d19a90e7279bc54fc9463e33128865801d3863660e3303fba30b3f32593807289d1bc5e6989b9e77710ea2c70abc610be5cb0fe6caf23097754feb5a47517c6a7343df6033e4627802fb37836a7962", @ANYRES16=0x0, @ANYBLOB="11002dbd7000fbdbdf2510000000080007000700000008000700080000000800080001000080080008000000000008000600040000000800080006000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x14) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0x80087601, &(0x7f0000000000)) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r11, 0x1, 0x40, &(0x7f0000000240), 0x4) 30.847690007s ago: executing program 3 (id=845): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c780000d81da2814a4c18d75464bf48ea81aefd58a837675a7cb75235dae6393c0932f002ed04a373c2ef2c6102ef922836c9b203affaed19633ff6ab5ed82076820cd6ce3e", @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="10005e80080002000000000104000100"], 0x2c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050affffffff000000000000020000000c00024000000000000000010900010073797a30"], 0x54}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0x3, &(0x7f0000000240)={0x4, 0x8}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)=0x404) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC], 0x74}}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) prlimit64(r0, 0x6, &(0x7f0000000440)={0x8, 0x7ffffffbfffffffc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) 29.447348621s ago: executing program 1 (id=846): r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000001700)="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", 0x848}], 0x1) capset(&(0x7f0000000c00)={0x20080522}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1}) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000003980)={0x1, [{0x2, 0x58, 0x7, &(0x7f0000000080)="b45f314ba90152f3c21252"}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x10000, 0x0}, {0x3, 0x0, 0x91, 0x0}, {0x3, 0x0, 0xf, 0x0}, {0x1, 0x0, 0xe7b6, 0x0}, {0x0, 0x0, 0xffff32e3, 0x0}, {0x2, 0x0, 0xfffffff7, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x0, 0x0, 0xfffff03a, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x80, 0x0}, {0x1, 0x0, 0x3, 0x0}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000280)='./file1\x00', 0x0, 0x198) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbdf254f00000008000300", @ANYRES32=r6, @ANYBLOB="38007a800c0003001fbc"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000040) 29.447076098s ago: executing program 3 (id=847): ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000180)={0x1f0, [0x0, 0x4, 0x3, 0x4, 0xa556, 0x2, 0xc662, 0x7ff, 0x7, 0x8, 0x6, 0x6, 0xffff, 0x3, 0x7, 0x9, 0x7, 0xc, 0x3, 0x401, 0xb, 0x7f, 0x563, 0x1, 0x2, 0x9, 0xf800, 0x6, 0x3, 0x6, 0x8, 0x1ff, 0x6, 0x1, 0xf, 0x7fff, 0xfff, 0x3ff, 0x200, 0x3, 0x87a, 0x1ca1, 0x0, 0x0, 0x200, 0x0, 0xfff9, 0x6], 0x7}) 29.446745678s ago: executing program 4 (id=848): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x200000000248}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x300, 0xa0363159, 0x3, 0x0, [{0x8, 0xf}, {0xb, 0x7fffffff}, {0xd, 0x8}, {0x5, 0x2000008}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_loaded', 0x710002, 0x81) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c) bind$inet(0xffffffffffffffff, 0x0, 0x0) r7 = dup(r0) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f00000002c0)={0x1, 0x102, 0x4, {0x4a4, 0x4, 0x780000, 0xfcad}}) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(0x0, r9, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 29.341918665s ago: executing program 0 (id=849): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, 0x140d, 0x413, 0x70bd3d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0xf000000, 0x0, 0x1}, 0x4) 29.339153977s ago: executing program 2 (id=850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') preadv(r2, &(0x7f0000003900)=[{&(0x7f00000003c0)=""/124, 0x7c}], 0x1, 0x2f, 0x7ff) r3 = socket$unix(0x1, 0x5, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x52, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000ca007d05008686dd60ff38f5001c0600fe80000000000000000000000000000bfe8000000000000000000000000000aa73000000", @ANYRES32=0x41424344, @ANYBLOB="500400"], 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)=0x0) waitid(0x1, r6, &(0x7f0000000100), 0x8, &(0x7f0000000300)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000400)={0x7, &(0x7f0000000440)=[{0x5, 0xd0}, {0x0, 0x8fb3}, {0x5, 0x2}, {0x3, 0x9}, {0xfffd, 0x6}, {0x80, 0x1}, {0xc2, 0x9}]}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r8, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) 29.189616999s ago: executing program 3 (id=851): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x6000, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x8108}], 0x1, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x8000012, 0x8000000}, 0xc) close(r3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) syz_usb_ep_write(r2, 0x5, 0xe5, &(0x7f0000000200)="ce50472fa1f0f7c5b5f8de99459927b7498dba4e42ee44a336e91697f60c22d6c7a2c20c01631f15ca714471257c8bedb6fd58983adb2b6c004142de12db1e6ebf8fa9da01f74cb5af1c1c8c3924de75c9cd8995028f4e6eb03291f131e8706ffca8197c9de976395a351c580094109e8144d0c96b00be8b0f554e39f633a639f583d550ff0b5793846abc9e43df8913005f68d2280a6c1df9a6b924c693cfdd49abc1b54c5bea82d7ad177c5d4e0744d0b732fe1240894affb8a4d4be0d2e4eb37b394abe6c46883525a2f8eba3f1924a6ddc90492c676c0544c2aee8c2be084bc658319a") 29.116106488s ago: executing program 0 (id=852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, &(0x7f000011d340)={0x1, &(0x7f000011d200)=[{0x8000000, 0x0, 0x0, 0x1, 0x7}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x7b9, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34000001) setsockopt$sock_attach_bpf(r7, 0x6, 0xd, &(0x7f0000000000), 0x4) read(r0, &(0x7f0000000180)=""/73, 0x49) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x2, 0x0, {0x2, 0xff}, {0x2, 0xf0, 0x3}, 0xfe, 0x2}, {0x0, 0x2, {0x2, 0x0, 0x88122bc10271e7e0}, {0x0, 0xff, 0x1}, 0xff, 0xfd}], 0x4000) 28.000213718s ago: executing program 2 (id=853): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2c4000, 0x0) write$snapshot(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="16000000000000000000030001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r3, 0x0, 0x0}, 0x20) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) 27.179690752s ago: executing program 4 (id=854): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x3, {0x2, 0x0, 0x10001, 0x10000, 0x0, 0x3, {0x0, 0x0, 0x400000, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6000, 0x4, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 26.900997546s ago: executing program 4 (id=855): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x4) syz_open_dev$usbfs(0x0, 0x20a, 0x8401) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) nanosleep(&(0x7f0000000200), 0x0) 26.258870568s ago: executing program 0 (id=856): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) read(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x31) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x6}]}]}, 0x40}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)={0x40, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x46fa}, @broadcast, @device_a, @initial, {0x8, 0x1}}, 0x0, 0x1, 0x15, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 16.927634057s ago: executing program 1 (id=857): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2002, 0x4, 0x5}, 0x50) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0xd4) 0s ago: executing program 4 (id=858): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) (async) r1 = accept$netrom(r0, &(0x7f0000000100)={{0x3, @default}, [@rose, @default, @netrom, @remote, @default, @null, @rose, @bcast]}, &(0x7f0000000040)=0x48) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/comedi4\x00', 0x600, 0x0) ioctl$COMEDI_BUFCONFIG(r3, 0x8020640d, &(0x7f0000000040)={0x1, 0x3, 0x10}) (async, rerun: 64) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) unshare(0x2040600) syz_emit_ethernet(0x76, 0x0, 0x0) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x26) keyctl$update(0x2, 0x0, 0x0, 0x0) r5 = fcntl$dupfd(r2, 0x0, r2) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) write$FUSE_INIT(r5, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x1000) (async, rerun: 32) connect$netrom(r1, &(0x7f0000000080)={{0x6, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48) (async, rerun: 32) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000000), 0x4) kernel console output (not intermixed with test programs): ive=1 [ 147.212927][ T48] isku 0003:1E7D:319C.0002: unknown main item tag 0x0 [ 147.244640][ T6785] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 147.244863][ T6764] netlink: 'syz.0.209': attribute type 2 has an invalid length. [ 147.271949][ T30] audit: type=1400 audit(1760253199.544:368): avc: denied { bind } for pid=6759 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.273947][ T6764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.209'. [ 147.316169][ T48] isku 0003:1E7D:319C.0002: unknown main item tag 0x0 [ 147.336130][ T48] isku 0003:1E7D:319C.0002: unknown main item tag 0x0 [ 147.358224][ T30] audit: type=1400 audit(1760253199.544:369): avc: denied { write } for pid=6759 comm="syz.4.207" path="socket:[13383]" dev="sockfs" ino=13383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.359377][ T48] isku 0003:1E7D:319C.0002: unknown main item tag 0x0 [ 147.411241][ T48] isku 0003:1E7D:319C.0002: unknown main item tag 0x0 [ 147.420724][ T6779] syz_tun: left allmulticast mode [ 147.429733][ T5883] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 147.436725][ T48] isku 0003:1E7D:319C.0002: unknown main item tag 0x0 [ 147.449939][ T48] isku 0003:1E7D:319C.0002: unknown main item tag 0x0 [ 147.459671][ T30] audit: type=1400 audit(1760253199.554:370): avc: denied { write } for pid=6759 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.481331][ T48] isku 0003:1E7D:319C.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 147.494527][ T48] isku 0003:1E7D:319C.0002: couldn't init struct isku_device [ 147.499401][ T5883] usb 1-1: USB disconnect, device number 5 [ 147.501924][ T48] isku 0003:1E7D:319C.0002: couldn't install keyboard [ 147.540477][ T48] isku 0003:1E7D:319C.0002: probe with driver isku failed with error -5 [ 147.816651][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 147.904561][ T30] audit: type=1400 audit(1760253200.144:371): avc: denied { bind } for pid=6790 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 148.046209][ T30] audit: type=1400 audit(1760253200.384:372): avc: denied { bind } for pid=6790 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 148.097343][ T30] audit: type=1400 audit(1760253200.434:373): avc: denied { write } for pid=6790 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 148.129956][ T30] audit: type=1400 audit(1760253200.474:374): avc: denied { mount } for pid=6800 comm="syz.3.219" name="/" dev="mqueue" ino=4588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 148.166962][ T5856] usb 5-1: USB disconnect, device number 12 [ 148.195742][ T30] audit: type=1400 audit(1760253200.474:375): avc: denied { watch watch_reads } for pid=6800 comm="syz.3.219" path="/" dev="mqueue" ino=4588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 149.113297][ T30] audit: type=1400 audit(1760253201.455:376): avc: denied { ioctl } for pid=6818 comm="syz.2.224" path="socket:[13454]" dev="sockfs" ino=13454 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 149.289749][ T6829] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 149.296427][ T6829] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 149.305983][ T6829] vhci_hcd vhci_hcd.0: Device attached [ 149.572671][ T5856] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 149.859930][ T5883] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 150.067175][ T6830] vhci_hcd: connection reset by peer [ 150.192508][ T50] vhci_hcd: stop threads [ 150.319689][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 150.336189][ T50] vhci_hcd: release socket [ 150.483966][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.515465][ T50] vhci_hcd: disconnect device [ 150.634693][ T5883] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 150.711188][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.849532][ T6841] netlink: 68 bytes leftover after parsing attributes in process `syz.2.228'. [ 151.024140][ T5883] usb 5-1: config 0 descriptor?? [ 151.533472][ T5883] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 151.912627][ T6825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.040586][ T6825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.348466][ T6861] bridge1: entered promiscuous mode [ 153.374199][ T6861] bridge1: entered allmulticast mode [ 154.781672][ T5901] usb 5-1: USB disconnect, device number 13 [ 154.864958][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'. [ 155.113750][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 155.113765][ T30] audit: type=1400 audit(1760253207.468:378): avc: denied { connect } for pid=6877 comm="syz.0.236" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 155.432310][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.445161][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 155.488894][ T5883] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 155.508963][ T5856] vhci_hcd: vhci_device speed not set [ 155.599982][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 155.609328][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.637013][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.650115][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 155.673104][ T5883] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=bb.f0 [ 155.684774][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.693379][ T9] usb 2-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 155.705312][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.714273][ T5883] usb 3-1: config 0 descriptor?? [ 155.743323][ T30] audit: type=1400 audit(1760253208.078:379): avc: denied { ioctl } for pid=6888 comm="syz.0.240" path="socket:[12521]" dev="sockfs" ino=12521 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.778980][ T5883] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 155.816808][ T30] audit: type=1400 audit(1760253208.168:380): avc: denied { create } for pid=6888 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 155.836993][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.858064][ T30] audit: type=1400 audit(1760253208.168:381): avc: denied { write } for pid=6888 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 155.890485][ T9] usb 2-1: config 0 descriptor?? [ 156.333748][ T5883] usb 3-1: USB disconnect, device number 9 [ 156.390940][ T9] semitek 0003:1EA7:0907.0004: unknown main item tag 0x0 [ 156.402447][ T9] semitek 0003:1EA7:0907.0004: unknown main item tag 0x0 [ 156.426070][ T9] semitek 0003:1EA7:0907.0004: unknown main item tag 0x0 [ 156.451353][ T9] semitek 0003:1EA7:0907.0004: unknown main item tag 0x0 [ 156.463972][ T9] semitek 0003:1EA7:0907.0004: unknown main item tag 0x0 [ 156.558604][ T9] semitek 0003:1EA7:0907.0004: hidraw0: USB HID v0.00 Device [HID 1ea7:0907] on usb-dummy_hcd.1-1/input0 [ 156.820171][ T9] usb 2-1: USB disconnect, device number 6 [ 157.128481][ T30] audit: type=1400 audit(1760253209.469:382): avc: denied { create } for pid=6902 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 157.815580][ T30] audit: type=1400 audit(1760253210.169:383): avc: denied { read write } for pid=6917 comm="syz.0.247" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 158.766107][ T30] audit: type=1400 audit(1760253210.169:384): avc: denied { open } for pid=6917 comm="syz.0.247" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 158.789855][ T30] audit: type=1400 audit(1760253211.120:385): avc: denied { accept } for pid=6908 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 158.811672][ T6926] SQUASHFS error: Failed to read block 0x0: -5 [ 159.163450][ T6927] fuse: Bad value for 'fd' [ 159.179583][ T30] audit: type=1400 audit(1760253211.170:386): avc: denied { mounton } for pid=6909 comm="syz.3.248" path="/syzcgroup/unified/syz3" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 159.180061][ T6926] unable to read squashfs_super_block [ 159.363674][ T48] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 159.530960][ T6930] netlink: 60 bytes leftover after parsing attributes in process `syz.0.250'. [ 159.532131][ T30] audit: type=1400 audit(1760253211.890:387): avc: denied { map } for pid=6929 comm="syz.0.250" path="socket:[13655]" dev="sockfs" ino=13655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 159.668260][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.677157][ T48] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.703151][ T48] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 159.715594][ T48] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 159.742574][ T48] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.762350][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.811042][ T48] usb 2-1: Product: syz [ 159.815257][ T48] usb 2-1: Manufacturer: syz [ 159.826970][ T48] usb 2-1: SerialNumber: syz [ 160.474405][ T48] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 160.795587][ T48] cdc_ncm 2-1:1.0: bind() failure [ 162.566432][ T48] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 162.625342][ T48] cdc_ncm 2-1:1.1: bind() failure [ 162.672767][ T48] usb 2-1: USB disconnect, device number 7 [ 164.274796][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 164.274812][ T30] audit: type=1400 audit(1760253216.622:390): avc: denied { execute } for pid=6955 comm="syz.2.261" path="/58/cpuacct.usage_percpu" dev="tmpfs" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.361071][ T6964] rdma_op ffff88807adb69f0 conn xmit_rdma 0000000000000000 [ 165.077937][ T30] audit: type=1400 audit(1760253217.413:391): avc: denied { read } for pid=6965 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 165.119960][ T30] audit: type=1400 audit(1760253217.423:392): avc: denied { create } for pid=6965 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 165.154052][ T30] audit: type=1400 audit(1760253217.423:393): avc: denied { connect } for pid=6965 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 165.174224][ T30] audit: type=1400 audit(1760253217.433:394): avc: denied { ioctl } for pid=6965 comm="syz.3.263" path="socket:[13871]" dev="sockfs" ino=13871 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 165.323801][ T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 166.083441][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 166.129916][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 166.179438][ T9] usb 4-1: config 106 has an invalid interface number: 8 but max is 0 [ 166.187971][ T9] usb 4-1: config 106 has no interface number 0 [ 166.211310][ T9] usb 4-1: too many endpoints for config 106 interface 8 altsetting 224: 76, using maximum allowed: 30 [ 166.261836][ T6983] overlayfs: failed to resolve './file1': -2 [ 166.483406][ T9] usb 4-1: config 106 interface 8 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 76 [ 166.677058][ T9] usb 4-1: config 106 interface 8 has no altsetting 0 [ 166.698027][ T9] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 166.716799][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.931563][ T30] audit: type=1400 audit(1760253219.264:395): avc: denied { getopt } for pid=6986 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 166.937280][ T9] usb 4-1: Product: syz [ 166.992001][ T9] usb 4-1: Manufacturer: syz [ 167.086817][ T9] usb 4-1: SerialNumber: syz [ 167.614436][ T9] kalmia 4-1:106.8: probe with driver kalmia failed with error -22 [ 167.652726][ T9] usb 4-1: USB disconnect, device number 9 [ 168.021466][ T7010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.272'. [ 168.072743][ T30] audit: type=1400 audit(1760253220.374:396): avc: denied { accept } for pid=7007 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 168.863577][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 169.001401][ T7026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.275020][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 169.284283][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.313087][ T9] usb 4-1: Product: syz [ 169.354048][ T9] usb 4-1: Manufacturer: syz [ 169.374259][ T9] usb 4-1: SerialNumber: syz [ 169.393898][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 169.641305][ T30] audit: type=1400 audit(1760253221.995:397): avc: denied { firmware_load } for pid=5883 comm="kworker/0:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 169.707481][ T5883] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 169.951992][ C0] usb 4-1: ath: unknown panic pattern! [ 170.196102][ T7018] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 170.282029][ T5856] usb 4-1: USB disconnect, device number 10 [ 170.531064][ T30] audit: type=1400 audit(1760253222.795:398): avc: denied { setopt } for pid=7040 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 170.726209][ T30] audit: type=1400 audit(1760253222.885:399): avc: denied { ioctl } for pid=7040 comm="syz.1.281" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 170.805792][ T5883] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 170.818391][ T5883] ath9k_htc: Failed to initialize the device [ 170.836461][ T5856] usb 4-1: ath9k_htc: USB layer deinitialized [ 171.105359][ T30] audit: type=1400 audit(1760253223.466:400): avc: denied { create } for pid=7062 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.141009][ T48] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 171.311023][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 171.324279][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.340101][ T48] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 171.367624][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.426415][ T48] usb 5-1: config 0 descriptor?? [ 171.460803][ T5883] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 172.083297][ T5883] usb 1-1: device descriptor read/64, error -71 [ 172.278163][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.284'. [ 173.091965][ T30] audit: type=1400 audit(1760253225.457:401): avc: denied { ioctl } for pid=7075 comm="syz.1.289" path="socket:[14143]" dev="sockfs" ino=14143 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.179921][ T5883] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 173.312819][ T5883] usb 1-1: device descriptor read/64, error -71 [ 173.330347][ T30] audit: type=1400 audit(1760253225.687:402): avc: denied { getopt } for pid=7078 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.351350][ T30] audit: type=1400 audit(1760253225.697:403): avc: denied { connect } for pid=7078 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 173.379939][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 173.420065][ T5883] usb usb1-port1: attempt power cycle [ 173.531521][ T9] usb 2-1: device descriptor read/64, error -71 [ 173.588607][ T30] audit: type=1400 audit(1760253225.947:404): avc: denied { write } for pid=7083 comm="syz.3.292" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 173.789871][ T5883] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 173.797691][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 173.821914][ T5883] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 173.831285][ T5883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.842459][ T5883] usb 1-1: config 0 has no interface number 0 [ 173.848564][ T5883] usb 1-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 173.862934][ T5883] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 173.873574][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.883896][ T5883] usb 1-1: config 0 descriptor?? [ 173.913891][ T5883] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 173.930287][ T9] usb 2-1: device descriptor read/64, error -71 [ 174.039767][ T9] usb usb2-port1: attempt power cycle [ 174.949351][ T13] usb 1-1: Failed to submit usb control message: -110 [ 174.972288][ T13] usb 1-1: unable to send the bmi data to the device: -110 [ 174.999026][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 175.080938][ T5927] usb 1-1: USB disconnect, device number 8 [ 175.089246][ T13] usb 1-1: unable to get target info from device [ 175.095587][ T13] usb 1-1: could not get target info (-110) [ 175.136714][ T13] usb 1-1: could not probe fw (-110) [ 175.150499][ T9] usb 2-1: device descriptor read/8, error -71 [ 175.205165][ T30] audit: type=1400 audit(1760253227.568:405): avc: denied { bind } for pid=7110 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.329336][ T7111] trusted_key: encrypted_key: insufficient parameters specified [ 175.505807][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 175.562279][ T7111] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20002 [ 175.612669][ T30] audit: type=1400 audit(1760253227.568:406): avc: denied { name_bind } for pid=7110 comm="syz.0.297" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 175.657602][ T30] audit: type=1400 audit(1760253227.648:407): avc: denied { node_bind } for pid=7110 comm="syz.0.297" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 175.688658][ T9] usb 2-1: device descriptor read/8, error -71 [ 175.798935][ T9] usb usb2-port1: unable to enumerate USB device [ 176.089082][ T7119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.898173][ T48] usbhid 5-1:0.0: can't add hid device: -32 [ 176.904190][ T48] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 177.142978][ T48] usb 5-1: USB disconnect, device number 14 [ 177.913226][ T30] audit: type=1400 audit(1760253230.259:408): avc: denied { bind } for pid=7146 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 179.068354][ T30] audit: type=1400 audit(1760253231.440:409): avc: denied { read write } for pid=7165 comm="syz.1.307" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 179.126124][ T30] audit: type=1400 audit(1760253231.440:410): avc: denied { open } for pid=7165 comm="syz.1.307" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 179.212746][ T30] audit: type=1400 audit(1760253231.580:411): avc: denied { name_bind } for pid=7165 comm="syz.1.307" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 179.456670][ T48] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 179.596716][ T48] usb 1-1: device descriptor read/64, error -71 [ 179.780009][ T7191] netlink: 20 bytes leftover after parsing attributes in process `syz.3.311'. [ 179.836691][ T48] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 179.979323][ T48] usb 1-1: device descriptor read/64, error -71 [ 180.106807][ T48] usb usb1-port1: attempt power cycle [ 180.986362][ T30] audit: type=1400 audit(1760253233.361:412): avc: denied { connect } for pid=7198 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.905582][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 183.084939][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 183.202146][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.213468][ T10] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 183.224827][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.253317][ T10] usb 5-1: config 0 descriptor?? [ 184.589797][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.315'. [ 186.673347][ T5901] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 187.875501][ T5901] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 187.885261][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.261361][ T5901] usb 4-1: config 0 descriptor?? [ 188.303790][ T5901] cp210x 4-1:0.0: cp210x converter detected [ 188.551113][ T869] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 188.800829][ T5901] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 188.860564][ T30] audit: type=1400 audit(1760253241.145:413): avc: denied { setopt } for pid=7281 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.883345][ T10] usbhid 5-1:0.0: can't add hid device: -32 [ 188.889379][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 188.903151][ T869] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.946220][ T869] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 189.007264][ T869] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 189.084852][ T869] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.197524][ T869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.226719][ T5876] usb 5-1: USB disconnect, device number 15 [ 189.240814][ T5901] usb 4-1: cp210x converter now attached to ttyUSB0 [ 189.257833][ T869] usb 1-1: Product: syz [ 189.277183][ T7288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7288 comm=syz.2.330 [ 189.285193][ T869] usb 1-1: Manufacturer: syz [ 189.297759][ T30] audit: type=1400 audit(1760253241.665:414): avc: denied { ioctl } for pid=7284 comm="syz.1.329" path="socket:[14546]" dev="sockfs" ino=14546 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.353394][ T869] usb 1-1: SerialNumber: syz [ 189.380755][ T5901] usb 4-1: USB disconnect, device number 11 [ 189.414007][ T5901] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 189.482998][ T5901] cp210x 4-1:0.0: device disconnected [ 189.671784][ T5876] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 189.851757][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 189.882419][ T5876] usb 5-1: unable to get BOS descriptor or descriptor too short [ 189.907851][ T5876] usb 5-1: config 8 has an invalid interface number: 255 but max is 0 [ 189.916376][ T5876] usb 5-1: config 8 has no interface number 0 [ 189.923135][ T5876] usb 5-1: config 8 interface 255 has no altsetting 0 [ 189.936225][ T5876] usb 5-1: string descriptor 0 read error: -22 [ 189.942804][ T5876] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 189.955798][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.012735][ T869] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 190.030396][ T869] cdc_ncm 1-1:1.0: bind() failure [ 190.063334][ T869] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 190.081501][ T869] cdc_ncm 1-1:1.1: bind() failure [ 190.574107][ T7292] Bluetooth: MGMT ver 1.23 [ 191.185136][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 191.191455][ T5811] Bluetooth: hci0: command 0x0406 tx timeout [ 191.197554][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 191.197578][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 191.431079][ T5876] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.4-1, 00:00:00:00:00:00. [ 191.775079][ T30] audit: type=1400 audit(1760253244.146:415): avc: denied { wake_alarm } for pid=7315 comm="syz.0.338" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 191.793071][ T869] usb 1-1: USB disconnect, device number 12 [ 191.845129][ T5876] usb 5-1: USB disconnect, device number 16 [ 191.870053][ T30] audit: type=1400 audit(1760253244.206:416): avc: denied { accept } for pid=7315 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 191.926159][ T7317] delete_channel: no stack [ 192.822639][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 192.990671][ T5876] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 193.042355][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 193.152368][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 193.164508][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.175661][ T5876] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 193.186583][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.200238][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 193.204697][ T5876] usb 1-1: config 0 descriptor?? [ 193.206933][ T10] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 193.227098][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.246283][ T10] usb 5-1: config 0 descriptor?? [ 193.990056][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'. [ 194.329512][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.364933][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.622558][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 194.742511][ T7343] tipc: Enabling of bearer rejected, failed to enable media [ 195.143921][ T30] audit: type=1400 audit(1760253247.518:417): avc: denied { getopt } for pid=7364 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.792813][ T7385] syzkaller0: entered promiscuous mode [ 196.818169][ T7385] syzkaller0: entered allmulticast mode [ 196.870796][ T30] audit: type=1400 audit(1760253249.249:418): avc: denied { bind } for pid=7384 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 196.891449][ T30] audit: type=1400 audit(1760253249.249:419): avc: denied { name_bind } for pid=7384 comm="syz.1.354" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 196.932918][ T30] audit: type=1400 audit(1760253249.249:420): avc: denied { node_bind } for pid=7384 comm="syz.1.354" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 197.223839][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 197.307801][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 197.347994][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 197.383770][ T10] usb 5-1: USB disconnect, device number 17 [ 197.598838][ T7399] process 'syz.4.359' launched '/dev/fd/7' with NULL argv: empty string added [ 197.614015][ T30] audit: type=1400 audit(1760253249.989:421): avc: denied { execute_no_trans } for pid=7395 comm="syz.4.359" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 197.742262][ T30] audit: type=1400 audit(1760253249.989:422): avc: denied { connect } for pid=7395 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 198.013207][ T30] audit: type=1400 audit(1760253250.209:423): avc: denied { accept } for pid=7400 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 198.293662][ T5876] usbhid 1-1:0.0: can't add hid device: -71 [ 198.326862][ T5876] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 198.427335][ T30] audit: type=1400 audit(1760253250.219:424): avc: denied { map } for pid=7400 comm="syz.2.357" path="/proc/298/oom_adj" dev="proc" ino=14731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 198.481442][ T5876] usb 1-1: USB disconnect, device number 13 [ 198.482557][ T7414] cgroup: name respecified [ 198.533959][ T7411] tipc: Started in network mode [ 198.565147][ T7411] tipc: Node identity 5e032bfa6ffc, cluster identity 4711 [ 198.584663][ T30] audit: type=1400 audit(1760253250.959:425): avc: denied { ioctl } for pid=7416 comm="syz.2.363" path="socket:[15450]" dev="sockfs" ino=15450 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 198.620538][ T7411] tipc: Enabled bearer , priority 0 [ 198.660164][ T7422] netlink: 120 bytes leftover after parsing attributes in process `syz.1.364'. [ 198.672734][ T7411] tipc: Resetting bearer [ 198.681030][ T7420] syzkaller0: entered promiscuous mode [ 198.709931][ T7410] tipc: Resetting bearer [ 198.753579][ T7410] tipc: Disabling bearer [ 199.017240][ T5856] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 199.682590][ T7416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.698697][ T5856] usb 2-1: not running at top speed; connect to a high speed hub [ 199.713682][ T5856] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 199.731776][ T5856] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.746607][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.754754][ T5856] usb 2-1: Product: syz [ 199.759335][ T5856] usb 2-1: Manufacturer: syz [ 199.764038][ T5856] usb 2-1: SerialNumber: syz [ 199.772688][ T7422] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 200.134642][ T30] audit: type=1400 audit(1760253252.510:426): avc: denied { ioctl } for pid=7421 comm="syz.1.364" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 200.190818][ T30] audit: type=1400 audit(1760253252.510:427): avc: denied { set_context_mgr } for pid=7421 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 200.220647][ T5856] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 200.236059][ T5856] usb 2-1: USB disconnect, device number 12 [ 200.356276][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 200.606270][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 200.686269][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 201.341659][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.354735][ T10] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 201.364134][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.376706][ T10] usb 4-1: config 0 descriptor?? [ 201.488664][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.522638][ T9] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 201.538251][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.575412][ T9] usb 1-1: config 0 descriptor?? [ 202.520381][ T7478] usb usb5: usbfs: process 7478 (syz.3.372) did not claim interface 0 before use [ 202.539287][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.785749][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.794238][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.804350][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.855096][ T5927] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 202.975309][ T7482] 9pnet_fd: Insufficient options for proto=fd [ 204.487868][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.552267][ T5927] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.563447][ T5927] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 204.566648][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.575238][ T5927] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 204.598813][ T5927] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.624563][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.632991][ T5927] usb 5-1: Product: syz [ 204.637254][ T5927] usb 5-1: Manufacturer: syz [ 204.641885][ T5927] usb 5-1: SerialNumber: syz [ 204.657965][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.732143][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.747912][ T5927] usb 5-1: can't set config #1, error -71 [ 204.781999][ T5927] usb 5-1: USB disconnect, device number 18 [ 204.800282][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.836834][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.872744][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 204.879220][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 205.434105][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 205.440643][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 205.451515][ T9] usb 1-1: USB disconnect, device number 14 [ 205.462033][ T10] usb 4-1: USB disconnect, device number 12 [ 205.752345][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 205.762705][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 205.772037][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.388'. [ 205.803839][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.388'. [ 206.115073][ T30] audit: type=1400 audit(1760253258.493:428): avc: denied { ioctl } for pid=7493 comm="syz.0.386" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x5409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 206.541507][ T7497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.683262][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 206.850787][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 207.490380][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 207.680772][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 207.683673][ T7521] netlink: 'syz.4.392': attribute type 10 has an invalid length. [ 207.703825][ T9] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 207.717364][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.747894][ T9] usb 3-1: Product: syz [ 207.752904][ T9] usb 3-1: Manufacturer: syz [ 207.761362][ T9] usb 3-1: SerialNumber: syz [ 207.873055][ T9] usb 3-1: config 0 descriptor?? [ 207.878819][ T7518] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 207.889280][ T7521] macvlan0: entered promiscuous mode [ 207.914561][ T9] option 3-1:0.0: GSM modem (1-port) converter detected [ 207.925780][ T7521] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 208.124569][ T5927] usb 3-1: USB disconnect, device number 10 [ 208.161152][ T5927] option 3-1:0.0: device disconnected [ 208.382526][ T7532] netlink: 'syz.3.396': attribute type 1 has an invalid length. [ 210.301577][ T869] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 210.455790][ T30] audit: type=1400 audit(1760253262.835:429): avc: denied { setopt } for pid=7557 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 210.577746][ T869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.598875][ T869] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 210.629506][ T869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.671256][ T869] usb 1-1: config 0 descriptor?? [ 211.287135][ T869] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 211.333371][ T869] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input7 [ 211.354416][ T7573] netlink: 'syz.3.408': attribute type 10 has an invalid length. [ 211.395903][ T7573] macvlan0: entered promiscuous mode [ 211.407538][ T7573] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 211.419417][ T7572] tipc: Started in network mode [ 211.425831][ T7572] tipc: Node identity 3a8bc5549654, cluster identity 4711 [ 211.434687][ T7572] tipc: Enabled bearer , priority 0 [ 211.468837][ T7572] syzkaller0: entered promiscuous mode [ 211.486014][ T7572] syzkaller0: entered allmulticast mode [ 211.496062][ T30] audit: type=1400 audit(1760253263.876:430): avc: denied { read } for pid=5168 comm="acpid" name="event4" dev="devtmpfs" ino=2966 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.976632][ T30] audit: type=1400 audit(1760253263.876:431): avc: denied { open } for pid=5168 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2966 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.990491][ T869] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 212.001229][ T30] audit: type=1400 audit(1760253263.876:432): avc: denied { ioctl } for pid=5168 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2966 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 212.044166][ T7572] tipc: Resetting bearer [ 212.071771][ T7570] tipc: Resetting bearer [ 212.167846][ T5896] usb 1-1: USB disconnect, device number 15 [ 212.192588][ T7570] tipc: Disabling bearer [ 212.267726][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'. [ 212.930137][ T5896] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 213.139716][ T869] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 213.141462][ T5896] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.249927][ T5896] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 213.269770][ T5896] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 213.292077][ T5896] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.305454][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.321421][ T5896] usb 5-1: Product: syz [ 213.321946][ T869] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 213.336981][ T5896] usb 5-1: Manufacturer: syz [ 213.343884][ T5896] usb 5-1: SerialNumber: syz [ 213.363000][ T30] audit: type=1400 audit(1760253265.727:433): avc: denied { ioctl } for pid=7597 comm="syz.0.415" path="socket:[15820]" dev="sockfs" ino=15820 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 213.375997][ T869] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 213.439415][ T869] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 213.473329][ T869] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 213.544896][ T869] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 213.617210][ T869] usb 3-1: config 0 interface 0 has no altsetting 0 [ 213.673260][ T869] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 213.685525][ T869] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 213.731753][ T869] usb 3-1: Product: syz [ 213.754900][ T869] usb 3-1: Manufacturer: syz [ 213.779196][ T869] usb 3-1: SerialNumber: syz [ 213.842144][ T869] usb 3-1: config 0 descriptor?? [ 213.870880][ T7582] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 213.880549][ T869] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 213.894675][ T869] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 214.006657][ T5896] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 215.375550][ T5896] cdc_ncm 5-1:1.0: bind() failure [ 215.434296][ T5896] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 215.517200][ T5896] cdc_ncm 5-1:1.1: bind() failure [ 215.538650][ T5896] usb 5-1: USB disconnect, device number 19 [ 215.608058][ T10] usb 3-1: USB disconnect, device number 11 [ 215.636137][ T10] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 215.843710][ T30] audit: type=1400 audit(1760253268.228:434): avc: denied { bind } for pid=7609 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 216.607607][ T30] audit: type=1400 audit(1760253268.988:435): avc: denied { map } for pid=7623 comm="syz.0.424" path="/dev/vbi0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 216.628140][ T869] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 217.642255][ T869] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 217.730761][ T5810] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 217.742310][ T869] usb 4-1: config 1 has no interface number 1 [ 217.759656][ T869] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 217.773951][ T869] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 217.801722][ T869] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.822284][ T869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.832627][ T869] usb 4-1: Product: syz [ 217.836922][ T869] usb 4-1: Manufacturer: syz [ 217.842409][ T869] usb 4-1: SerialNumber: syz [ 218.000636][ T5810] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.012770][ T5810] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 218.025959][ T5810] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 218.049125][ T5810] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.075457][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.129104][ T7643] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.141144][ T30] audit: type=1400 audit(1760253270.529:436): avc: denied { write } for pid=7637 comm="syz.2.429" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 218.215419][ T5810] usb 5-1: Product: syz [ 218.246559][ T5810] usb 5-1: Manufacturer: syz [ 218.273470][ T5810] usb 5-1: SerialNumber: syz [ 218.386410][ T7620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.413196][ T7620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.582958][ T7620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.607575][ T7620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.900690][ T7620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.910453][ T7620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.919413][ T5810] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 218.925451][ T5810] cdc_ncm 5-1:1.0: bind() failure [ 218.956857][ T5810] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 218.966422][ T5810] cdc_ncm 5-1:1.1: bind() failure [ 218.972478][ T869] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 219.022099][ T869] usb 4-1: USB disconnect, device number 13 [ 219.078358][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.483429][ T7657] overlayfs: failed to resolve '/ç': -2 [ 220.075090][ T869] usb 5-1: USB disconnect, device number 20 [ 221.731928][ T7688] input: syz1 as /devices/virtual/input/input8 [ 222.180876][ T7691] FAULT_INJECTION: forcing a failure. [ 222.180876][ T7691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.251884][ T7691] CPU: 0 UID: 0 PID: 7691 Comm: syz.3.443 Not tainted syzkaller #0 PREEMPT(full) [ 222.251910][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 222.251920][ T7691] Call Trace: [ 222.251927][ T7691] [ 222.251934][ T7691] dump_stack_lvl+0x16c/0x1f0 [ 222.251961][ T7691] should_fail_ex+0x512/0x640 [ 222.251987][ T7691] _copy_to_user+0x32/0xd0 [ 222.252011][ T7691] simple_read_from_buffer+0xcb/0x170 [ 222.252036][ T7691] proc_fail_nth_read+0x197/0x240 [ 222.252062][ T7691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.252090][ T7691] ? rw_verify_area+0xcf/0x6c0 [ 222.252109][ T7691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.252134][ T7691] vfs_read+0x1e4/0xcf0 [ 222.252158][ T7691] ? __pfx___mutex_lock+0x10/0x10 [ 222.252181][ T7691] ? __pfx_vfs_read+0x10/0x10 [ 222.252209][ T7691] ? __fget_files+0x20e/0x3c0 [ 222.252241][ T7691] ksys_read+0x12a/0x250 [ 222.252261][ T7691] ? __pfx_ksys_read+0x10/0x10 [ 222.252291][ T7691] do_syscall_64+0xcd/0xfa0 [ 222.252313][ T7691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.252331][ T7691] RIP: 0033:0x7fef9158d8dc [ 222.252345][ T7691] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 222.252362][ T7691] RSP: 002b:00007fef924cd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.252379][ T7691] RAX: ffffffffffffffda RBX: 00007fef917e5fa0 RCX: 00007fef9158d8dc [ 222.252391][ T7691] RDX: 000000000000000f RSI: 00007fef924cd0a0 RDI: 0000000000000004 [ 222.252401][ T7691] RBP: 00007fef924cd090 R08: 0000000000000000 R09: 0000000000000000 [ 222.252411][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.252421][ T7691] R13: 00007fef917e6038 R14: 00007fef917e5fa0 R15: 00007ffc54791d48 [ 222.252446][ T7691] [ 222.609682][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 222.625696][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'. [ 222.678006][ T7698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7698 comm=syz.3.446 [ 222.691358][ T7698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.446'. [ 222.896110][ T30] audit: type=1400 audit(1760253275.182:437): avc: denied { ioctl } for pid=7705 comm="syz.1.449" path="socket:[16013]" dev="sockfs" ino=16013 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.081752][ T10] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 223.315289][ T10] usb 5-1: too many configurations: 129, using maximum allowed: 8 [ 223.335303][ T10] usb 5-1: config index 0 descriptor too short (expected 61476, got 36) [ 223.343641][ T10] usb 5-1: config 224 has an invalid descriptor of length 255, skipping remainder of the config [ 223.454876][ T5901] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 223.654577][ T10] usb 5-1: config 224 has no interfaces? [ 223.672540][ T10] usb 5-1: config index 1 descriptor too short (expected 61476, got 36) [ 223.704566][ T10] usb 5-1: config 224 has an invalid descriptor of length 255, skipping remainder of the config [ 223.714593][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 223.734553][ T10] usb 5-1: config 224 has no interfaces? [ 223.735139][ T5901] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.745370][ T10] usb 5-1: config index 2 descriptor too short (expected 61476, got 36) [ 223.782731][ T10] usb 5-1: config 224 has an invalid descriptor of length 255, skipping remainder of the config [ 223.784534][ T5901] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.814886][ T10] usb 5-1: config 224 has no interfaces? [ 223.827780][ T10] usb 5-1: config index 3 descriptor too short (expected 61476, got 36) [ 223.844973][ T5901] usb 1-1: config 1 interface 0 has no altsetting 0 [ 223.847831][ T10] usb 5-1: config 224 has an invalid descriptor of length 255, skipping remainder of the config [ 223.864661][ T5901] usb 1-1: string descriptor 0 read error: -22 [ 223.880633][ T5901] usb 1-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 223.948593][ T7724] netlink: 24 bytes leftover after parsing attributes in process `syz.3.455'. [ 223.979805][ T30] audit: type=1400 audit(1760253276.332:438): avc: denied { mount } for pid=7722 comm="syz.3.455" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 224.046417][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.147072][ T869] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 224.330882][ T869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 220, changing to 11 [ 225.719593][ T10] usb 5-1: config 224 has no interfaces? [ 225.738584][ T10] usb 5-1: unable to read config index 4 descriptor/start: -71 [ 225.753531][ T10] usb 5-1: can't read configurations, error -71 [ 225.767609][ T869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33763, setting to 1024 [ 225.779771][ T869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.794664][ T869] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.805157][ T869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.813643][ T5901] usbhid 1-1:1.0: can't add hid device: -71 [ 225.820492][ T5901] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 225.831435][ T5901] usb 1-1: USB disconnect, device number 16 [ 225.847228][ T869] usb 2-1: config 0 descriptor?? [ 226.072627][ T30] audit: type=1400 audit(1760253278.453:439): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 226.517318][ T869] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 226.570918][ T869] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 226.637872][ T869] usb 2-1: USB disconnect, device number 13 [ 226.678487][ T7733] nvme_fabrics: missing parameter 'transport=%s' [ 226.690377][ T7733] nvme_fabrics: missing parameter 'nqn=%s' [ 226.713794][ T7737] fido_id[7737]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 226.757276][ T30] audit: type=1400 audit(1760253279.144:440): avc: denied { append } for pid=7738 comm="syz.2.459" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 226.858738][ T30] audit: type=1400 audit(1760253279.144:441): avc: denied { open } for pid=7738 comm="syz.2.459" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 226.882831][ T30] audit: type=1400 audit(1760253279.144:442): avc: denied { ioctl } for pid=7738 comm="syz.2.459" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x4602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 226.908035][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.959199][ T30] audit: type=1400 audit(1760253279.144:443): avc: denied { map } for pid=7738 comm="syz.2.459" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 226.995001][ T30] audit: type=1400 audit(1760253279.144:444): avc: denied { read } for pid=7738 comm="syz.2.459" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 227.019351][ T30] audit: type=1400 audit(1760253279.174:445): avc: denied { setopt } for pid=7738 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 227.048430][ T7744] tipc: Enabled bearer , priority 0 [ 227.063986][ T7744] syzkaller0: entered promiscuous mode [ 227.072934][ T7744] syzkaller0: entered allmulticast mode [ 227.095014][ T7744] tipc: Resetting bearer [ 227.102087][ T7743] tipc: Resetting bearer [ 227.178032][ T7743] tipc: Disabling bearer [ 228.426626][ T7770] netlink: 'syz.3.470': attribute type 1 has an invalid length. [ 228.446599][ T7770] netlink: 'syz.3.470': attribute type 1 has an invalid length. [ 228.456687][ T7770] netlink: 216 bytes leftover after parsing attributes in process `syz.3.470'. [ 228.503817][ T30] audit: type=1400 audit(1760253280.894:446): avc: denied { sqpoll } for pid=7758 comm="syz.4.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 228.542554][ T5932] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 228.792152][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 229.316568][ T5932] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 229.605678][ T5932] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 229.683990][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.743209][ T5932] usb 1-1: Product: syz [ 229.849751][ T5932] usb 1-1: Manufacturer: syz [ 229.860285][ T5932] usb 1-1: SerialNumber: syz [ 229.883927][ T5932] usb 1-1: config 0 descriptor?? [ 229.894402][ T5932] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 229.905501][ T5932] usb 1-1: Detected FT232R [ 231.078560][ T5932] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 231.449242][ T30] audit: type=1400 audit(1760253283.836:447): avc: denied { block_suspend } for pid=7803 comm="syz.3.479" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 231.470851][ T7804] FAULT_INJECTION: forcing a failure. [ 231.470851][ T7804] name failslab, interval 1, probability 0, space 0, times 0 [ 231.539116][ T5932] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 231.560656][ T7804] CPU: 0 UID: 0 PID: 7804 Comm: syz.3.479 Not tainted syzkaller #0 PREEMPT(full) [ 231.560680][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 231.560690][ T7804] Call Trace: [ 231.560696][ T7804] [ 231.560702][ T7804] dump_stack_lvl+0x16c/0x1f0 [ 231.560728][ T7804] should_fail_ex+0x512/0x640 [ 231.560749][ T7804] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 231.560772][ T7804] should_failslab+0xc2/0x120 [ 231.560798][ T7804] kmem_cache_alloc_noprof+0x75/0x6e0 [ 231.560818][ T7804] ? do_epoll_ctl+0x1170/0x3790 [ 231.560847][ T7804] ? do_epoll_ctl+0x1170/0x3790 [ 231.560870][ T7804] do_epoll_ctl+0x1170/0x3790 [ 231.560896][ T7804] ? ksys_write+0x190/0x250 [ 231.560926][ T7804] ? __pfx_do_epoll_ctl+0x10/0x10 [ 231.560948][ T7804] ? find_held_lock+0x2b/0x80 [ 231.560964][ T7804] ? __might_fault+0xe3/0x190 [ 231.560983][ T7804] ? __might_fault+0xe3/0x190 [ 231.561013][ T7804] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 231.561036][ T7804] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 231.561062][ T7804] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 231.561095][ T7804] do_syscall_64+0xcd/0xfa0 [ 231.561117][ T7804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.561135][ T7804] RIP: 0033:0x7fef9158eec9 [ 231.561148][ T7804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.561165][ T7804] RSP: 002b:00007fef924cd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 231.561182][ T7804] RAX: ffffffffffffffda RBX: 00007fef917e5fa0 RCX: 00007fef9158eec9 [ 231.561193][ T7804] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000005 [ 231.561203][ T7804] RBP: 00007fef924cd090 R08: 0000000000000000 R09: 0000000000000000 [ 231.561213][ T7804] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 231.561223][ T7804] R13: 00007fef917e6038 R14: 00007fef917e5fa0 R15: 00007ffc54791d48 [ 231.561249][ T7804] [ 232.633885][ T7765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.468'. [ 232.748879][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 232.977228][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 233.092884][ T5932] usb 1-1: USB disconnect, device number 17 [ 233.129503][ T5932] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 233.148061][ T5932] ftdi_sio 1-1:0.0: device disconnected [ 233.199971][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 233.215537][ T30] audit: type=1400 audit(1760253285.607:448): avc: denied { write } for pid=7825 comm="syz.4.487" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 233.216306][ T7826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.272109][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 233.290378][ T30] audit: type=1400 audit(1760253285.607:449): avc: denied { open } for pid=7825 comm="syz.4.487" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 233.316308][ T30] audit: type=1400 audit(1760253285.607:450): avc: denied { mounton } for pid=7825 comm="syz.4.487" path="/syzcgroup/net/syz4/cgroup.procs" dev="cgroup" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 233.340757][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.364067][ T30] audit: type=1400 audit(1760253285.747:451): avc: denied { ioctl } for pid=7825 comm="syz.4.487" path="socket:[16327]" dev="sockfs" ino=16327 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 233.429694][ T10] usb 2-1: config 0 has no interface number 0 [ 233.441107][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 233.450419][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.458402][ T10] usb 2-1: Product: syz [ 233.466549][ T10] usb 2-1: Manufacturer: syz [ 233.472718][ T10] usb 2-1: SerialNumber: syz [ 233.546005][ T10] usb 2-1: config 0 descriptor?? [ 233.655454][ T10] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 233.816622][ T10] usb 2-1: selecting invalid altsetting 1 [ 233.920168][ T7815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.481'. [ 233.940338][ T10] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 233.981096][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 234.548632][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 234.558836][ T10] usb 2-1: media controller created [ 234.796718][ T30] audit: type=1400 audit(1760253286.997:452): avc: denied { append } for pid=7835 comm="syz.3.488" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 234.840063][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.923828][ T30] audit: type=1400 audit(1760253287.027:453): avc: denied { write } for pid=7835 comm="syz.3.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 234.980047][ T10] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 234.987170][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 235.000862][ T10] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 235.111572][ T30] audit: type=1400 audit(1760253287.508:454): avc: denied { read append } for pid=7845 comm="syz.2.491" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 235.312942][ T7858] overlay: Bad value for 'workdir' [ 235.760911][ T30] audit: type=1400 audit(1760253287.508:455): avc: denied { open } for pid=7845 comm="syz.2.491" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 235.778815][ T10] usb 2-1: USB disconnect, device number 14 [ 235.948555][ T869] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 236.032468][ T7857] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 236.043387][ T7857] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 236.108712][ T869] usb 1-1: Using ep0 maxpacket: 16 [ 236.127376][ T7857] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.144362][ T7857] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 236.151113][ T869] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.164691][ T869] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.189325][ T869] usb 1-1: config 1 interface 0 has no altsetting 0 [ 236.190187][ T7857] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.205040][ T7857] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 236.214197][ T869] usb 1-1: string descriptor 0 read error: -22 [ 236.224219][ T869] usb 1-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 236.234309][ T869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.264367][ T7870] fuse: Bad value for 'fd' [ 236.289732][ T7857] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 236.298149][ T7857] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 236.306742][ T7857] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 236.320531][ T7857] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 236.339384][ T7857] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 236.420055][ T30] audit: type=1400 audit(1760253288.818:456): avc: denied { accept } for pid=7873 comm="syz.2.499" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 236.440136][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.977051][ T869] usbhid 1-1:1.0: can't add hid device: -71 [ 236.988081][ T869] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 237.005695][ T869] usb 1-1: USB disconnect, device number 18 [ 237.180388][ T7881] netlink: 'syz.2.500': attribute type 2 has an invalid length. [ 237.671866][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 237.799612][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 238.228629][ T7900] netlink: 20 bytes leftover after parsing attributes in process `syz.4.505'. [ 238.725292][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 238.725299][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 238.725340][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 238.731392][ T5133] Bluetooth: hci3: command 0x0406 tx timeout [ 238.964328][ T7900] syz.4.505 (7900) used greatest stack depth: 19176 bytes left [ 239.200256][ T7910] warning: `syz.3.507' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 239.211714][ T30] audit: type=1400 audit(1760253291.600:457): avc: denied { bind } for pid=7908 comm="syz.3.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 239.746932][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'. [ 239.878804][ T5821] Bluetooth: hci0: command 0x0406 tx timeout [ 240.336231][ T5876] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 240.436326][ T869] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 240.538685][ T5876] usb 2-1: device descriptor read/64, error -71 [ 240.766162][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 240.772312][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 240.778598][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 240.789132][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 241.098652][ T869] usb 3-1: device descriptor read/64, error -71 [ 241.361506][ T30] audit: type=1400 audit(1760253293.751:458): avc: denied { mount } for pid=7937 comm="syz.4.514" name="/" dev="rpc_pipefs" ino=16816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 241.387032][ T869] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 241.555624][ T869] usb 3-1: device descriptor read/64, error -71 [ 241.668314][ T869] usb usb3-port1: attempt power cycle [ 241.965457][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 242.065598][ T869] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 242.180968][ T869] usb 3-1: device descriptor read/8, error -71 [ 243.013884][ T5133] Bluetooth: hci4: command 0x0c1a tx timeout [ 243.020150][ T869] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 243.035033][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 243.041644][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.066058][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.144979][ T869] usb 3-1: device descriptor read/8, error -71 [ 243.473725][ T10] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 243.482876][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.493643][ T869] usb usb3-port1: unable to enumerate USB device [ 243.495008][ T10] usb 4-1: config 0 descriptor?? [ 243.624604][ T5876] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 243.708531][ T7985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.734872][ T7985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.858405][ T10] corsair 0003:1B1C:1B02.0007: item fetching failed at offset 4/5 [ 243.866203][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.882670][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.884789][ T10] corsair 0003:1B1C:1B02.0007: parse failed [ 243.921649][ T5876] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 243.942444][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.985556][ T5876] usb 2-1: config 0 descriptor?? [ 244.427234][ T5876] ortek 0003:1223:3F07.0008: unknown main item tag 0x0 [ 244.502628][ T5876] ortek 0003:1223:3F07.0008: unknown main item tag 0x0 [ 244.502687][ T10] corsair 0003:1B1C:1B02.0007: probe with driver corsair failed with error -22 [ 244.522932][ T5876] ortek 0003:1223:3F07.0008: unknown main item tag 0x0 [ 244.549259][ T10] usb 4-1: USB disconnect, device number 14 [ 244.559040][ T5876] ortek 0003:1223:3F07.0008: unknown main item tag 0x0 [ 244.578832][ T5876] ortek 0003:1223:3F07.0008: unknown main item tag 0x0 [ 244.613216][ T5876] ortek 0003:1223:3F07.0008: unknown main item tag 0x0 [ 244.624892][ T5876] ortek 0003:1223:3F07.0008: unknown main item tag 0x0 [ 244.647427][ T5876] ortek 0003:1223:3F07.0008: unknown main item tag 0x0 [ 244.658027][ T5876] ortek 0003:1223:3F07.0008: unknown main item tag 0x0 [ 244.687866][ T5876] ortek 0003:1223:3F07.0008: unknown main item tag 0x0 [ 244.830484][ T5876] ortek 0003:1223:3F07.0008: hidraw0: USB HID v0.00 Device [HID 1223:3f07] on usb-dummy_hcd.1-1/input0 [ 245.075989][ T5133] Bluetooth: hci4: command 0x0c1a tx timeout [ 245.380930][ T30] audit: type=1400 audit(1760253297.743:459): avc: denied { write } for pid=8005 comm="syz.3.532" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 246.630460][ T5901] usb 2-1: USB disconnect, device number 17 [ 247.141251][ T5901] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 247.339553][ T30] audit: type=1400 audit(1760253299.734:460): avc: denied { ioctl } for pid=8038 comm="syz.1.541" path="socket:[17037]" dev="sockfs" ino=17037 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 247.372735][ T5901] usb 3-1: device descriptor read/64, error -71 [ 247.384874][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 247.488470][ T30] audit: type=1400 audit(1760253299.884:461): avc: denied { read } for pid=8031 comm="syz.0.540" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 247.576175][ T30] audit: type=1400 audit(1760253299.884:462): avc: denied { open } for pid=8031 comm="syz.0.540" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 247.614626][ T5901] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 247.618387][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 247.642779][ T30] audit: type=1400 audit(1760253299.884:463): avc: denied { write } for pid=8031 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 247.653411][ T10] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 247.695860][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.721569][ T10] usb 5-1: config 0 has no interface number 0 [ 247.790996][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 247.800217][ T30] audit: type=1400 audit(1760253299.904:464): avc: denied { ioctl } for pid=8031 comm="syz.0.540" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 247.826765][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.836004][ T10] usb 5-1: Product: syz [ 247.840178][ T10] usb 5-1: Manufacturer: syz [ 247.845690][ T5901] usb 3-1: device descriptor read/64, error -71 [ 247.845722][ T10] usb 5-1: SerialNumber: syz [ 247.872861][ T10] usb 5-1: config 0 descriptor?? [ 248.004450][ T5901] usb usb3-port1: attempt power cycle [ 248.103319][ T10] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 248.110658][ T10] uvcvideo 5-1:0.105: No valid video chain found. [ 248.132469][ T8046] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 248.144929][ T8046] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 248.175740][ T10] usb 5-1: USB disconnect, device number 23 [ 248.230489][ T30] audit: type=1400 audit(1760253300.624:465): avc: denied { read write } for pid=8047 comm="syz.1.543" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 248.392369][ T5901] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 248.745890][ T30] audit: type=1400 audit(1760253300.624:466): avc: denied { open } for pid=8047 comm="syz.1.543" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 248.820313][ T5901] usb 3-1: device descriptor read/8, error -71 [ 248.906147][ T30] audit: type=1400 audit(1760253300.664:467): avc: denied { append } for pid=8047 comm="syz.1.543" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 249.076881][ T8055] FAULT_INJECTION: forcing a failure. [ 249.076881][ T8055] name failslab, interval 1, probability 0, space 0, times 0 [ 249.089678][ T8055] CPU: 1 UID: 0 PID: 8055 Comm: syz.2.545 Not tainted syzkaller #0 PREEMPT(full) [ 249.089694][ T8055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.089701][ T8055] Call Trace: [ 249.089706][ T8055] [ 249.089710][ T8055] dump_stack_lvl+0x16c/0x1f0 [ 249.089726][ T8055] should_fail_ex+0x512/0x640 [ 249.089741][ T8055] should_failslab+0xc2/0x120 [ 249.089757][ T8055] kmem_cache_alloc_noprof+0x75/0x6e0 [ 249.089770][ T8055] ? skb_clone+0x190/0x3f0 [ 249.089785][ T8055] ? skb_clone+0x190/0x3f0 [ 249.089796][ T8055] skb_clone+0x190/0x3f0 [ 249.089809][ T8055] neigh_probe+0x5d/0x110 [ 249.089821][ T8055] __neigh_event_send+0xac5/0x13c0 [ 249.089839][ T8055] neigh_resolve_output+0x56b/0x940 [ 249.089853][ T8055] ? nf_hook+0x48d/0x780 [ 249.089869][ T8055] ? __pfx____neigh_create+0x10/0x10 [ 249.089887][ T8055] ip6_finish_output2+0xad1/0x1cf0 [ 249.089907][ T8055] __ip6_finish_output+0x3cd/0x1010 [ 249.089925][ T8055] ip6_output+0x253/0x710 [ 249.089942][ T8055] ip6_local_out+0xd1/0x4d0 [ 249.089956][ T8055] ip6_send_skb+0x112/0x460 [ 249.089973][ T8055] udp_v6_send_skb+0x96f/0x1910 [ 249.089989][ T8055] udpv6_sendmsg+0x23b1/0x2d30 [ 249.090001][ T8055] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 249.090020][ T8055] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 249.090031][ T8055] ? avc_has_perm_noaudit+0x149/0x3b0 [ 249.090044][ T8055] ? avc_has_perm+0x144/0x1f0 [ 249.090066][ T8055] ? __import_iovec+0x1dd/0x650 [ 249.090081][ T8055] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 249.090093][ T8055] ? inet6_sendmsg+0x105/0x140 [ 249.090106][ T8055] inet6_sendmsg+0x105/0x140 [ 249.090118][ T8055] ____sys_sendmsg+0x705/0xc70 [ 249.090134][ T8055] ? copy_msghdr_from_user+0x10a/0x160 [ 249.090146][ T8055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.090164][ T8055] ? __pfx__kstrtoull+0x10/0x10 [ 249.090183][ T8055] ___sys_sendmsg+0x134/0x1d0 [ 249.090196][ T8055] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.090213][ T8055] ? find_held_lock+0x2b/0x80 [ 249.090231][ T8055] __sys_sendmmsg+0x200/0x420 [ 249.090245][ T8055] ? __pfx___sys_sendmmsg+0x10/0x10 [ 249.090261][ T8055] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 249.090280][ T8055] ? fput+0x9b/0xd0 [ 249.090289][ T8055] ? ksys_write+0x1ac/0x250 [ 249.090302][ T8055] ? __pfx_ksys_write+0x10/0x10 [ 249.090317][ T8055] __x64_sys_sendmmsg+0x9c/0x100 [ 249.090329][ T8055] ? lockdep_hardirqs_on+0x7c/0x110 [ 249.090341][ T8055] do_syscall_64+0xcd/0xfa0 [ 249.090354][ T8055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.090365][ T8055] RIP: 0033:0x7fce8b98eec9 [ 249.090374][ T8055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.090384][ T8055] RSP: 002b:00007fce89bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 249.090395][ T8055] RAX: ffffffffffffffda RBX: 00007fce8bbe6090 RCX: 00007fce8b98eec9 [ 249.090406][ T8055] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000006 [ 249.090412][ T8055] RBP: 00007fce89bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 249.090418][ T8055] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.090425][ T8055] R13: 00007fce8bbe6128 R14: 00007fce8bbe6090 R15: 00007ffda67375b8 [ 249.090438][ T8055] [ 250.851128][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 251.033334][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 251.046284][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 251.060142][ T10] usb 2-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 251.071134][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.079200][ T10] usb 2-1: Product: syz [ 251.083608][ T10] usb 2-1: Manufacturer: syz [ 251.088327][ T10] usb 2-1: SerialNumber: syz [ 251.119233][ T10] usb 2-1: config 0 descriptor?? [ 251.138409][ T8074] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 251.145957][ T8074] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 251.166301][ T10] option 2-1:0.0: GSM modem (1-port) converter detected [ 251.191151][ T10] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 251.873884][ T5932] usb 2-1: USB disconnect, device number 18 [ 252.034940][ T5932] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 252.125101][ T5932] option 2-1:0.0: device disconnected [ 252.430319][ T10] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 252.461131][ T8093] Invalid option length (772) for dns_resolver key [ 252.660966][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 252.735285][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.745576][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 252.755150][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.864247][ T10] usb 1-1: config 0 descriptor?? [ 253.062876][ T8105] netlink: 20 bytes leftover after parsing attributes in process `syz.3.560'. [ 254.179196][ T10] hid_parser_main: 59 callbacks suppressed [ 254.179223][ T10] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 254.460807][ T10] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 254.491664][ T10] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 254.498597][ T10] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 254.505727][ T10] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 254.523287][ T10] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 254.541488][ T10] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 254.891078][ T10] isku 0003:1E7D:319C.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 254.919915][ T10] isku 0003:1E7D:319C.0009: couldn't init struct isku_device [ 254.972634][ T10] isku 0003:1E7D:319C.0009: couldn't install keyboard [ 255.025165][ T10] isku 0003:1E7D:319C.0009: probe with driver isku failed with error -32 [ 255.086422][ T10] usb 1-1: USB disconnect, device number 19 [ 255.165467][ T8117] fido_id[8117]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 255.619138][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.625865][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.727511][ T8127] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2566 sclass=netlink_xfrm_socket pid=8127 comm=syz.1.566 [ 255.741860][ T30] audit: type=1400 audit(1760253308.148:468): avc: denied { getopt } for pid=8122 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 255.769866][ T5932] IPVS: starting estimator thread 0... [ 255.879368][ T8128] IPVS: using max 40 ests per chain, 96000 per kthread [ 257.496589][ T8150] syzkaller0: entered promiscuous mode [ 257.515327][ T8150] syzkaller0: entered allmulticast mode [ 257.640998][ T8158] FAULT_INJECTION: forcing a failure. [ 257.640998][ T8158] name failslab, interval 1, probability 0, space 0, times 0 [ 257.654581][ T8158] CPU: 0 UID: 0 PID: 8158 Comm: syz.4.576 Not tainted syzkaller #0 PREEMPT(full) [ 257.654606][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 257.654616][ T8158] Call Trace: [ 257.654621][ T8158] [ 257.654628][ T8158] dump_stack_lvl+0x16c/0x1f0 [ 257.654655][ T8158] should_fail_ex+0x512/0x640 [ 257.654675][ T8158] ? fs_reclaim_acquire+0xae/0x150 [ 257.654701][ T8158] should_failslab+0xc2/0x120 [ 257.654726][ T8158] kmem_cache_alloc_noprof+0x75/0x6e0 [ 257.654745][ T8158] ? __pfx_map_id_range_down+0x10/0x10 [ 257.654771][ T8158] ? security_inode_alloc+0x3b/0x2b0 [ 257.654798][ T8158] ? security_inode_alloc+0x3b/0x2b0 [ 257.654818][ T8158] security_inode_alloc+0x3b/0x2b0 [ 257.654840][ T8158] inode_init_always_gfp+0xce4/0x1030 [ 257.654868][ T8158] alloc_inode+0x86/0x240 [ 257.654885][ T8158] new_inode+0x22/0x1c0 [ 257.654904][ T8158] proc_pid_make_inode+0x22/0x160 [ 257.654923][ T8158] proc_pident_instantiate+0x85/0x310 [ 257.654945][ T8158] proc_pident_lookup+0x1f5/0x270 [ 257.654969][ T8158] __lookup_slow+0x251/0x460 [ 257.654987][ T8158] ? __pfx___lookup_slow+0x10/0x10 [ 257.655022][ T8158] ? lookup_fast+0x156/0x610 [ 257.655040][ T8158] ? __pfx_proc_pid_permission+0x10/0x10 [ 257.655067][ T8158] walk_component+0x353/0x5b0 [ 257.655090][ T8158] link_path_walk+0x627/0xe20 [ 257.655118][ T8158] path_openat+0x1b0/0x2cb0 [ 257.655147][ T8158] ? __pfx_path_openat+0x10/0x10 [ 257.655176][ T8158] do_filp_open+0x20b/0x470 [ 257.655200][ T8158] ? __pfx_do_filp_open+0x10/0x10 [ 257.655239][ T8158] ? __pfx_kfree_link+0x10/0x10 [ 257.655266][ T8158] ? alloc_fd+0x471/0x7d0 [ 257.655297][ T8158] do_sys_openat2+0x11b/0x1d0 [ 257.655315][ T8158] ? __pfx_do_sys_openat2+0x10/0x10 [ 257.655342][ T8158] __x64_sys_openat+0x174/0x210 [ 257.655359][ T8158] ? __pfx___x64_sys_openat+0x10/0x10 [ 257.655387][ T8158] do_syscall_64+0xcd/0xfa0 [ 257.655411][ T8158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.655429][ T8158] RIP: 0033:0x7fac1578d710 [ 257.655444][ T8158] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 257.655461][ T8158] RSP: 002b:00007fac16673f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 257.655479][ T8158] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fac1578d710 [ 257.655490][ T8158] RDX: 0000000000000002 RSI: 00007fac16673fa0 RDI: 00000000ffffff9c [ 257.655501][ T8158] RBP: 00007fac16673fa0 R08: 0000000000000000 R09: 0000000000000000 [ 257.655511][ T8158] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 257.655522][ T8158] R13: 00007fac159e6128 R14: 00007fac159e6090 R15: 00007ffc1c0e31c8 [ 257.655551][ T8158] [ 257.920278][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.475536][ T8184] netlink: 52 bytes leftover after parsing attributes in process `syz.1.583'. [ 259.709359][ T8185] overlay: Unknown parameter 'fowner<00000000000000000000' [ 260.616136][ T5932] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 260.736102][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 260.816022][ T5932] usb 1-1: device descriptor read/64, error -71 [ 260.885988][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 260.897085][ T9] usb 5-1: config index 0 descriptor too short (expected 6189, got 45) [ 260.905488][ T9] usb 5-1: config 76 has too many interfaces: 70, using maximum allowed: 32 [ 260.931640][ T9] usb 5-1: config 76 has an invalid descriptor of length 141, skipping remainder of the config [ 261.060044][ T9] usb 5-1: config 76 has 0 interfaces, different from the descriptor's value: 70 [ 261.092636][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 261.113050][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.177406][ T5932] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 261.335742][ T5932] usb 1-1: device descriptor read/64, error -71 [ 261.451055][ T5932] usb usb1-port1: attempt power cycle [ 263.284633][ T9] usb 5-1: string descriptor 0 read error: -71 [ 263.339483][ T8224] Invalid option length (772) for dns_resolver key [ 263.558945][ T9] usb 5-1: USB disconnect, device number 24 [ 264.284979][ T8234] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 264.291141][ T8234] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 264.297771][ T8234] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 264.305887][ T8234] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 264.311907][ T8234] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 264.317966][ T8234] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 264.396675][ T8237] tipc: Enabling of bearer rejected, failed to enable media [ 266.183535][ T5133] Bluetooth: hci0: command 0x0406 tx timeout [ 266.429888][ T5133] Bluetooth: hci4: command 0x0c1a tx timeout [ 266.436129][ T5133] Bluetooth: hci3: command 0x0406 tx timeout [ 266.442129][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 266.449412][ T5133] Bluetooth: hci1: command 0x0406 tx timeout [ 267.411661][ T5883] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 267.592748][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 267.631141][ T5883] usb 3-1: config index 0 descriptor too short (expected 6189, got 45) [ 267.670089][ T5883] usb 3-1: config 76 has too many interfaces: 70, using maximum allowed: 32 [ 267.862378][ T5883] usb 3-1: config 76 has an invalid descriptor of length 141, skipping remainder of the config [ 267.946779][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 268.025047][ T5883] usb 3-1: config 76 has 0 interfaces, different from the descriptor's value: 70 [ 268.043374][ T5883] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 268.062447][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.252253][ T9] usb 4-1: device descriptor read/64, error -71 [ 268.444372][ T8304] 9pnet_fd: Insufficient options for proto=fd [ 268.502207][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 268.695364][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 269.321749][ T9] usb 4-1: device descriptor read/64, error -71 [ 269.435688][ T9] usb usb4-port1: attempt power cycle [ 269.749626][ T8312] tipc: Started in network mode [ 269.771649][ T8312] tipc: Node identity 72cd787fc7c2, cluster identity 4711 [ 269.799965][ T8312] tipc: Enabled bearer , priority 0 [ 269.891168][ T8314] syzkaller0: entered promiscuous mode [ 269.896808][ T8314] syzkaller0: entered allmulticast mode [ 269.926481][ T8312] tipc: Resetting bearer [ 269.960917][ T8311] tipc: Resetting bearer [ 270.210783][ T8311] tipc: Disabling bearer [ 270.355054][ T5883] usb 3-1: string descriptor 0 read error: -71 [ 270.381618][ T5883] usb 3-1: USB disconnect, device number 20 [ 271.344596][ T8329] Invalid option length (772) for dns_resolver key [ 272.835917][ T8334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.626456][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.627'. [ 277.339763][ T5883] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 277.727929][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 277.908869][ T5883] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.929971][ T5883] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.956252][ T5883] usb 1-1: config 1 interface 0 has no altsetting 0 [ 278.010277][ T5883] usb 1-1: string descriptor 0 read error: -22 [ 278.016587][ T5883] usb 1-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 278.026873][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.874418][ T5883] usbhid 1-1:1.0: can't add hid device: -71 [ 279.903869][ T5883] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 279.939742][ T5883] usb 1-1: USB disconnect, device number 23 [ 280.742012][ T8455] vlan2: entered allmulticast mode [ 280.891494][ T5883] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 281.138332][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.472990][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.510078][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 281.607553][ T5883] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.825016][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.854125][ T5883] usb 5-1: config 0 descriptor?? [ 282.201999][ T30] audit: type=1400 audit(1760253334.621:469): avc: denied { listen } for pid=8450 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 282.230533][ T30] audit: type=1400 audit(1760253334.641:470): avc: denied { connect } for pid=8450 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 282.528013][ T30] audit: type=1804 audit(1760253334.671:471): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.650" name="/newroot/130/file0" dev="tmpfs" ino=701 res=1 errno=0 [ 282.562850][ T5883] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 282.597068][ T5883] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 283.357077][ T10] usb 5-1: USB disconnect, device number 25 [ 283.792628][ T30] audit: type=1400 audit(1760253336.202:472): avc: denied { listen } for pid=8491 comm="syz.2.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 283.974766][ T869] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 283.996153][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 284.160092][ T869] usb 1-1: unable to get BOS descriptor or descriptor too short [ 284.177186][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 284.177671][ T869] usb 1-1: not running at top speed; connect to a high speed hub [ 284.202261][ T869] usb 1-1: config 106 has an invalid interface number: 8 but max is 0 [ 284.203376][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 284.210900][ T869] usb 1-1: config 106 has no interface number 0 [ 284.246400][ T869] usb 1-1: too many endpoints for config 106 interface 8 altsetting 224: 76, using maximum allowed: 30 [ 284.253606][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.271604][ T869] usb 1-1: config 106 interface 8 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 76 [ 284.280435][ T10] usb 2-1: config 0 descriptor?? [ 284.294279][ T869] usb 1-1: config 106 interface 8 has no altsetting 0 [ 284.303830][ T869] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 284.317056][ T869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.326023][ T869] usb 1-1: Product: syz [ 284.330338][ T869] usb 1-1: Manufacturer: syz [ 284.332140][ T30] audit: type=1400 audit(1760253336.742:473): avc: denied { read } for pid=8491 comm="syz.2.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 284.335477][ T869] usb 1-1: SerialNumber: syz [ 284.623468][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 284.626800][ T869] kalmia 1-1:106.8: probe with driver kalmia failed with error -22 [ 284.806449][ T869] usb 1-1: USB disconnect, device number 24 [ 284.833187][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 284.863579][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 284.884240][ T10] usb 2-1: media controller created [ 284.937559][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.031954][ T8507] FAULT_INJECTION: forcing a failure. [ 285.031954][ T8507] name failslab, interval 1, probability 0, space 0, times 0 [ 285.045276][ T8507] CPU: 0 UID: 0 PID: 8507 Comm: syz.2.667 Not tainted syzkaller #0 PREEMPT(full) [ 285.045305][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.045316][ T8507] Call Trace: [ 285.045322][ T8507] [ 285.045329][ T8507] dump_stack_lvl+0x16c/0x1f0 [ 285.045362][ T8507] should_fail_ex+0x512/0x640 [ 285.045385][ T8507] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 285.045411][ T8507] should_failslab+0xc2/0x120 [ 285.045439][ T8507] kmem_cache_alloc_noprof+0x75/0x6e0 [ 285.045459][ T8507] ? skb_clone+0x190/0x3f0 [ 285.045485][ T8507] ? skb_clone+0x190/0x3f0 [ 285.045503][ T8507] skb_clone+0x190/0x3f0 [ 285.045525][ T8507] pfkey_broadcast_one+0xb9/0x380 [ 285.045546][ T8507] pfkey_broadcast+0x293/0x460 [ 285.045571][ T8507] pfkey_sendmsg+0x74d/0x850 [ 285.045593][ T8507] ____sys_sendmsg+0xa98/0xc70 [ 285.045620][ T8507] ? copy_msghdr_from_user+0x10a/0x160 [ 285.045640][ T8507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.045677][ T8507] ___sys_sendmsg+0x134/0x1d0 [ 285.045700][ T8507] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.045718][ T8507] ? __lock_acquire+0x622/0x1c90 [ 285.045772][ T8507] __sys_sendmsg+0x16d/0x220 [ 285.045794][ T8507] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.045831][ T8507] do_syscall_64+0xcd/0xfa0 [ 285.045860][ T8507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.045878][ T8507] RIP: 0033:0x7fce8b98eec9 [ 285.045894][ T8507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.045911][ T8507] RSP: 002b:00007fce8c73e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.045929][ T8507] RAX: ffffffffffffffda RBX: 00007fce8bbe5fa0 RCX: 00007fce8b98eec9 [ 285.045941][ T8507] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 285.045951][ T8507] RBP: 00007fce8c73e090 R08: 0000000000000000 R09: 0000000000000000 [ 285.045962][ T8507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.045972][ T8507] R13: 00007fce8bbe6038 R14: 00007fce8bbe5fa0 R15: 00007ffda67375b8 [ 285.045997][ T8507] [ 286.517545][ T10] az6027: usb out operation failed. (-71) [ 286.533468][ T10] stb0899_attach: Driver disabled by Kconfig [ 286.711445][ T10] az6027: no front-end attached [ 286.711445][ T10] [ 286.818401][ T10] az6027: usb out operation failed. (-71) [ 286.825522][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 286.893160][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 286.964052][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 286.992916][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 287.108494][ T10] usb 2-1: USB disconnect, device number 19 [ 289.510206][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 289.786984][ T30] audit: type=1400 audit(1760253342.205:474): avc: denied { setopt } for pid=8543 comm="syz.1.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 290.494039][ T8563] netlink: 52 bytes leftover after parsing attributes in process `syz.0.680'. [ 290.839167][ T30] audit: type=1400 audit(1760253343.246:475): avc: denied { checkpoint_restore } for pid=8551 comm="syz.0.680" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 290.887973][ T8565] netlink: 48 bytes leftover after parsing attributes in process `syz.0.680'. [ 291.305687][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 291.472512][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 291.490114][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.505672][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 291.535100][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.558998][ T10] usb 5-1: config 0 descriptor?? [ 292.270551][ T8586] wg1: entered promiscuous mode [ 292.275530][ T8586] wg1: entered allmulticast mode [ 293.398781][ T8576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.150510][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 294.156510][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 294.229919][ T10] usb 5-1: USB disconnect, device number 26 [ 294.471616][ T8613] FAULT_INJECTION: forcing a failure. [ 294.471616][ T8613] name failslab, interval 1, probability 0, space 0, times 0 [ 294.484687][ T8613] CPU: 0 UID: 0 PID: 8613 Comm: syz.0.695 Not tainted syzkaller #0 PREEMPT(full) [ 294.484712][ T8613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.484727][ T8613] Call Trace: [ 294.484733][ T8613] [ 294.484740][ T8613] dump_stack_lvl+0x16c/0x1f0 [ 294.484766][ T8613] should_fail_ex+0x512/0x640 [ 294.484792][ T8613] should_failslab+0xc2/0x120 [ 294.484817][ T8613] kmem_cache_alloc_noprof+0x75/0x6e0 [ 294.484836][ T8613] ? net_generic+0xea/0x2a0 [ 294.484858][ T8613] ? __nf_conntrack_alloc+0xd1/0x660 [ 294.484887][ T8613] ? __nf_conntrack_alloc+0xd1/0x660 [ 294.484911][ T8613] __nf_conntrack_alloc+0xd1/0x660 [ 294.484939][ T8613] init_conntrack.constprop.0+0xd3e/0x1080 [ 294.484967][ T8613] ? __pfx_init_conntrack.constprop.0+0x10/0x10 [ 294.484993][ T8613] ? __pfx_hash_conntrack_raw+0x10/0x10 [ 294.485019][ T8613] ? ip6t_do_table+0xc25/0x1c30 [ 294.485051][ T8613] nf_conntrack_in+0xf29/0x1930 [ 294.485085][ T8613] ? __pfx_nf_conntrack_in+0x10/0x10 [ 294.485111][ T8613] ? __do_replace+0x951/0x9f0 [ 294.485143][ T8613] ? netlbl_enabled+0x54/0x70 [ 294.485172][ T8613] ? __pfx_ipv6_conntrack_local+0x10/0x10 [ 294.485194][ T8613] nf_hook_slow+0xbe/0x200 [ 294.485217][ T8613] __ip6_local_out+0x428/0xa80 [ 294.485238][ T8613] ? __pfx___ip6_local_out+0x10/0x10 [ 294.485261][ T8613] ? __pfx_dst_output+0x10/0x10 [ 294.485286][ T8613] ip6_local_out+0x2e/0x4d0 [ 294.485308][ T8613] ip6_send_skb+0x112/0x460 [ 294.485337][ T8613] udp_v6_send_skb+0x96f/0x1910 [ 294.485367][ T8613] udpv6_sendmsg+0x23b1/0x2d30 [ 294.485387][ T8613] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 294.485419][ T8613] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 294.485437][ T8613] ? avc_has_perm_noaudit+0x149/0x3b0 [ 294.485459][ T8613] ? avc_has_perm+0x144/0x1f0 [ 294.485503][ T8613] ? __import_iovec+0x1dd/0x650 [ 294.485527][ T8613] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 294.485549][ T8613] ? inet6_sendmsg+0x105/0x140 [ 294.485567][ T8613] inet6_sendmsg+0x105/0x140 [ 294.485589][ T8613] ____sys_sendmsg+0x705/0xc70 [ 294.485615][ T8613] ? copy_msghdr_from_user+0x10a/0x160 [ 294.485635][ T8613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.485664][ T8613] ? __pfx__kstrtoull+0x10/0x10 [ 294.485696][ T8613] ___sys_sendmsg+0x134/0x1d0 [ 294.485723][ T8613] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.485760][ T8613] ? find_held_lock+0x2b/0x80 [ 294.485793][ T8613] __sys_sendmmsg+0x200/0x420 [ 294.485815][ T8613] ? __pfx___sys_sendmmsg+0x10/0x10 [ 294.485844][ T8613] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 294.485874][ T8613] ? fput+0x9b/0xd0 [ 294.485890][ T8613] ? ksys_write+0x1ac/0x250 [ 294.485911][ T8613] ? __pfx_ksys_write+0x10/0x10 [ 294.485936][ T8613] __x64_sys_sendmmsg+0x9c/0x100 [ 294.485956][ T8613] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.485976][ T8613] do_syscall_64+0xcd/0xfa0 [ 294.485998][ T8613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.486016][ T8613] RIP: 0033:0x7f58ae58eec9 [ 294.486031][ T8613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.486048][ T8613] RSP: 002b:00007f58af3f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 294.486065][ T8613] RAX: ffffffffffffffda RBX: 00007f58ae7e6090 RCX: 00007f58ae58eec9 [ 294.486077][ T8613] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000007 [ 294.486093][ T8613] RBP: 00007f58af3f4090 R08: 0000000000000000 R09: 0000000000000000 [ 294.486104][ T8613] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.486115][ T8613] R13: 00007f58ae7e6128 R14: 00007f58ae7e6090 R15: 00007fffe93fa538 [ 294.486139][ T8613] [ 294.837395][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.619721][ T8618] netlink: 64 bytes leftover after parsing attributes in process `syz.3.696'. [ 296.224165][ T8637] netlink: 'syz.3.702': attribute type 1 has an invalid length. [ 296.232607][ T8637] netlink: 236 bytes leftover after parsing attributes in process `syz.3.702'. [ 296.505253][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 296.868065][ T10] usb 5-1: device descriptor read/64, error -71 [ 297.056293][ T8645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.078384][ T30] audit: type=1400 audit(1760253349.499:476): avc: denied { read open } for pid=8650 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.140013][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 297.159924][ T30] audit: type=1400 audit(1760253349.499:477): avc: denied { getattr } for pid=8650 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.298443][ T10] usb 5-1: device descriptor read/64, error -71 [ 297.408062][ T10] usb usb5-port1: attempt power cycle [ 297.672872][ T869] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 297.889766][ T30] audit: type=1400 audit(1760253350.319:478): avc: denied { module_request } for pid=8660 comm="syz.4.707" kmod="ipt_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 298.199739][ T869] usb 1-1: config index 0 descriptor too short (expected 26, got 18) [ 298.594959][ T869] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=b7.de [ 298.949254][ T869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.976942][ T869] usb 1-1: Product: syz [ 299.046116][ T869] usb 1-1: Manufacturer: syz [ 299.060279][ T869] usb 1-1: SerialNumber: syz [ 299.073431][ T869] usb 1-1: config 0 descriptor?? [ 299.098704][ T30] audit: type=1400 audit(1760253351.520:479): avc: denied { add_name } for pid=8648 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.140176][ T869] ttusb_dec_send_command: command bulk message failed: error -22 [ 299.159086][ T869] ttusb-dec 1-1:0.0: probe with driver ttusb-dec failed with error -22 [ 299.179883][ T30] audit: type=1400 audit(1760253351.520:480): avc: denied { create } for pid=8648 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 299.242923][ T30] audit: type=1400 audit(1760253351.530:481): avc: denied { write } for pid=8648 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=4268 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 299.282630][ T30] audit: type=1400 audit(1760253351.530:482): avc: denied { append } for pid=8648 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=4268 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 299.322723][ T30] audit: type=1400 audit(1760253351.560:483): avc: denied { ioctl } for pid=8678 comm="syz.4.710" path="socket:[19995]" dev="sockfs" ino=19995 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 299.395172][ T30] audit: type=1400 audit(1760253351.820:484): avc: denied { create } for pid=8651 comm="syz.0.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 299.403273][ T5901] usb 1-1: USB disconnect, device number 25 [ 299.429109][ T30] audit: type=1400 audit(1760253351.820:485): avc: denied { ioctl } for pid=8651 comm="syz.0.705" path="socket:[20007]" dev="sockfs" ino=20007 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 299.523817][ T8649] atomic_op ffff88806dd9f198 conn xmit_atomic 0000000000000000 [ 300.476455][ T5901] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 300.716263][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 300.733517][ T5901] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.792069][ T5901] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.825804][ T5901] usb 1-1: config 1 interface 0 has no altsetting 0 [ 300.931188][ T5901] usb 1-1: string descriptor 0 read error: -22 [ 300.938409][ T5901] usb 1-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 300.985256][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.640072][ T5901] usbhid 1-1:1.0: can't add hid device: -71 [ 301.649382][ T5901] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 301.681046][ T5901] usb 1-1: USB disconnect, device number 26 [ 302.361357][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 302.361375][ T30] audit: type=1400 audit(1760253354.791:489): avc: denied { load_policy } for pid=8741 comm="syz.0.718" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 302.387871][ T8742] SELinux: ebitmap: truncated map [ 302.405261][ T5901] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 302.410343][ T8742] SELinux: failed to load policy [ 302.545519][ T5901] usb 5-1: device descriptor read/64, error -71 [ 302.785117][ T5901] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 303.112811][ T5901] usb 5-1: device descriptor read/64, error -71 [ 303.238303][ T5901] usb usb5-port1: attempt power cycle [ 303.574676][ T5901] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 303.595144][ T5901] usb 5-1: device descriptor read/8, error -71 [ 303.687955][ T8763] netlink: 'syz.0.721': attribute type 4 has an invalid length. [ 303.848207][ T5901] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 304.016218][ T5901] usb 5-1: device descriptor read/8, error -71 [ 304.221628][ T8781] input: syz1 as /devices/virtual/input/input13 [ 304.314539][ T5901] usb usb5-port1: unable to enumerate USB device [ 304.618721][ T8794] tipc: Enabled bearer , priority 0 [ 305.101244][ T8795] syzkaller0: entered promiscuous mode [ 305.122415][ T8795] syzkaller0: entered allmulticast mode [ 305.241405][ T8793] tipc: Resetting bearer [ 305.286422][ T8793] tipc: Disabling bearer [ 305.685012][ T30] audit: type=1400 audit(1760253358.113:490): avc: denied { listen } for pid=8808 comm="syz.2.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 307.335791][ T8821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.349313][ T30] audit: type=1400 audit(1760253359.063:491): avc: denied { ioctl } for pid=8839 comm="syz.3.735" path="socket:[20279]" dev="sockfs" ino=20279 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 308.310923][ T8857] netlink: 156 bytes leftover after parsing attributes in process `syz.1.738'. [ 309.859536][ T8868] Invalid option length (772) for dns_resolver key [ 310.203365][ T8875] netlink: 'syz.1.744': attribute type 32 has an invalid length. [ 310.336078][ T8883] mkiss: ax0: crc mode is auto. [ 310.389836][ T8883] netlink: 32 bytes leftover after parsing attributes in process `syz.4.746'. [ 310.581162][ T5932] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 310.891000][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 310.957689][ T5932] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 311.007604][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.030650][ T5932] usb 2-1: Product: syz [ 311.039012][ T5932] usb 2-1: Manufacturer: syz [ 311.046162][ T5932] usb 2-1: SerialNumber: syz [ 311.058475][ T5932] usb 2-1: config 0 descriptor?? [ 311.124603][ T8914] 9pnet_fd: Insufficient options for proto=fd [ 311.281957][ T5932] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 312.424242][ T5932] gspca_sunplus: reg_w_riv err -71 [ 312.429680][ T5932] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 312.439541][ T8904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.449637][ T5932] usb 2-1: USB disconnect, device number 20 [ 313.549489][ T8953] netlink: 'syz.4.760': attribute type 2 has an invalid length. [ 313.563858][ T8953] netlink: 'syz.4.760': attribute type 8 has an invalid length. [ 313.589819][ T8953] netlink: 132 bytes leftover after parsing attributes in process `syz.4.760'. [ 314.026404][ T30] audit: type=1400 audit(1760253366.457:492): avc: denied { execute } for pid=8963 comm="syz.1.764" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 314.049593][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.903668][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.910440][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.719065][ T9002] FAULT_INJECTION: forcing a failure. [ 317.719065][ T9002] name failslab, interval 1, probability 0, space 0, times 0 [ 317.766428][ T9002] CPU: 1 UID: 0 PID: 9002 Comm: syz.2.774 Not tainted syzkaller #0 PREEMPT(full) [ 317.766454][ T9002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 317.766464][ T9002] Call Trace: [ 317.766470][ T9002] [ 317.766477][ T9002] dump_stack_lvl+0x16c/0x1f0 [ 317.766504][ T9002] should_fail_ex+0x512/0x640 [ 317.766524][ T9002] ? __kmalloc_cache_noprof+0x5f/0x780 [ 317.766544][ T9002] should_failslab+0xc2/0x120 [ 317.766569][ T9002] __kmalloc_cache_noprof+0x72/0x780 [ 317.766586][ T9002] ? vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 317.766613][ T9002] ? vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 317.766634][ T9002] vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 317.766658][ T9002] drm_atomic_get_crtc_state+0x171/0x450 [ 317.766680][ T9002] drm_atomic_set_property+0xfbe/0x34d0 [ 317.766706][ T9002] ? __pfx_drm_atomic_set_property+0x10/0x10 [ 317.766726][ T9002] ? __might_fault+0xe3/0x190 [ 317.766742][ T9002] ? __might_fault+0xe3/0x190 [ 317.766759][ T9002] ? __might_fault+0x13b/0x190 [ 317.766788][ T9002] drm_mode_atomic_ioctl+0x66f/0x2600 [ 317.766819][ T9002] ? avc_has_extended_perms+0x47c/0x1090 [ 317.766839][ T9002] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 317.766859][ T9002] ? __lock_acquire+0xb8a/0x1c90 [ 317.766896][ T9002] ? drm_is_current_master+0x2c/0x40 [ 317.766920][ T9002] ? do_raw_spin_unlock+0x172/0x230 [ 317.766946][ T9002] drm_ioctl_kernel+0x1f4/0x3e0 [ 317.766961][ T9002] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 317.766983][ T9002] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 317.767007][ T9002] drm_ioctl+0x5c9/0xc30 [ 317.767025][ T9002] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 317.767047][ T9002] ? __pfx_drm_ioctl+0x10/0x10 [ 317.767075][ T9002] ? selinux_file_ioctl+0x180/0x270 [ 317.767102][ T9002] ? selinux_file_ioctl+0xb4/0x270 [ 317.767131][ T9002] ? __pfx_drm_ioctl+0x10/0x10 [ 317.767149][ T9002] __x64_sys_ioctl+0x18e/0x210 [ 317.767170][ T9002] do_syscall_64+0xcd/0xfa0 [ 317.767193][ T9002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.767210][ T9002] RIP: 0033:0x7fce8b98eec9 [ 317.767226][ T9002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.767243][ T9002] RSP: 002b:00007fce8c73e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.767259][ T9002] RAX: ffffffffffffffda RBX: 00007fce8bbe5fa0 RCX: 00007fce8b98eec9 [ 317.767271][ T9002] RDX: 0000200000000380 RSI: 00000000c03864bc RDI: 0000000000000003 [ 317.767281][ T9002] RBP: 00007fce8c73e090 R08: 0000000000000000 R09: 0000000000000000 [ 317.767292][ T9002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.767302][ T9002] R13: 00007fce8bbe6038 R14: 00007fce8bbe5fa0 R15: 00007ffda67375b8 [ 317.767329][ T9002] [ 318.040205][ T8987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.848080][ T9012] Invalid option length (772) for dns_resolver key [ 319.842515][ T9030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.783'. [ 319.861799][ T30] audit: type=1400 audit(1760253372.280:493): avc: denied { getopt } for pid=9029 comm="syz.0.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 319.866565][ T9030] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.917193][ T5932] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 319.947243][ T9030] bridge_slave_0 (unregistering): left promiscuous mode [ 319.947334][ T9030] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.046526][ T5932] usb 5-1: device descriptor read/64, error -71 [ 320.738198][ T5932] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 320.896473][ T5932] usb 5-1: device descriptor read/64, error -71 [ 321.022007][ T5932] usb usb5-port1: attempt power cycle [ 321.300007][ T30] audit: type=1400 audit(1760253373.741:494): avc: denied { execute } for pid=9050 comm="syz.3.789" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 321.323776][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.625683][ T5932] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 321.710997][ T5932] usb 5-1: device descriptor read/8, error -71 [ 322.089459][ T30] audit: type=1800 audit(1760253374.191:495): pid=9068 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.789" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 322.202063][ T9058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.245465][ T5932] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 322.345627][ T5932] usb 5-1: device descriptor read/8, error -71 [ 322.525586][ T5932] usb usb5-port1: unable to enumerate USB device [ 322.710776][ T30] audit: type=1400 audit(1760253375.141:496): avc: denied { create } for pid=9072 comm="syz.4.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 322.844438][ T5927] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 322.852155][ T30] audit: type=1400 audit(1760253375.151:497): avc: denied { ioctl } for pid=9072 comm="syz.4.794" path="socket:[21059]" dev="sockfs" ino=21059 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 323.307396][ T5927] usb 1-1: unable to get BOS descriptor or descriptor too short [ 323.470174][ T5927] usb 1-1: not running at top speed; connect to a high speed hub [ 323.479676][ T5927] usb 1-1: config 106 has an invalid interface number: 8 but max is 0 [ 323.479704][ T5927] usb 1-1: config 106 has no interface number 0 [ 323.479730][ T5927] usb 1-1: too many endpoints for config 106 interface 8 altsetting 224: 76, using maximum allowed: 30 [ 323.479763][ T5927] usb 1-1: config 106 interface 8 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 76 [ 323.479786][ T5927] usb 1-1: config 106 interface 8 has no altsetting 0 [ 323.489280][ T5927] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 323.489298][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.489310][ T5927] usb 1-1: Product: syz [ 323.489318][ T5927] usb 1-1: Manufacturer: syz [ 323.489326][ T5927] usb 1-1: SerialNumber: syz [ 323.495136][ T9076] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 323.495152][ T9076] bridge0: port 3(team0) entered blocking state [ 323.495192][ T9076] bridge0: port 3(team0) entered disabled state [ 323.495284][ T9076] team0: entered allmulticast mode [ 323.495293][ T9076] team_slave_0: entered allmulticast mode [ 323.495302][ T9076] team_slave_1: entered allmulticast mode [ 323.496302][ T9076] team0: entered promiscuous mode [ 323.496311][ T9076] team_slave_0: entered promiscuous mode [ 323.496393][ T9076] team_slave_1: entered promiscuous mode [ 323.496789][ T9076] bridge0: port 3(team0) entered blocking state [ 323.496832][ T9076] bridge0: port 3(team0) entered forwarding state [ 323.995616][ T5927] kalmia 1-1:106.8: probe with driver kalmia failed with error -22 [ 324.003153][ T5927] usb 1-1: USB disconnect, device number 27 [ 324.339399][ T30] audit: type=1400 audit(1760253376.772:498): avc: denied { setopt } for pid=9098 comm="syz.4.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 324.464214][ T5901] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 327.195652][ T9133] ceph: No mds server is up or the cluster is laggy [ 327.738871][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 327.797943][ T9123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.062484][ T5876] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 328.114286][ T5901] usb 3-1: unable to get BOS descriptor or descriptor too short [ 328.130387][ T5901] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 328.135631][ T30] audit: type=1400 audit(1760253380.564:499): avc: denied { mounton } for pid=9153 comm="syz.3.812" path="/178/file0" dev="tmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 328.193444][ T5901] usb 3-1: can't read configurations, error -71 [ 328.243813][ T5876] usb 1-1: config 5 has an invalid interface number: 146 but max is 0 [ 328.252118][ T5876] usb 1-1: config 5 has no interface number 0 [ 328.297169][ T5876] usb 1-1: config 5 interface 146 has no altsetting 0 [ 328.316631][ T5876] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f1.f2 [ 328.326579][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.334898][ T5876] usb 1-1: Product: syz [ 328.339237][ T5876] usb 1-1: Manufacturer: syz [ 328.344253][ T5876] usb 1-1: SerialNumber: syz [ 328.756142][ T9146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.767663][ T9146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.241516][ T5876] usb 1-1: USB disconnect, device number 28 [ 330.989015][ T5876] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 331.064764][ T5876] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 331.483361][ T9192] fuse: Bad value for 'fd' [ 331.503992][ T30] audit: type=1400 audit(1760253383.946:500): avc: denied { mount } for pid=9188 comm="syz.4.821" name="/" dev="pstore" ino=2886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 331.600609][ T30] audit: type=1400 audit(1760253383.946:501): avc: denied { create } for pid=9188 comm="syz.4.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 331.792774][ T9178] syzkaller1: entered promiscuous mode [ 331.798382][ T9178] syzkaller1: entered allmulticast mode [ 331.819241][ T9178] netlink: 'syz.2.819': attribute type 1 has an invalid length. [ 332.302588][ T30] audit: type=1400 audit(1760253384.746:502): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 334.373074][ T9232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.836'. [ 334.499610][ T5932] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 335.999940][ T5932] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 336.008415][ T5932] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 336.016499][ T5932] usb 1-1: config 0 has no interface number 0 [ 336.022892][ T5932] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 336.034889][ T5932] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 336.046052][ T5932] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 336.067245][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.131858][ T5932] usb 1-1: config 0 descriptor?? [ 336.418660][ T9244] netlink: 'syz.2.840': attribute type 8 has an invalid length. [ 336.512737][ T5932] usb 1-1: USB disconnect, device number 29 [ 339.057176][ T5883] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 340.520356][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 340.576625][ T5883] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 340.617660][ T5883] usb 4-1: config 0 has no interface number 0 [ 340.651214][ T5883] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 340.682967][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.711639][ T5883] usb 4-1: Product: syz [ 340.715831][ T5883] usb 4-1: Manufacturer: syz [ 340.742681][ T5883] usb 4-1: SerialNumber: syz [ 340.787137][ T5883] usb 4-1: config 0 descriptor?? [ 340.813600][ T5883] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 341.004256][ T5883] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 341.486064][ T5883] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 341.908701][ T9291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.261542][ T9291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.826019][ C1] sched: DL replenish lagged too much [ 377.951517][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 482.864855][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 482.871854][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9311/1:b..l P9301/1:b..l P1091/1:b..l P5809/1:b..l P5477/1:b..l P5822/1:b..l [ 482.885998][ C1] rcu: (detected by 1, t=10504 jiffies, g=29049, q=1352360 ncpus=2) [ 482.894078][ C1] task:udevd state:R running task stack:24728 pid:5822 tgid:5822 ppid:5183 task_flags:0x400140 flags:0x00080001 [ 482.909237][ C1] Call Trace: [ 482.912534][ C1] [ 482.915474][ C1] __schedule+0x1190/0x5de0 [ 482.919995][ C1] ? __lock_acquire+0x622/0x1c90 [ 482.924973][ C1] ? __lock_acquire+0x622/0x1c90 [ 482.929938][ C1] ? __pfx___schedule+0x10/0x10 [ 482.934791][ C1] ? __lock_acquire+0x622/0x1c90 [ 482.939750][ C1] ? mark_held_locks+0x49/0x80 [ 482.944537][ C1] preempt_schedule_irq+0x51/0x90 [ 482.949574][ C1] irqentry_exit+0x36/0x90 [ 482.954004][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 482.960005][ C1] RIP: 0010:lock_acquire+0x0/0x350 [ 482.965136][ C1] Code: 99 0b 12 00 00 00 00 eb c3 e8 8c f8 cc 09 eb c3 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 4d 89 cf 41 56 41 89 f6 41 55 41 89 d5 41 54 45 [ 482.984769][ C1] RSP: 0018:ffffc900032c7230 EFLAGS: 00000246 [ 482.990845][ C1] RAX: ffffffff816c45dd RBX: 0000000000000001 RCX: 0000000000000002 [ 482.998825][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e3c4460 [ 483.006821][ C1] RBP: ffffc900032c72f8 R08: 0000000000000000 R09: 0000000000000000 [ 483.014823][ C1] R10: 0000000000000000 R11: 00000000000362ec R12: ffffffff81a83070 [ 483.022800][ C1] R13: ffffc900032c72b0 R14: 0000000000000000 R15: ffff88807bba4900 [ 483.030830][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 483.037019][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 483.042158][ C1] unwind_next_frame+0xd1/0x20a0 [ 483.047117][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 483.052241][ C1] ? security_file_open+0x84/0x1e0 [ 483.057586][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 483.063855][ C1] arch_stack_walk+0x94/0x100 [ 483.068555][ C1] ? security_file_open+0x84/0x1e0 [ 483.073692][ C1] stack_trace_save+0x8e/0xc0 [ 483.078391][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 483.083782][ C1] ? __lock_acquire+0x622/0x1c90 [ 483.088770][ C1] save_stack+0x160/0x1f0 [ 483.093113][ C1] ? __pfx_save_stack+0x10/0x10 [ 483.097970][ C1] ? __free_frozen_pages+0x7df/0x1160 [ 483.103354][ C1] ? __put_partials+0x130/0x170 [ 483.108228][ C1] ? qlist_free_all+0x4d/0x120 [ 483.113004][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 483.118667][ C1] ? __kasan_kmalloc+0x8a/0xb0 [ 483.123440][ C1] ? __kmalloc_noprof+0x32f/0x880 [ 483.128652][ C1] ? tomoyo_encode2+0x100/0x3e0 [ 483.133526][ C1] ? tomoyo_encode+0x29/0x50 [ 483.138140][ C1] ? tomoyo_realpath_from_path+0x18f/0x6e0 [ 483.143966][ C1] ? tomoyo_check_open_permission+0x2ab/0x3c0 [ 483.150084][ C1] ? tomoyo_file_open+0x6b/0x90 [ 483.154937][ C1] ? security_file_open+0x84/0x1e0 [ 483.160072][ C1] ? page_ext_put+0x3e/0xd0 [ 483.164598][ C1] __reset_page_owner+0x84/0x1a0 [ 483.169551][ C1] __free_frozen_pages+0x7df/0x1160 [ 483.174766][ C1] ? mark_held_locks+0x49/0x80 [ 483.179554][ C1] __put_partials+0x130/0x170 [ 483.184246][ C1] qlist_free_all+0x4d/0x120 [ 483.188856][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 483.194335][ C1] __kasan_kmalloc+0x8a/0xb0 [ 483.198946][ C1] __kmalloc_noprof+0x32f/0x880 [ 483.203833][ C1] ? tomoyo_encode2+0x100/0x3e0 [ 483.208713][ C1] ? tomoyo_encode2+0x100/0x3e0 [ 483.213593][ C1] tomoyo_encode2+0x100/0x3e0 [ 483.218293][ C1] tomoyo_encode+0x29/0x50 [ 483.222732][ C1] tomoyo_realpath_from_path+0x18f/0x6e0 [ 483.228383][ C1] tomoyo_check_open_permission+0x2ab/0x3c0 [ 483.234293][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 483.240735][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 483.245723][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 483.250781][ C1] tomoyo_file_open+0x6b/0x90 [ 483.255473][ C1] security_file_open+0x84/0x1e0 [ 483.260434][ C1] do_dentry_open+0x596/0x1530 [ 483.265510][ C1] vfs_open+0x82/0x3f0 [ 483.269945][ C1] path_openat+0x1de4/0x2cb0 [ 483.274564][ C1] ? __pfx_path_openat+0x10/0x10 [ 483.279529][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 483.284490][ C1] do_filp_open+0x20b/0x470 [ 483.289024][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 483.294079][ C1] ? alloc_fd+0x471/0x7d0 [ 483.298437][ C1] do_sys_openat2+0x11b/0x1d0 [ 483.303123][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 483.308335][ C1] ? rcu_is_watching+0x12/0xc0 [ 483.313131][ C1] ? __rseq_handle_notify_resume+0x66e/0x10c0 [ 483.319240][ C1] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 483.325332][ C1] __x64_sys_openat+0x174/0x210 [ 483.330200][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 483.335602][ C1] do_syscall_64+0xcd/0xfa0 [ 483.340130][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.346038][ C1] RIP: 0033:0x7f94a36a7407 [ 483.350469][ C1] RSP: 002b:00007ffef44381c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 483.358892][ C1] RAX: ffffffffffffffda RBX: 00007f94a3d81880 RCX: 00007f94a36a7407 [ 483.366875][ C1] RDX: 0000000000080000 RSI: 00007ffef44382f0 RDI: ffffffffffffff9c [ 483.374857][ C1] RBP: 00005652e77aacf0 R08: 0000000000000000 R09: 0000000000000000 [ 483.382855][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00005652e77aade0 [ 483.390853][ C1] R13: 00007ffef44382f0 R14: 00005652c954400c R15: 0000000000000000 [ 483.398885][ C1] [ 483.401915][ C1] task:dhcpcd state:R running task stack:25368 pid:5477 tgid:5477 ppid:1 task_flags:0x400140 flags:0x00080001 [ 483.415419][ C1] Call Trace: [ 483.418704][ C1] [ 483.421651][ C1] __schedule+0x1190/0x5de0 [ 483.426175][ C1] ? rcu_is_watching+0x12/0xc0 [ 483.430957][ C1] ? __schedule+0x11a3/0x5de0 [ 483.435663][ C1] ? __pfx___schedule+0x10/0x10 [ 483.440538][ C1] ? mark_held_locks+0x49/0x80 [ 483.445360][ C1] ? irqentry_exit+0x3b/0x90 [ 483.449989][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 483.455205][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 483.461319][ C1] preempt_schedule_notrace+0x62/0xe0 [ 483.466712][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 483.471940][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 483.477862][ C1] rcu_is_watching+0x8e/0xc0 [ 483.482473][ C1] lock_release+0x201/0x2f0 [ 483.486993][ C1] unwind_next_frame+0x3f9/0x20a0 [ 483.492039][ C1] ? unix_dgram_sendmsg+0x3e9/0x17f0 [ 483.497344][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 483.503518][ C1] arch_stack_walk+0x94/0x100 [ 483.508230][ C1] ? unix_seqpacket_sendmsg+0x12a/0x1c0 [ 483.513797][ C1] stack_trace_save+0x8e/0xc0 [ 483.518495][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 483.523895][ C1] ? __lock_acquire+0x622/0x1c90 [ 483.528867][ C1] save_stack+0x160/0x1f0 [ 483.533222][ C1] ? __pfx_save_stack+0x10/0x10 [ 483.538086][ C1] ? __free_frozen_pages+0x7df/0x1160 [ 483.543490][ C1] ? __put_partials+0x130/0x170 [ 483.548366][ C1] ? qlist_free_all+0x4d/0x120 [ 483.553172][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 483.558826][ C1] ? __kasan_kmalloc+0x8a/0xb0 [ 483.563630][ C1] ? __kmalloc_node_track_caller_noprof+0x345/0x8a0 [ 483.570239][ C1] ? kmalloc_reserve+0xef/0x2c0 [ 483.575129][ C1] ? __alloc_skb+0x166/0x380 [ 483.579758][ C1] ? alloc_skb_with_frags+0xe0/0x860 [ 483.585279][ C1] ? sock_alloc_send_pskb+0x7f9/0x980 [ 483.590678][ C1] ? unix_dgram_sendmsg+0x3e9/0x17f0 [ 483.595991][ C1] ? page_ext_put+0x3e/0xd0 [ 483.600513][ C1] __reset_page_owner+0x84/0x1a0 [ 483.605481][ C1] __free_frozen_pages+0x7df/0x1160 [ 483.610714][ C1] ? mark_held_locks+0x49/0x80 [ 483.615504][ C1] __put_partials+0x130/0x170 [ 483.620211][ C1] qlist_free_all+0x4d/0x120 [ 483.624822][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 483.630304][ C1] __kasan_kmalloc+0x8a/0xb0 [ 483.634963][ C1] __kmalloc_node_track_caller_noprof+0x345/0x8a0 [ 483.641412][ C1] ? __alloc_skb+0x166/0x380 [ 483.646022][ C1] ? rcu_watching_snap_stopped_since+0xe1/0x110 [ 483.652298][ C1] ? kmalloc_reserve+0xef/0x2c0 [ 483.657173][ C1] kmalloc_reserve+0xef/0x2c0 [ 483.661882][ C1] __alloc_skb+0x166/0x380 [ 483.666310][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 483.671265][ C1] ? __lock_acquire+0x622/0x1c90 [ 483.676274][ C1] alloc_skb_with_frags+0xe0/0x860 [ 483.681413][ C1] sock_alloc_send_pskb+0x7f9/0x980 [ 483.686629][ C1] ? avc_has_perm_noaudit+0x117/0x3b0 [ 483.692030][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 483.697773][ C1] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 483.704129][ C1] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 483.710846][ C1] ? __pfx_avc_has_perm+0x10/0x10 [ 483.715897][ C1] unix_dgram_sendmsg+0x3e9/0x17f0 [ 483.721042][ C1] ? __pfx_sock_has_perm+0x10/0x10 [ 483.726187][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 483.731762][ C1] unix_seqpacket_sendmsg+0x12a/0x1c0 [ 483.737165][ C1] sock_write_iter+0x566/0x610 [ 483.741949][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 483.747265][ C1] ? __pfx_file_has_perm+0x10/0x10 [ 483.752396][ C1] do_iter_readv_writev+0x662/0x9e0 [ 483.757615][ C1] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 483.763348][ C1] ? selinux_file_permission+0x126/0x660 [ 483.769007][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 483.774402][ C1] ? security_file_permission+0x71/0x210 [ 483.780061][ C1] ? rw_verify_area+0xcf/0x6c0 [ 483.784882][ C1] vfs_writev+0x35f/0xde0 [ 483.789227][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 483.794184][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 483.799069][ C1] ? find_held_lock+0x2b/0x80 [ 483.803790][ C1] ? populate_seccomp_data+0x213/0x540 [ 483.809281][ C1] ? __pfx___seccomp_filter+0x10/0x10 [ 483.814689][ C1] ? do_writev+0x28c/0x340 [ 483.819112][ C1] do_writev+0x28c/0x340 [ 483.823369][ C1] ? __pfx_do_writev+0x10/0x10 [ 483.828143][ C1] ? __secure_computing+0x28e/0x3b0 [ 483.833358][ C1] do_syscall_64+0xcd/0xfa0 [ 483.837885][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.843781][ C1] RIP: 0033:0x7f6cdc809407 [ 483.848202][ C1] RSP: 002b:00007fff4bb46cd0 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 483.856631][ C1] RAX: ffffffffffffffda RBX: 00007f6cdc77f740 RCX: 00007f6cdc809407 [ 483.864608][ C1] RDX: 0000000000000005 RSI: 00007fff4bb46d30 RDI: 000000000000000a [ 483.872622][ C1] RBP: 00005595bd0a0870 R08: 0000000000000000 R09: 0000000000000000 [ 483.880601][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00005595c5a3dd90 [ 483.888584][ C1] R13: 000000000000012c R14: 0000000000004801 R15: 00005595c5a3e514 [ 483.896581][ C1] [ 483.899610][ C1] task:syz-executor state:R running task stack:23048 pid:5809 tgid:5809 ppid:5802 task_flags:0x400140 flags:0x00080000 [ 483.913115][ C1] Call Trace: [ 483.916416][ C1] [ 483.919350][ C1] __schedule+0x1190/0x5de0 [ 483.923861][ C1] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 483.929689][ C1] ? __lock_acquire+0x622/0x1c90 [ 483.934655][ C1] ? __pfx___schedule+0x10/0x10 [ 483.939524][ C1] ? __lock_acquire+0x622/0x1c90 [ 483.944508][ C1] ? mark_held_locks+0x49/0x80 [ 483.949381][ C1] preempt_schedule_irq+0x51/0x90 [ 483.954431][ C1] irqentry_exit+0x36/0x90 [ 483.958870][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 483.964860][ C1] RIP: 0010:__orc_find+0x13/0xf0 [ 483.969822][ C1] Code: 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 49 89 cd 89 d1 41 54 4c 8d 64 8f fc 55 <53> 48 83 ec 08 85 d2 0f 84 99 00 00 00 49 89 fe 48 89 f0 49 39 fc [ 483.989437][ C1] RSP: 0018:ffffc9000426f570 EFLAGS: 00000202 [ 483.995526][ C1] RAX: ffffffff914d3a06 RBX: 0000000000000001 RCX: 000000000000000b [ 484.003504][ C1] RDX: 000000000000000b RSI: ffffffff914d3a06 RDI: ffffffff90b7dba8 [ 484.011491][ C1] RBP: ffffc9000426f658 R08: ffffffff914d3a48 R09: 0000000000000000 [ 484.019471][ C1] R10: 0000000000000000 R11: 0000000000036216 R12: ffffffff90b7dbd0 [ 484.027448][ C1] R13: ffffffff846216f3 R14: ffffc9000426f645 R15: ffffffff846216f3 [ 484.035429][ C1] ? tomoyo_path_perm+0x273/0x460 [ 484.040467][ C1] ? tomoyo_path_perm+0x273/0x460 [ 484.045515][ C1] ? tomoyo_path_perm+0x273/0x460 [ 484.050549][ C1] unwind_next_frame+0x2ec/0x20a0 [ 484.055590][ C1] ? tomoyo_path_perm+0x274/0x460 [ 484.060628][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 484.066806][ C1] arch_stack_walk+0x94/0x100 [ 484.071506][ C1] ? tomoyo_path_perm+0x274/0x460 [ 484.076546][ C1] stack_trace_save+0x8e/0xc0 [ 484.081231][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 484.086609][ C1] ? __lock_acquire+0x622/0x1c90 [ 484.091565][ C1] save_stack+0x160/0x1f0 [ 484.095926][ C1] ? __pfx_save_stack+0x10/0x10 [ 484.100782][ C1] ? __free_frozen_pages+0x7df/0x1160 [ 484.106148][ C1] ? __put_partials+0x130/0x170 [ 484.110993][ C1] ? qlist_free_all+0x4d/0x120 [ 484.115754][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 484.121387][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 484.126420][ C1] ? __kmalloc_noprof+0x2e8/0x880 [ 484.131446][ C1] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 484.137179][ C1] ? tomoyo_path_perm+0x274/0x460 [ 484.142213][ C1] ? page_ext_put+0x3e/0xd0 [ 484.146815][ C1] __reset_page_owner+0x84/0x1a0 [ 484.151765][ C1] __free_frozen_pages+0x7df/0x1160 [ 484.156991][ C1] __put_partials+0x130/0x170 [ 484.161672][ C1] qlist_free_all+0x4d/0x120 [ 484.166268][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 484.171740][ C1] __kasan_slab_alloc+0x69/0x90 [ 484.176604][ C1] __kmalloc_noprof+0x2e8/0x880 [ 484.181457][ C1] ? kfree+0x252/0x6d0 [ 484.185522][ C1] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 484.191257][ C1] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 484.196980][ C1] tomoyo_realpath_from_path+0xc2/0x6e0 [ 484.202534][ C1] ? tomoyo_profile+0x47/0x60 [ 484.207220][ C1] tomoyo_path_perm+0x274/0x460 [ 484.212069][ C1] ? tomoyo_path_perm+0x260/0x460 [ 484.217098][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 484.222470][ C1] ? stack_depot_save_flags+0x29/0x9c0 [ 484.227937][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 484.232897][ C1] ? avc_has_perm_noaudit+0x117/0x3b0 [ 484.238275][ C1] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 484.244531][ C1] tomoyo_sb_umount+0x8c/0xd0 [ 484.249217][ C1] ? __pfx_tomoyo_sb_umount+0x10/0x10 [ 484.254627][ C1] security_sb_umount+0x8e/0x210 [ 484.259564][ C1] path_umount+0x329/0x1220 [ 484.264069][ C1] ? kmem_cache_free+0x2d4/0x6c0 [ 484.269010][ C1] ? putname+0x154/0x1a0 [ 484.273262][ C1] ? __pfx_path_umount+0x10/0x10 [ 484.278209][ C1] ? putname+0x154/0x1a0 [ 484.282454][ C1] ? putname+0x154/0x1a0 [ 484.286703][ C1] __x64_sys_umount+0x16a/0x1a0 [ 484.291554][ C1] ? __pfx___x64_sys_umount+0x10/0x10 [ 484.296923][ C1] ? do_user_addr_fault+0x843/0x1370 [ 484.302248][ C1] ? rcu_is_watching+0x12/0xc0 [ 484.307013][ C1] do_syscall_64+0xcd/0xfa0 [ 484.311520][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.317409][ C1] RIP: 0033:0x7fe85fd901f7 [ 484.321830][ C1] RSP: 002b:00007fff5b5acd28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 484.330240][ C1] RAX: ffffffffffffffda RBX: 00007fe85fe11d7d RCX: 00007fe85fd901f7 [ 484.338217][ C1] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5b5acde0 [ 484.346192][ C1] RBP: 00007fff5b5acde0 R08: 0000000000000000 R09: 0000000000000000 [ 484.354163][ C1] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff5b5ade70 [ 484.362130][ C1] R13: 00007fe85fe11d7d R14: 0000000000052bd9 R15: 00007fff5b5adeb0 [ 484.370151][ C1] [ 484.373169][ C1] task:kworker/u8:5 state:R running task stack:23544 pid:1091 tgid:1091 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 484.386742][ C1] Workqueue: 0x0 (bat_events) [ 484.391522][ C1] Call Trace: [ 484.394797][ C1] [ 484.397731][ C1] __schedule+0x1190/0x5de0 [ 484.402250][ C1] ? __pick_eevdf+0x127/0x670 [ 484.406950][ C1] ? find_held_lock+0x2b/0x80 [ 484.411637][ C1] ? __pfx___schedule+0x10/0x10 [ 484.416494][ C1] ? trace_sched_exit_tp+0xd1/0x120 [ 484.421712][ C1] ? mark_held_locks+0x49/0x80 [ 484.426483][ C1] preempt_schedule_irq+0x51/0x90 [ 484.431516][ C1] irqentry_exit+0x36/0x90 [ 484.435943][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 484.441927][ C1] RIP: 0010:lock_release+0x8d/0x2f0 [ 484.447132][ C1] Code: 85 16 01 00 00 65 4c 8b 35 78 5d 0b 12 41 8b b6 2c 0b 00 00 85 f6 0f 85 ff 00 00 00 48 81 3b 40 35 ab 93 0f 84 f2 00 00 00 9c <41> 5d fa 48 c7 c7 17 58 bf 8d e8 84 18 cd 09 65 ff 05 f5 9e 0b 12 [ 484.466748][ C1] RSP: 0018:ffffc90003b8f510 EFLAGS: 00000202 [ 484.472834][ C1] RAX: 0000000000000000 RBX: ffffffff8e3c4460 RCX: ffffc90003b90001 [ 484.480813][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 484.488788][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 484.496764][ C1] R10: 0000000000000000 R11: 000000000000862a R12: ffffffff816c4914 [ 484.504742][ C1] R13: ffffc90003b8f5d0 R14: ffff888027c4c900 R15: ffffc90003b8f604 [ 484.512717][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 484.517948][ C1] unwind_next_frame+0x3f9/0x20a0 [ 484.522989][ C1] ? kthread_create_on_node+0xc7/0x100 [ 484.528455][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 484.534617][ C1] arch_stack_walk+0x94/0x100 [ 484.539303][ C1] ? create_worker+0x416/0x7e0 [ 484.544074][ C1] stack_trace_save+0x8e/0xc0 [ 484.548768][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 484.554172][ C1] ? __lock_acquire+0x622/0x1c90 [ 484.559132][ C1] save_stack+0x160/0x1f0 [ 484.563479][ C1] ? __pfx_save_stack+0x10/0x10 [ 484.568444][ C1] ? __free_frozen_pages+0x7df/0x1160 [ 484.573816][ C1] ? __put_partials+0x130/0x170 [ 484.578673][ C1] ? qlist_free_all+0x4d/0x120 [ 484.583441][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 484.589092][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 484.594173][ C1] ? __kmalloc_node_track_caller_noprof+0x2fd/0x8a0 [ 484.600812][ C1] ? kvasprintf+0xbc/0x160 [ 484.605257][ C1] ? __kthread_create_on_node+0x186/0x3f0 [ 484.611022][ C1] ? kthread_create_on_node+0xc7/0x100 [ 484.616513][ C1] ? page_ext_put+0x3e/0xd0 [ 484.621031][ C1] __reset_page_owner+0x84/0x1a0 [ 484.626078][ C1] __free_frozen_pages+0x7df/0x1160 [ 484.631386][ C1] ? mark_held_locks+0x49/0x80 [ 484.636179][ C1] __put_partials+0x130/0x170 [ 484.640877][ C1] qlist_free_all+0x4d/0x120 [ 484.645492][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 484.650991][ C1] __kasan_slab_alloc+0x69/0x90 [ 484.655915][ C1] __kmalloc_node_track_caller_noprof+0x2fd/0x8a0 [ 484.662353][ C1] ? __kthread_create_on_node+0x186/0x3f0 [ 484.668093][ C1] ? kvasprintf+0xbc/0x160 [ 484.672518][ C1] kvasprintf+0xbc/0x160 [ 484.676763][ C1] ? __pfx_kvasprintf+0x10/0x10 [ 484.681625][ C1] ? __pfx_worker_thread+0x10/0x10 [ 484.686740][ C1] __kthread_create_on_node+0x186/0x3f0 [ 484.692290][ C1] ? __pfx___kthread_create_on_node+0x10/0x10 [ 484.698368][ C1] ? __pfx_worker_thread+0x10/0x10 [ 484.703482][ C1] kthread_create_on_node+0xc7/0x100 [ 484.708770][ C1] ? __pfx_kthread_create_on_node+0x10/0x10 [ 484.714678][ C1] create_worker+0x416/0x7e0 [ 484.719268][ C1] ? __pfx_create_worker+0x10/0x10 [ 484.724383][ C1] ? rcu_is_watching+0x12/0xc0 [ 484.729145][ C1] worker_thread+0x9dd/0xf10 [ 484.733765][ C1] ? __pfx_worker_thread+0x10/0x10 [ 484.738873][ C1] kthread+0x3c5/0x780 [ 484.742943][ C1] ? __pfx_kthread+0x10/0x10 [ 484.747533][ C1] ? rcu_is_watching+0x12/0xc0 [ 484.752288][ C1] ? __pfx_kthread+0x10/0x10 [ 484.756875][ C1] ret_from_fork+0x675/0x7d0 [ 484.761459][ C1] ? __pfx_kthread+0x10/0x10 [ 484.766048][ C1] ret_from_fork_asm+0x1a/0x30 [ 484.770817][ C1] [ 484.773822][ C1] task:syz.2.853 state:R running task stack:26456 pid:9301 tgid:9300 ppid:5816 task_flags:0x40054c flags:0x00080003 [ 484.787302][ C1] Call Trace: [ 484.790572][ C1] [ 484.793498][ C1] __schedule+0x1190/0x5de0 [ 484.798000][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 484.803203][ C1] ? unwind_next_frame+0x3fe/0x20a0 [ 484.808405][ C1] ? __pfx___schedule+0x10/0x10 [ 484.813258][ C1] ? mark_held_locks+0x49/0x80 [ 484.818015][ C1] preempt_schedule_irq+0x51/0x90 [ 484.823012][ C1] irqentry_exit+0x36/0x90 [ 484.827410][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 484.833359][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 484.838527][ C1] Code: 57 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 a2 14 ea 0e 0f 82 74 02 00 00 8b 35 1a 45 ea 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 b9 56 0b 12 0f 85 c7 02 00 00 48 83 c4 [ 484.858102][ C1] RSP: 0018:ffffc9001b3df190 EFLAGS: 00000206 [ 484.864136][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c4460 RCX: 00000000dbfb52df [ 484.872075][ C1] RDX: 0000000000000000 RSI: ffffffff8dadd930 RDI: ffffffff8bf1e3c0 [ 484.880019][ C1] RBP: 0000000000000002 R08: 11edc8a8be3b5a24 R09: 0000000000000000 [ 484.887957][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 484.895895][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 484.903840][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 484.909009][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 484.915129][ C1] unwind_next_frame+0xd1/0x20a0 [ 484.920037][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 484.925120][ C1] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 484.931247][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 484.937374][ C1] arch_stack_walk+0x94/0x100 [ 484.942035][ C1] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 484.948164][ C1] stack_trace_save+0x8e/0xc0 [ 484.952817][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 484.958157][ C1] ? __lock_acquire+0x622/0x1c90 [ 484.963073][ C1] save_stack+0x160/0x1f0 [ 484.967380][ C1] ? __pfx_save_stack+0x10/0x10 [ 484.972199][ C1] ? free_unref_folios+0xa31/0x1610 [ 484.977364][ C1] ? folios_put_refs+0x4be/0x750 [ 484.982270][ C1] ? free_pages_and_swap_cache+0x245/0x4a0 [ 484.988045][ C1] ? __tlb_batch_free_encoded_pages+0xf9/0x290 [ 484.994176][ C1] ? page_ext_put+0x3e/0xd0 [ 484.998649][ C1] __reset_page_owner+0x84/0x1a0 [ 485.003586][ C1] free_unref_folios+0xa31/0x1610 [ 485.008581][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 485.014355][ C1] folios_put_refs+0x4be/0x750 [ 485.019095][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 485.024350][ C1] ? free_pages_and_swap_cache+0x1d1/0x4a0 [ 485.030124][ C1] free_pages_and_swap_cache+0x245/0x4a0 [ 485.035725][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 485.041866][ C1] ? __pfx___might_resched+0x10/0x10 [ 485.047130][ C1] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 485.053084][ C1] tlb_finish_mmu+0x168/0x7c0 [ 485.057730][ C1] exit_mmap+0x3fc/0xb90 [ 485.061954][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 485.066698][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 485.072215][ C1] __mmput+0x12a/0x410 [ 485.076252][ C1] mmput+0x62/0x70 [ 485.079940][ C1] do_exit+0x7c7/0x2bf0 [ 485.084062][ C1] ? __pfx___might_resched+0x10/0x10 [ 485.089314][ C1] ? __pfx_do_exit+0x10/0x10 [ 485.093872][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 485.098865][ C1] ? find_held_lock+0x2b/0x80 [ 485.103509][ C1] do_group_exit+0xd3/0x2a0 [ 485.107981][ C1] get_signal+0x2671/0x26d0 [ 485.112452][ C1] ? __pfx___mm_populate+0x10/0x10 [ 485.117537][ C1] ? __pfx_get_signal+0x10/0x10 [ 485.122353][ C1] ? vm_mmap_pgoff+0x103/0x470 [ 485.127092][ C1] arch_do_signal_or_restart+0x8f/0x7c0 [ 485.132609][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 485.138751][ C1] ? ksys_mmap_pgoff+0x85/0x5c0 [ 485.143571][ C1] ? xfd_validate_state+0x61/0x180 [ 485.148649][ C1] ? __pfx_ksys_write+0x10/0x10 [ 485.153472][ C1] exit_to_user_mode_loop+0x85/0x130 [ 485.158728][ C1] do_syscall_64+0x426/0xfa0 [ 485.163292][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.169153][ C1] RIP: 0033:0x7fce8b98eec9 [ 485.173532][ C1] RSP: 002b:00007fce8c73e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 485.181908][ C1] RAX: 0000200000000000 RBX: 00007fce8bbe5fa0 RCX: 00007fce8b98eec9 [ 485.189846][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 485.197785][ C1] RBP: 00007fce8ba11f91 R08: ffffffffffffffff R09: 0000000000000000 [ 485.205722][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 485.213661][ C1] R13: 00007fce8bbe6038 R14: 00007fce8bbe5fa0 R15: 00007ffda67375b8 [ 485.221607][ C1] [ 485.224595][ C1] task:syz.0.856 state:R running task stack:26232 pid:9311 tgid:9311 ppid:5818 task_flags:0x40044c flags:0x00080002 [ 485.238031][ C1] Call Trace: [ 485.241279][ C1] [ 485.244184][ C1] __schedule+0x1190/0x5de0 [ 485.248663][ C1] ? __pfx___schedule+0x10/0x10 [ 485.253480][ C1] ? lookup_page_ext+0x61/0x1d0 [ 485.258300][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 485.263298][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 485.268639][ C1] preempt_schedule_common+0x44/0xc0 [ 485.273891][ C1] preempt_schedule_thunk+0x16/0x30 [ 485.279059][ C1] _raw_spin_unlock+0x3e/0x50 [ 485.283701][ C1] unmap_page_range+0xf71/0x41b0 [ 485.288622][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 485.293965][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 485.298872][ C1] ? uprobe_munmap+0x20/0x600 [ 485.303519][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 485.309394][ C1] unmap_vmas+0x218/0x470 [ 485.313697][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 485.318526][ C1] exit_mmap+0x1b2/0xb90 [ 485.322741][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 485.327486][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 485.333002][ C1] __mmput+0x12a/0x410 [ 485.337039][ C1] mmput+0x62/0x70 [ 485.340725][ C1] do_exit+0x7c7/0x2bf0 [ 485.344862][ C1] ? __pfx_do_exit+0x10/0x10 [ 485.349419][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 485.354411][ C1] ? find_held_lock+0x2b/0x80 [ 485.359057][ C1] do_group_exit+0xd3/0x2a0 [ 485.363529][ C1] get_signal+0x2671/0x26d0 [ 485.367998][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 485.373171][ C1] ? __pfx_get_signal+0x10/0x10 [ 485.377988][ C1] ? do_futex+0x122/0x350 [ 485.382289][ C1] ? __pfx_do_futex+0x10/0x10 [ 485.386935][ C1] arch_do_signal_or_restart+0x8f/0x7c0 [ 485.392451][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 485.398588][ C1] ? xfd_validate_state+0x61/0x180 [ 485.403668][ C1] exit_to_user_mode_loop+0x85/0x130 [ 485.408923][ C1] do_syscall_64+0x426/0xfa0 [ 485.413482][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.419343][ C1] RIP: 0033:0x7f58ae58eec9 [ 485.423723][ C1] RSP: 002b:00007fffe93fa698 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 485.432102][ C1] RAX: 0000000000000000 RBX: 000000000005945f RCX: 00007f58ae58eec9 [ 485.440040][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f58ae7e627c [ 485.447977][ C1] RBP: 0000000000000032 R08: 00007f58af416000 R09: 0000000ae93fa98f [ 485.455914][ C1] R10: 00007fffe93fa790 R11: 0000000000000246 R12: 00007f58ae7e627c [ 485.463852][ C1] R13: 00007fffe93fa790 R14: 0000000000059491 R15: 00007fffe93fa7b0 [ 485.471796][ C1] [ 486.116646][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 486.134304][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 487.220482][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 487.237509][ T1297] ieee802154 phy1 wpan1: encryption failed: -22