last executing test programs: 36.549472204s ago: executing program 1 (id=1286): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x123080) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000380)={0x0, 0x9dc8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 35.021860256s ago: executing program 1 (id=1291): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (fail_nth: 2) close(r4) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x808) getsockopt$sock_int(r5, 0x1, 0x1e, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002100)={0x0, @remote, @dev}, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, 0x0) 30.466921996s ago: executing program 4 (id=1300): add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) r3 = socket(0x28, 0x5, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0xb, 0x7}}}, 0x24}}, 0x4008000) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000000180)={0x2d, "f1cf45ea0a9dd688f28053a4261b5905bc2f718fa2dc6ed1eaea9ab4cc2b9fc5", 0x4, 0x8, 0x5, 0x2e, 0x2, 0x2, 0xa, 0x8}) write(r4, &(0x7f0000000000)='3', 0x4e) setsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, 0x0, 0x0) 30.461589984s ago: executing program 1 (id=1301): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{0x0}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, &(0x7f0000000080)={@hyper, 0x7}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000001a00)={'comedi_bond\x00', [0x2000, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff9, 0x400001, 0x6, 0x8, 0x0, 0x7b, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x6, 0x2, 0x6, 0x4006, 0x0, 0x3]}) 28.490847837s ago: executing program 4 (id=1304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000850000002a00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 27.015983207s ago: executing program 1 (id=1307): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f0000000500), 0x0}, 0x20) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 26.224491786s ago: executing program 1 (id=1308): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x80) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='hpfs\x00', 0x20920d1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000200)={r6}) 26.19985999s ago: executing program 3 (id=1309): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'veth0_vlan\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xf, 0x5, 0x1, 0x3, 0xff, 0x3, 0x10, 0x5, 0x8, 0x7373, 0xe, 0x2, 0x5, 0x6, 0xfffffffc, 0x3, 0x0, 0x0, 0x8001, 0x0, 0x800, 0x200, 0x9}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/2274], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x501181, 0x10) mkdirat(r3, &(0x7f0000000400)='./file0\x00', 0x1) socketpair(0x11, 0x2, 0x300, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xef, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008001be0ffff00fe4002002f77fbac141416e000000162079f4b4d0f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6e", 0x0, 0x8, 0x60000000}, 0x50) 25.866394044s ago: executing program 0 (id=1310): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000161000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="0f070f78410064366726660f29d60f166500ba610066ed0f20d86635200000000f22d80f2361e4fdc1dc00660f72e14b", 0x30}], 0x1, 0x5b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x1fc, @loopback, 0x3}, 0x1c) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x24000045, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, 0x0, 0x30) creat(0x0, 0x0) mkdir(0x0, 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r6, &(0x7f0000000240)='6', 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 25.071032527s ago: executing program 3 (id=1312): socket(0x10, 0x803, 0x0) r0 = socket(0x15, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./dev\x00', 0x1f7) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e) r4 = socket(0xa, 0x3, 0x87) socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={@local, 0x43, r5}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) socket$nl_netfilter(0x10, 0x3, 0xc) 25.049501155s ago: executing program 0 (id=1313): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="010000000000ffffffee000000000000000000006bd80054eca0004bc04c4bb989bc182b6063f50c4cf3c532635db03b47e238be58b8094a12a46652994e41e9e0a51e20079896e7a8e8e2786f86486eb6251542d7fa8bcea9173ea3447e7a4e1d7fbebff296c638dacf5d6a8b712ca1d77a8e6b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r0, 0x58, &(0x7f0000000700)}, 0x10) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0x9) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) r5 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r6, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r7, &(0x7f0000000100)='1', 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x4, 0x4, 0x4, @empty, @mcast2, 0x10, 0x700, 0xffff, 0x1}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xac, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0xffffffffffffff85, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x15}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x0, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x0, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="64000000100003051600", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r3, 0x40109441, &(0x7f0000000200)={0x901, 0x0, 0xc}) 24.995101668s ago: executing program 4 (id=1314): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000850000002a00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.38855697s ago: executing program 2 (id=1315): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000680)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000b00)=[{&(0x7f0000000bc0)=""/140, 0x8c}, {&(0x7f0000000540)=""/210, 0xd2}], 0x2, 0x60, 0x2) 24.387399219s ago: executing program 0 (id=1316): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x80}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x54) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x620}) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1ff, 0x86}, 0x90) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) write(r7, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x44444444444', 0x2a) 24.091364713s ago: executing program 3 (id=1317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000680)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, 0x0, 0x0, 0x60, 0x2) 23.867362255s ago: executing program 2 (id=1318): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) readv(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='hpfs\x00', 0x20920d1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) ioctl$KDSIGACCEPT(r0, 0x5607, 0x4) open(0x0, 0x282080, 0x8e) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000200)={r8}) 22.674346507s ago: executing program 3 (id=1319): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{0x0}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, &(0x7f0000000080)={@hyper, 0x7}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000001a00)={'comedi_bond\x00', [0x2000, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff9, 0x400001, 0x6, 0x8, 0x0, 0x7b, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x6, 0x2, 0x6, 0x4006, 0x0, 0x3]}) 20.347404763s ago: executing program 0 (id=1320): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) poll(&(0x7f0000000180)=[{r1, 0x1008}], 0x1, 0x101) close_range(r0, 0xffffffffffffffff, 0x0) 20.331696141s ago: executing program 1 (id=1321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000b00)=[{&(0x7f0000000bc0)=""/140, 0x8c}, {&(0x7f0000000540)=""/210, 0xd2}], 0x2, 0x60, 0x2) 20.311550267s ago: executing program 4 (id=1322): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160ae36504b68675f8001d000a00a0e69ee517d344000000000000ce27251e6182949a36c23d3b48dfd8cdbf9367b4fa06000000c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x80) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd16, 0x5, 0x7, 0x7f, {0x1, 0x5, 0x7, 0x6, 0x0, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, r8, r9, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x101000001, {0x5, 0x3, 0x9, 0x8, 0x8, 0xffff672a, {0xfffffffffffffffe, 0x6, 0xbd32, 0x7, 0x6, 0xffffffffffdff7b7, 0x5, 0xa, 0x7, 0xa000, 0x3, 0x0, 0xee01, 0x7fff, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 19.768821496s ago: executing program 3 (id=1323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0xf00}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5000}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x3) r4 = accept4$bt_l2cap(r3, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, r2, 0x300, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5002}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r5, 0x80845663, &(0x7f0000000080)={0x0, @reserved}) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5005}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000004f000100000002000000a5d7f034"], 0x14}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r4, r3, 0x5, 0x6c, &(0x7f0000000240)="745d408a880cf6905498fdd8be1d71714e38f4504f8ee2a7f905aa1da2770e5df6d389953788662e855aa958c762ae171910273525361c7f5bc528f91af3325df4848527829e0482915f0691d727366ba478a34970564620771fa4d9788cc233f5c4e510f02dce70595eb785", 0x4b, 0x9, 0x1e8d, 0x5, 0x8, 0x0, 0x68f2ad21, 'syz1\x00'}) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x5006}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x68}}, 0x0) 19.65335496s ago: executing program 2 (id=1324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000080)=0x1, 0x4) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dt2817\x00', [0x6484, 0xd7b, 0x8000000, 0x801, 0x3, 0x5, 0x4, 0x3ff, 0x54c6cff3, 0xf9, 0x2002, 0x1, 0x0, 0x1, 0x1, 0x6a, 0xa6a0, 0xc7c, 0x40001, 0x1, 0xe25, 0xcaa5, 0x10000, 0x20001e57, 0x3, 0x2000e66, 0x3, 0x2, 0x10004086, 0x1, 0xfffffff8, 0x7]}) write(r1, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000800)={0x2020}, 0x2020) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200c00, 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r0, 0xffffffffffffffff, r3, r4, r0], 0x5) 18.870339449s ago: executing program 2 (id=1325): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{0x0}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, &(0x7f0000000080)={@hyper, 0x7}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000001a00)={'comedi_bond\x00', [0x2000, 0x20, 0x4, 0x20000001, 0x25, 0x0, 0x400, 0x2, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff9, 0x400001, 0x6, 0x8, 0x0, 0x7b, 0x3, 0x40000003, 0x200089, 0x2, 0x4, 0x30001e5b, 0x3, 0x6, 0x2, 0x6, 0x4006, 0x0, 0x3]}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000880)={{r1}, "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"}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setns(0xc9, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000680)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xdc0, 0x2, 0x80000001, 0x559, 0x100, 0x92, "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"}}, 0xed8) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) 18.69003534s ago: executing program 4 (id=1326): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="010000000000ffffffee000000000000000000006bd80054eca0004bc04c4bb989bc182b6063f50c4cf3c532635db03b47e238be58b8094a12a46652994e41e9e0a51e20079896e7a8e8e2786f86486eb6251542d7fa8bcea9173ea3447e7a4e1d7fbebff296c638dacf5d6a8b712ca1d77a8e6b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r0, 0x58, &(0x7f0000000700)}, 0x10) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0x9) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) r5 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r6, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r7, &(0x7f0000000100)='1', 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x4, 0x4, 0x4, @empty, @mcast2, 0x10, 0x700, 0xffff, 0x1}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xac, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0xffffffffffffff85, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x15}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x0, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x0, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="64000000100003051600", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r3, 0x40109441, &(0x7f0000000200)={0x901, 0x0, 0xc}) 17.461060605s ago: executing program 2 (id=1327): socket(0x10, 0x803, 0x0) r0 = socket(0x15, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./dev\x00', 0x1f7) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e) r4 = socket(0xa, 0x3, 0x87) socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={@local, 0x43, r5}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) socket$nl_netfilter(0x10, 0x3, 0xc) 17.407125316s ago: executing program 3 (id=1328): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = fanotify_init(0x40, 0x8000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0881, 0x4) fanotify_mark(r1, 0x40, 0x18000018, r2, &(0x7f0000000040)='./file0\x00') r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @empty}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f0000000280)=@default_ap_ssid, 0x6, 0x0) connect$pppl2tp(r5, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0x3}}, 0x2e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000500)=0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) r8 = socket$inet(0x2, 0xa, 0x81) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, 0x0, 0x0) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000200)=0x1) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x400000000) readv(r9, &(0x7f0000000a00)=[{&(0x7f00000000c0)=""/34, 0x22}], 0x1) 17.246457552s ago: executing program 4 (id=1329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000850000002a00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.789091912s ago: executing program 0 (id=1330): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0x3ff000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000400)=0xf) ioctl(r3, 0x400455c8, &(0x7f0000000008)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0xfd) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0xc1, 0x0, 0x0, 0x804c040}, 0x0) 16.53766104s ago: executing program 2 (id=1331): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x80}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x54) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r2}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x620}) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1ff, 0x86}, 0x90) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) write(r7, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x44444444444', 0x2a) 16.497577595s ago: executing program 0 (id=1332): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000161000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="0f070f78410064366726660f29d60f166500ba610066ed0f20d86635200000000f22d80f2361e4fdc1dc00660f72e14b", 0x30}], 0x1, 0x5b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x1fc, @loopback, 0x3}, 0x1c) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x200006}, 0x1c) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, 0x0, 0x30) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000000240)) creat(0x0, 0x0) mkdir(0x0, 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 0s ago: executing program 32 (id=1321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000b00)=[{&(0x7f0000000bc0)=""/140, 0x8c}, {&(0x7f0000000540)=""/210, 0xd2}], 0x2, 0x60, 0x2) kernel console output (not intermixed with test programs): 4F3:074D.001C: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.2-1/input1 [ 534.349749][ T5785] elan 0003:04F3:074D.001C: Input device is not registered [ 534.521414][ T5785] elan 0003:04F3:074D.001C: probe with driver elan failed with error -119 [ 534.688387][ T5785] usb 3-1: USB disconnect, device number 35 [ 534.785877][ T5714] usb 5-1: USB disconnect, device number 22 [ 535.767727][ T9425] fido_id[9425]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 536.023764][ T31] audit: type=1400 audit(1789592947.777:1960): avc: denied { read } for pid=9432 comm="syz.2.1011" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 536.023900][ T31] audit: type=1400 audit(1789592947.777:1961): avc: denied { open } for pid=9432 comm="syz.2.1011" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 537.667021][ T9441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1015'. [ 538.193735][ T9443] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1014'. [ 538.312354][ T31] audit: type=1400 audit(1789592950.087:1962): avc: denied { ioctl } for pid=9444 comm="syz.2.1016" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=25075 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 538.394286][ T31] audit: type=1400 audit(1789592950.167:1963): avc: denied { create } for pid=9445 comm="syz.4.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 538.415199][ T31] audit: type=1400 audit(1789592950.187:1964): avc: denied { connect } for pid=9445 comm="syz.4.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 538.460052][ T31] audit: type=1400 audit(1789592950.237:1965): avc: denied { write } for pid=9445 comm="syz.4.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 538.640818][ T31] audit: type=1400 audit(1789592950.417:1966): avc: denied { create } for pid=9445 comm="syz.4.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 538.667869][ T31] audit: type=1400 audit(1789592950.447:1967): avc: denied { bind } for pid=9445 comm="syz.4.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 538.669184][ T31] audit: type=1400 audit(1789592950.447:1968): avc: denied { accept } for pid=9445 comm="syz.4.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 538.671528][ T9450] xt_LOG: prefix is not null-terminated [ 538.674827][ T31] audit: type=1400 audit(1789592950.447:1969): avc: denied { write } for pid=9445 comm="syz.4.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 538.905490][ T5714] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 539.087385][ T5714] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 539.093262][ T5714] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 539.093287][ T5714] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.093305][ T5714] usb 5-1: config 0 has no interface number 0 [ 539.134518][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.134549][ T5714] usb 5-1: Product: syz [ 539.134563][ T5714] usb 5-1: Manufacturer: syz [ 539.134577][ T5714] usb 5-1: SerialNumber: syz [ 539.166010][ T5714] usb 5-1: config 0 descriptor?? [ 539.180615][ T5714] hub 5-1:0.31: bad descriptor, ignoring hub [ 539.180638][ T5714] hub 5-1:0.31: probe with driver hub failed with error -5 [ 539.276697][ T5714] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 539.277242][ T5714] uvcvideo 5-1:0.31: Entity type for entity Output 32774 was not initialized! [ 539.277608][ T5714] uvcvideo 5-1:0.31: Failed to create links for entity 32774 [ 539.277634][ T5714] uvcvideo 5-1:0.31: Failed to register entities (-22). [ 539.371690][ T31] audit: type=1400 audit(1789592951.147:1970): avc: denied { ioctl } for pid=9454 comm="syz.1.1009" path="socket:[25101]" dev="sockfs" ino=25101 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 539.667012][ T9457] ceph: No mds server is up or the cluster is laggy [ 539.672256][ T5714] libceph: connect (1)[c::]:6789 error -101 [ 539.724333][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 540.229119][ T31] audit: type=1400 audit(1789592952.007:1971): avc: denied { map_create } for pid=9461 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 542.166891][ T30] usb 5-1: USB disconnect, device number 23 [ 543.130595][ T9479] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 543.130780][ T9479] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 543.130849][ T9479] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 543.130911][ T9479] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 543.130976][ T9479] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 543.413240][ T31] kauditd_printk_skb: 36 callbacks suppressed [ 543.413257][ T31] audit: type=1400 audit(1789592955.187:2008): avc: denied { read } for pid=9482 comm="syz.1.1024" dev="nsfs" ino=4026532940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 543.413466][ T31] audit: type=1400 audit(1789592955.187:2009): avc: denied { open } for pid=9482 comm="syz.1.1024" path="net:[4026532940]" dev="nsfs" ino=4026532940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 543.413873][ T31] audit: type=1400 audit(1789592955.187:2010): avc: denied { create } for pid=9482 comm="syz.1.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 543.509844][ T31] audit: type=1400 audit(1789592955.287:2011): avc: denied { bind } for pid=9482 comm="syz.1.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 543.602845][ T31] audit: type=1400 audit(1789592955.377:2012): avc: denied { create } for pid=9482 comm="syz.1.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 543.606148][ T31] audit: type=1400 audit(1789592955.387:2013): avc: denied { bind } for pid=9482 comm="syz.1.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 544.051154][ T31] audit: type=1400 audit(1789592955.827:2014): avc: denied { create } for pid=9485 comm="syz.4.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 544.118619][ T31] audit: type=1400 audit(1789592955.897:2015): avc: denied { read write } for pid=9485 comm="syz.4.1025" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 544.170981][ T31] audit: type=1400 audit(1789592955.897:2016): avc: denied { open } for pid=9485 comm="syz.4.1025" path="/dev/uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 544.254033][ T31] audit: type=1400 audit(1789592956.027:2017): avc: denied { create } for pid=9485 comm="syz.4.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 544.825588][ T5600] Bluetooth: hci0: command 0x0419 tx timeout [ 545.185559][ T5600] Bluetooth: hci4: command 0x0406 tx timeout [ 545.187480][ T5600] Bluetooth: hci3: command 0x0406 tx timeout [ 545.187935][ T5600] Bluetooth: hci2: command 0x0c1a tx timeout [ 545.188033][ T5600] Bluetooth: hci1: command 0x0406 tx timeout [ 545.733922][ T9494] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1026'. [ 546.116772][ T9501] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1028'. [ 548.094685][ T5728] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 548.258361][ T5728] usb 2-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=9f.db [ 548.270649][ T5728] usb 2-1: config 8 has an invalid interface number: 33 but max is 0 [ 548.270677][ T5728] usb 2-1: config 8 has no interface number 0 [ 548.270702][ T5728] usb 2-1: config 8 interface 33 has no altsetting 0 [ 548.272418][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.272441][ T5728] usb 2-1: Product: syz [ 548.272455][ T5728] usb 2-1: Manufacturer: syz [ 548.272470][ T5728] usb 2-1: SerialNumber: syz [ 549.011608][ T5728] dvb-usb: found a 'DiBcom TFE7790P reference design' in warm state. [ 549.043087][ T9519] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 549.043205][ T9519] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 549.071363][ T9519] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 549.071504][ T9519] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 549.103187][ T9519] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 549.129012][ T5728] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 549.170063][ T5728] dvbdev: DVB: registering new adapter (DiBcom TFE7790P reference design) [ 549.170111][ T5728] usb 2-1: media controller created [ 549.521131][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 549.636909][ T5728] DVB: Unable to find symbol dib7000p_attach() [ 549.636921][ T5728] dvb-usb: no frontend was attached by 'DiBcom TFE7790P reference design' [ 549.775923][ T5728] rc_core: IR keymap rc-dib0700-rc5 not found [ 549.775940][ T5728] Registered IR keymap rc-empty [ 549.776151][ T5728] dvb-usb: could not initialize remote control. [ 549.776160][ T5728] dvb-usb: DiBcom TFE7790P reference design successfully initialized and connected. [ 549.816381][ T5728] usb 2-1: USB disconnect, device number 36 [ 549.842767][ T5728] dvb-usb: DiBcom TFE7790P reference design successfully deinitialized and disconnected. [ 549.914970][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 549.914990][ T31] audit: type=1400 audit(1789592961.687:2040): avc: denied { create } for pid=9530 comm="syz.3.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 550.983870][ T5611] Bluetooth: hci0: command 0x0419 tx timeout [ 551.006382][ T31] audit: type=1400 audit(1789592962.787:2041): avc: denied { setopt } for pid=9527 comm="syz.2.1037" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 551.014795][ T9529] syz_tun: entered allmulticast mode [ 551.041054][ T9529] FAULT_INJECTION: forcing a failure. [ 551.041054][ T9529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.041080][ T9529] CPU: 0 UID: 0 PID: 9529 Comm: syz.2.1037 Not tainted syzkaller #0 PREEMPT(full) [ 551.041098][ T9529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 551.041108][ T9529] Call Trace: [ 551.041113][ T9529] [ 551.041119][ T9529] dump_stack_lvl+0x100/0x190 [ 551.041147][ T9529] should_fail_ex.cold+0x5/0xa [ 551.041170][ T9529] _copy_to_iter+0x5a4/0x1720 [ 551.041194][ T9529] ? __pfx__copy_to_iter+0x10/0x10 [ 551.041210][ T9529] ? mr_mfc_seq_stop+0x120/0x1d0 [ 551.041230][ T9529] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 551.041258][ T9529] seq_read_iter+0x691/0x1270 [ 551.041287][ T9529] seq_read+0x344/0x4d0 [ 551.041306][ T9529] ? __pfx_seq_read+0x10/0x10 [ 551.041334][ T9529] ? selinux_file_permission+0x8f/0x6d0 [ 551.041356][ T9529] ? __pfx_seq_read+0x10/0x10 [ 551.041374][ T9529] proc_reg_read+0x240/0x330 [ 551.041398][ T9529] ? __pfx_proc_reg_read+0x10/0x10 [ 551.041421][ T9529] vfs_read+0x1e4/0xb40 [ 551.041438][ T9529] ? lock_acquire+0x1d1/0x380 [ 551.041456][ T9529] ? __fget_files+0x34/0x3d0 [ 551.041474][ T9529] ? __pfx_vfs_read+0x10/0x10 [ 551.041489][ T9529] ? find_held_lock+0x2b/0x80 [ 551.041509][ T9529] ? __fget_files+0x215/0x3d0 [ 551.041527][ T9529] ? __fget_files+0x215/0x3d0 [ 551.041550][ T9529] ? __fget_files+0x21f/0x3d0 [ 551.041576][ T9529] __x64_sys_pread64+0x1eb/0x250 [ 551.041594][ T9529] ? __pfx___x64_sys_pread64+0x10/0x10 [ 551.041619][ T9529] do_syscall_64+0x123/0x790 [ 551.041644][ T9529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.041659][ T9529] RIP: 0033:0x7fa018d9e159 [ 551.041673][ T9529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.041688][ T9529] RSP: 002b:00007fa019d18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 551.041704][ T9529] RAX: ffffffffffffffda RBX: 00007fa019026090 RCX: 00007fa018d9e159 [ 551.041714][ T9529] RDX: 00000000000000fd RSI: 0000200000000100 RDI: 0000000000000009 [ 551.041727][ T9529] RBP: 00007fa019d18090 R08: 0000000000000000 R09: 0000000000000000 [ 551.041737][ T9529] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 551.041746][ T9529] R13: 00007fa019026128 R14: 00007fa019026090 R15: 00007ffe02349278 [ 551.041770][ T9529] [ 551.046589][ T31] audit: type=1400 audit(1789592962.817:2042): avc: denied { write } for pid=9527 comm="syz.2.1037" name="ip_mr_cache" dev="proc" ino=4026533113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 551.105592][ T5600] Bluetooth: hci2: command 0x0c1a tx timeout [ 551.105621][ T5600] Bluetooth: hci3: command 0x0406 tx timeout [ 551.105640][ T5600] Bluetooth: hci1: command 0x0406 tx timeout [ 551.105676][ T5611] Bluetooth: hci4: command 0x0406 tx timeout [ 551.712643][ T9545] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1041'. [ 551.915917][ T31] audit: type=1400 audit(1789592963.697:2043): avc: denied { ioctl } for pid=9550 comm="syz.1.1043" path="socket:[25388]" dev="sockfs" ino=25388 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 551.962610][ T31] audit: type=1400 audit(1789592963.737:2044): avc: denied { module_request } for pid=9550 comm="syz.1.1043" kmod="netdev-dvmrp0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 551.987441][ T31] audit: type=1400 audit(1789592963.767:2045): avc: denied { setopt } for pid=9550 comm="syz.1.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 552.021637][ T31] audit: type=1400 audit(1789592963.797:2046): avc: denied { sys_module } for pid=9550 comm="syz.1.1043" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 552.265356][ T30] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 552.416854][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 552.417452][ T30] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 552.423334][ T30] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.423353][ T30] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 552.423385][ T30] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.423413][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.435866][ T30] hub 2-1:1.0: bad descriptor, ignoring hub [ 552.435885][ T30] hub 2-1:1.0: probe with driver hub failed with error -5 [ 552.440217][ T30] cdc_wdm 2-1:1.0: skipping garbage [ 552.440230][ T30] cdc_wdm 2-1:1.0: skipping garbage [ 552.440468][ T30] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 552.461595][ T31] audit: type=1400 audit(1789592964.237:2047): avc: denied { create } for pid=9561 comm="syz.2.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 552.475819][ T31] audit: type=1400 audit(1789592964.257:2048): avc: denied { write } for pid=9561 comm="syz.2.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 552.550483][ T31] audit: type=1400 audit(1789592964.327:2049): avc: denied { read } for pid=9561 comm="syz.2.1045" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 554.055410][ T5588] usb 2-1: USB disconnect, device number 37 [ 554.853329][ T5588] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 555.039902][ T9577] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 555.040083][ T9577] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 555.040508][ T9577] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 555.040621][ T9577] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 555.040738][ T9577] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 555.116875][ T5588] usb 5-1: Using ep0 maxpacket: 8 [ 555.119838][ T5588] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 555.123423][ T5588] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.123436][ T5588] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 555.123456][ T5588] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.123475][ T5588] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.158203][ T5588] hub 5-1:1.0: bad descriptor, ignoring hub [ 555.158232][ T5588] hub 5-1:1.0: probe with driver hub failed with error -5 [ 555.158614][ T5588] cdc_wdm 5-1:1.0: skipping garbage [ 555.158625][ T5588] cdc_wdm 5-1:1.0: skipping garbage [ 555.158677][ T5588] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 555.881735][ T9599] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1053'. [ 555.923178][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 555.923218][ T31] audit: type=1400 audit(1789592967.697:2053): avc: denied { read write } for pid=9596 comm="syz.3.1051" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 555.923427][ T31] audit: type=1400 audit(1789592967.697:2054): avc: denied { open } for pid=9596 comm="syz.3.1051" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 555.923610][ T31] audit: type=1400 audit(1789592967.697:2055): avc: denied { mount } for pid=9596 comm="syz.3.1051" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 556.162121][ T31] audit: type=1400 audit(1789592967.807:2056): avc: denied { map } for pid=9596 comm="syz.3.1051" path="socket:[25951]" dev="sockfs" ino=25951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 556.425327][ T5693] usb 5-1: USB disconnect, device number 24 [ 556.465222][ T5611] Bluetooth: hci0: command 0x0419 tx timeout [ 556.551023][ T31] audit: type=1400 audit(1789592968.327:2057): avc: denied { read write } for pid=9607 comm="syz.1.1056" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 556.551211][ T31] audit: type=1400 audit(1789592968.327:2058): avc: denied { open } for pid=9607 comm="syz.1.1056" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 556.648532][ T31] audit: type=1400 audit(1789592968.427:2059): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 556.714324][ T31] audit: type=1400 audit(1789592968.487:2060): avc: denied { create } for pid=9607 comm="syz.1.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 556.721062][ T31] audit: type=1400 audit(1789592968.497:2061): avc: denied { getopt } for pid=9607 comm="syz.1.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 556.768794][ T31] audit: type=1400 audit(1789592968.547:2062): avc: denied { ioctl } for pid=9607 comm="syz.1.1056" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 556.803992][ T9612] comedi comedi3: pcl730: I/O base address not correctly aligned [ 557.076577][ T5728] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 557.105167][ T5611] Bluetooth: hci4: command 0x0406 tx timeout [ 557.105193][ T5611] Bluetooth: hci3: command 0x0406 tx timeout [ 557.105207][ T5611] Bluetooth: hci2: command 0x0c1a tx timeout [ 557.105220][ T5611] Bluetooth: hci1: command 0x0406 tx timeout [ 557.281274][ T5728] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 557.308812][ T5728] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 557.339591][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 557.339653][ T5728] usb 4-1: Product: syz [ 557.339694][ T5728] usb 4-1: Manufacturer: syz [ 557.339730][ T5728] usb 4-1: SerialNumber: syz [ 557.371299][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.371342][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.414661][ T5728] usb 4-1: config 0 descriptor?? [ 557.417337][ T9615] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 557.452166][ T5728] hub 4-1:0.0: bad descriptor, ignoring hub [ 557.452228][ T5728] hub 4-1:0.0: probe with driver hub failed with error -5 [ 557.557567][ T9624] ceph: No mds server is up or the cluster is laggy [ 557.568806][ T5714] libceph: connect (1)[c::]:6789 error -101 [ 557.569672][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 557.805164][ T5693] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 557.837377][ T5588] libceph: connect (1)[c::]:6789 error -101 [ 557.838147][ T5588] libceph: mon0 (1)[c::]:6789 connect error [ 557.885802][ T5728] usb 4-1: USB disconnect, device number 31 [ 557.955150][ T5693] usb 5-1: Using ep0 maxpacket: 8 [ 557.961989][ T5693] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 557.987308][ T5693] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.987334][ T5693] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 557.987369][ T5693] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.987411][ T5693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.347583][ T5588] libceph: connect (1)[c::]:6789 error -101 [ 558.348175][ T5588] libceph: mon0 (1)[c::]:6789 connect error [ 558.691816][ T5693] hub 5-1:1.0: bad descriptor, ignoring hub [ 558.691841][ T5693] hub 5-1:1.0: probe with driver hub failed with error -5 [ 558.693754][ T5693] cdc_wdm 5-1:1.0: skipping garbage [ 558.693770][ T5693] cdc_wdm 5-1:1.0: skipping garbage [ 558.693826][ T5693] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 560.103079][ T9637] comedi comedi3: Minor 8192 is invalid! [ 561.115350][ T31] kauditd_printk_skb: 37 callbacks suppressed [ 561.115367][ T31] audit: type=1400 audit(1789592972.887:2100): avc: denied { create } for pid=9638 comm="syz.0.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 561.154538][ T31] audit: type=1400 audit(1789592972.927:2101): avc: denied { ioctl } for pid=9638 comm="syz.0.1065" path="socket:[26634]" dev="sockfs" ino=26634 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 561.181109][ T5728] usb 5-1: USB disconnect, device number 25 [ 561.201249][ T31] audit: type=1400 audit(1789592972.977:2102): avc: denied { module_request } for pid=9638 comm="syz.0.1065" kmod="netdev-dvmrp0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 561.265701][ T31] audit: type=1400 audit(1789592973.047:2103): avc: denied { create } for pid=9638 comm="syz.0.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 561.280710][ T31] audit: type=1400 audit(1789592973.057:2104): avc: denied { setopt } for pid=9638 comm="syz.0.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 561.280749][ T31] audit: type=1400 audit(1789592973.057:2105): avc: denied { bind } for pid=9638 comm="syz.0.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 561.280864][ T31] audit: type=1400 audit(1789592973.057:2106): avc: denied { name_bind } for pid=9638 comm="syz.0.1065" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 561.281153][ T31] audit: type=1400 audit(1789592973.057:2107): avc: denied { node_bind } for pid=9638 comm="syz.0.1065" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 561.288808][ T31] audit: type=1400 audit(1789592973.057:2108): avc: denied { read } for pid=9641 comm="syz.1.1066" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 561.288846][ T31] audit: type=1400 audit(1789592973.057:2109): avc: denied { open } for pid=9641 comm="syz.1.1066" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 561.635545][ T9644] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1066'. [ 561.765728][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1067'. [ 561.769726][ T9651] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1066'. [ 562.215539][ T5728] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 562.386931][ T5728] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 562.390915][ T5728] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.390947][ T5728] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.390966][ T5728] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 562.390990][ T5728] usb 3-1: config 0 interface 0 has no altsetting 0 [ 562.391016][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.396014][ T5728] usb 3-1: config 0 descriptor?? [ 563.281230][ T5728] usbhid 3-1:0.0: can't add hid device: -71 [ 563.281311][ T5728] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 563.286430][ T5728] usb 3-1: USB disconnect, device number 36 [ 563.465157][ T5714] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 563.616103][ T5714] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 563.617217][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 563.617245][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.617275][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.623435][ T5714] usb 2-1: config 0 descriptor?? [ 564.109855][ T9681] comedi comedi3: Minor 8192 is invalid! [ 564.273397][ T5714] aquacomputer_d5next 0003:0C70:F0B6.001D: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0 [ 564.624391][ T9682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.631034][ T9682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.937030][ T5714] usb 2-1: USB disconnect, device number 38 [ 565.082676][ T9684] fido_id[9684]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 565.125317][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1078'. [ 565.263636][ T5728] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 565.435883][ T5728] usb 3-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=9f.db [ 565.440002][ T5728] usb 3-1: config 8 has an invalid interface number: 33 but max is 0 [ 565.440055][ T5728] usb 3-1: config 8 has no interface number 0 [ 565.440156][ T5728] usb 3-1: config 8 interface 33 has no altsetting 0 [ 565.522473][ T9698] veth1_to_bond: entered promiscuous mode [ 565.524818][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.524848][ T5728] usb 3-1: Product: syz [ 565.524910][ T5728] usb 3-1: Manufacturer: syz [ 565.524972][ T5728] usb 3-1: SerialNumber: syz [ 565.820704][ T9693] veth1_to_bond: entered allmulticast mode [ 566.250012][ T31] kauditd_printk_skb: 42 callbacks suppressed [ 566.250025][ T31] audit: type=1400 audit(1789592978.027:2152): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 566.300690][ T9689] veth1_to_bond: left allmulticast mode [ 566.300739][ T9689] veth1_to_bond: left promiscuous mode [ 566.362680][ T31] audit: type=1400 audit(1789592978.137:2153): avc: denied { create } for pid=9702 comm="syz.1.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 566.387678][ T31] audit: type=1400 audit(1789592978.167:2154): avc: denied { connect } for pid=9702 comm="syz.1.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 566.446965][ T31] audit: type=1400 audit(1789592978.227:2155): avc: denied { write } for pid=9702 comm="syz.1.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 567.485293][ T31] audit: type=1400 audit(1789592978.517:2156): avc: denied { write } for pid=9707 comm="syz.3.1084" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 567.485338][ T31] audit: type=1400 audit(1789592978.517:2157): avc: denied { connect } for pid=9707 comm="syz.3.1084" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 567.485368][ T31] audit: type=1400 audit(1789592978.517:2158): avc: denied { name_connect } for pid=9707 comm="syz.3.1084" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 567.538929][ T5728] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware [ 567.539716][ T31] audit: type=1400 audit(1789592979.317:2159): avc: denied { firmware_load } for pid=5728 comm="kworker/0:7" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 567.539916][ T5728] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 567.539937][ T5728] dib0700: firmware download failed at 7 with -22 [ 567.596991][ T31] audit: type=1400 audit(1789592979.357:2160): avc: denied { create } for pid=9702 comm="syz.1.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 567.597631][ T31] audit: type=1400 audit(1789592979.357:2161): avc: denied { bind } for pid=9702 comm="syz.1.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 567.598857][ T9709] xt_LOG: prefix is not null-terminated [ 567.746336][ T5728] usb 3-1: USB disconnect, device number 37 [ 568.097019][ T5706] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 568.256211][ T5706] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 568.258512][ T5706] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 568.258535][ T5706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.258552][ T5706] usb 2-1: config 0 has no interface number 0 [ 568.262071][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.262093][ T5706] usb 2-1: Product: syz [ 568.262114][ T5706] usb 2-1: Manufacturer: syz [ 568.262127][ T5706] usb 2-1: SerialNumber: syz [ 568.270947][ T5706] usb 2-1: config 0 descriptor?? [ 568.329271][ T5706] hub 2-1:0.31: bad descriptor, ignoring hub [ 568.329295][ T5706] hub 2-1:0.31: probe with driver hub failed with error -5 [ 568.336677][ T5706] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 568.336725][ T5706] uvcvideo 2-1:0.31: Entity type for entity Output 32774 was not initialized! [ 568.336766][ T5706] uvcvideo 2-1:0.31: Failed to create links for entity 32774 [ 568.336779][ T5706] uvcvideo 2-1:0.31: Failed to register entities (-22). [ 568.619469][ T9722] comedi comedi3: Minor 8192 is invalid! [ 569.505495][ T1112] rpcbind: server 127.0.0.1 not responding, timed out [ 569.872192][ T5728] usb 2-1: USB disconnect, device number 39 [ 570.408025][ T9736] FAULT_INJECTION: forcing a failure. [ 570.408025][ T9736] name failslab, interval 1, probability 0, space 0, times 0 [ 570.408048][ T9736] CPU: 1 UID: 0 PID: 9736 Comm: syz.1.1095 Not tainted syzkaller #0 PREEMPT(full) [ 570.408061][ T9736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 570.408067][ T9736] Call Trace: [ 570.408071][ T9736] [ 570.408076][ T9736] dump_stack_lvl+0x100/0x190 [ 570.408096][ T9736] should_fail_ex.cold+0x5/0xa [ 570.408113][ T9736] should_failslab+0xc2/0x120 [ 570.408127][ T9736] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 570.408139][ T9736] ? __alloc_skb+0x5b7/0x710 [ 570.408152][ T9736] ? __alloc_skb+0x140/0x710 [ 570.408166][ T9736] __alloc_skb+0x140/0x710 [ 570.408177][ T9736] ? __alloc_skb+0x5b7/0x710 [ 570.408189][ T9736] ? __pfx___alloc_skb+0x10/0x10 [ 570.408205][ T9736] netlink_alloc_large_skb+0x69/0x150 [ 570.408219][ T9736] netlink_sendmsg+0x680/0xda0 [ 570.408234][ T9736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.408247][ T9736] ? selinux_socket_sendmsg+0x198/0x2f0 [ 570.408262][ T9736] ____sys_sendmsg+0xa4d/0xbe0 [ 570.408277][ T9736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.408290][ T9736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 570.408310][ T9736] ? lock_acquire+0x1d1/0x380 [ 570.408322][ T9736] ? get_pid_task+0x2a/0x250 [ 570.408338][ T9736] ___sys_sendmsg+0x190/0x1e0 [ 570.408356][ T9736] ? __pfx____sys_sendmsg+0x10/0x10 [ 570.408373][ T9736] ? get_pid_task+0x106/0x250 [ 570.408393][ T9736] ? find_held_lock+0x2b/0x80 [ 570.408418][ T9736] __sys_sendmsg+0x160/0x210 [ 570.408432][ T9736] ? __pfx___sys_sendmsg+0x10/0x10 [ 570.408453][ T9736] do_syscall_64+0x123/0x790 [ 570.408470][ T9736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.408482][ T9736] RIP: 0033:0x7f344e19e159 [ 570.408491][ T9736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.408502][ T9736] RSP: 002b:00007f344f131028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.408514][ T9736] RAX: ffffffffffffffda RBX: 00007f344e425fa0 RCX: 00007f344e19e159 [ 570.408521][ T9736] RDX: 0000000008000002 RSI: 0000200000000180 RDI: 0000000000000004 [ 570.408533][ T9736] RBP: 00007f344f131090 R08: 0000000000000000 R09: 0000000000000000 [ 570.408539][ T9736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.408546][ T9736] R13: 00007f344e426038 R14: 00007f344e425fa0 R15: 00007fffd5245fc8 [ 570.408561][ T9736] [ 570.893371][ T9745] comedi comedi3: Minor 8192 is invalid! [ 573.659389][ T9760] comedi comedi3: Minor 8192 is invalid! [ 573.736523][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 573.736540][ T31] audit: type=1400 audit(1789592985.517:2172): avc: denied { create } for pid=9754 comm="syz.2.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 573.750979][ T31] audit: type=1400 audit(1789592985.527:2173): avc: denied { connect } for pid=9754 comm="syz.2.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 573.807015][ T31] audit: type=1400 audit(1789592985.587:2174): avc: denied { read write } for pid=9755 comm="syz.1.1100" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 573.807061][ T31] audit: type=1400 audit(1789592985.587:2175): avc: denied { open } for pid=9755 comm="syz.1.1100" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 574.104844][ T9764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1101'. [ 574.114304][ T31] audit: type=1400 audit(1789592985.877:2176): avc: denied { ioctl } for pid=9754 comm="syz.2.1101" path="socket:[26180]" dev="sockfs" ino=26180 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 574.114348][ T31] audit: type=1400 audit(1789592985.877:2177): avc: denied { ioctl } for pid=9754 comm="syz.2.1101" path="socket:[27040]" dev="sockfs" ino=27040 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 574.243885][ T9766] comedi comedi3: Minor 8192 is invalid! [ 574.975285][ T31] audit: type=1400 audit(1789592986.757:2178): avc: denied { shutdown } for pid=9767 comm="syz.4.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 575.919155][ T31] audit: type=1400 audit(1789592987.697:2179): avc: denied { attach_queue } for pid=9777 comm="syz.1.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 575.951121][ T31] audit: type=1400 audit(1789592987.727:2180): avc: denied { listen } for pid=9777 comm="syz.1.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 575.951544][ T31] audit: type=1400 audit(1789592987.727:2181): avc: denied { accept } for pid=9777 comm="syz.1.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 576.669535][ T9784] xt_LOG: prefix is not null-terminated [ 576.915212][ T5707] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 577.067150][ T5707] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 577.069562][ T5707] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 577.069586][ T5707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.069603][ T5707] usb 4-1: config 0 has no interface number 0 [ 577.074090][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.074111][ T5707] usb 4-1: Product: syz [ 577.074125][ T5707] usb 4-1: Manufacturer: syz [ 577.074139][ T5707] usb 4-1: SerialNumber: syz [ 577.134896][ T5707] usb 4-1: config 0 descriptor?? [ 577.146098][ T5707] hub 4-1:0.31: bad descriptor, ignoring hub [ 577.146122][ T5707] hub 4-1:0.31: probe with driver hub failed with error -5 [ 577.151120][ T5707] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 577.151171][ T5707] uvcvideo 4-1:0.31: Entity type for entity Output 32774 was not initialized! [ 577.151215][ T5707] uvcvideo 4-1:0.31: Failed to create links for entity 32774 [ 577.151230][ T5707] uvcvideo 4-1:0.31: Failed to register entities (-22). [ 577.186228][ T5728] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 577.355149][ T5728] usb 2-1: Using ep0 maxpacket: 16 [ 577.355862][ T5728] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 577.357754][ T5728] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 577.357780][ T5728] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 577.357800][ T5728] usb 2-1: config 0 interface 0 has no altsetting 0 [ 577.359469][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.359490][ T5728] usb 2-1: Product: syz [ 577.359504][ T5728] usb 2-1: Manufacturer: syz [ 577.359517][ T5728] usb 2-1: SerialNumber: syz [ 577.370894][ T5728] usb 2-1: config 0 descriptor?? [ 577.662989][ T9789] jffs2: notice: (9789) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 577.701035][ T9789] FAULT_INJECTION: forcing a failure. [ 577.701035][ T9789] name failslab, interval 1, probability 0, space 0, times 0 [ 577.701066][ T9789] CPU: 0 UID: 0 PID: 9789 Comm: syz.1.1110 Not tainted syzkaller #0 PREEMPT(full) [ 577.701087][ T9789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 577.701098][ T9789] Call Trace: [ 577.701104][ T9789] [ 577.701112][ T9789] dump_stack_lvl+0x100/0x190 [ 577.701144][ T9789] should_fail_ex.cold+0x5/0xa [ 577.701175][ T9789] should_failslab+0xc2/0x120 [ 577.701201][ T9789] kmem_cache_alloc_noprof+0x92/0x6a0 [ 577.701224][ T9789] ? security_file_alloc+0x34/0x2c0 [ 577.701252][ T9789] security_file_alloc+0x34/0x2c0 [ 577.701275][ T9789] init_file+0x95/0x480 [ 577.701301][ T9789] alloc_empty_file+0x79/0x1c0 [ 577.701328][ T9789] dentry_open+0x46/0xd0 [ 577.701352][ T9789] vfs_open_tree+0x852/0xae0 [ 577.701381][ T9789] ? __pfx_vfs_open_tree+0x10/0x10 [ 577.701415][ T9789] __x64_sys_open_tree+0xa3/0x150 [ 577.701445][ T9789] do_syscall_64+0x123/0x790 [ 577.701480][ T9789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.701500][ T9789] RIP: 0033:0x7f344e19e159 [ 577.701517][ T9789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.701536][ T9789] RSP: 002b:00007f344f131028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 577.701558][ T9789] RAX: ffffffffffffffda RBX: 00007f344e425fa0 RCX: 00007f344e19e159 [ 577.701570][ T9789] RDX: 0000000000089901 RSI: 0000200000000100 RDI: 0000000000000005 [ 577.701581][ T9789] RBP: 00007f344e23506b R08: 0000000000000000 R09: 0000000000000000 [ 577.701592][ T9789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.701602][ T9789] R13: 00007f344e426038 R14: 00007f344e425fa0 R15: 00007fffd5245fc8 [ 577.701629][ T9789] [ 577.857219][ T9792] comedi comedi3: Minor 8192 is invalid! [ 578.453716][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1113'. [ 578.610654][ T9802] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1113'. [ 580.394948][ T5707] usb 4-1: USB disconnect, device number 32 [ 580.724398][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 580.724414][ T31] audit: type=1400 audit(1789592992.497:2190): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 580.730391][ T5728] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 580.730470][ T5728] imon 2-1:0.0: unable to initialize intf0, err -90 [ 580.730483][ T5728] imon:imon_probe: failed to initialize context! [ 580.730492][ T5728] imon 2-1:0.0: unable to register, err -19 [ 580.752295][ T5728] usb 2-1: USB disconnect, device number 40 [ 581.203823][ T31] audit: type=1400 audit(1789592992.977:2191): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 581.315823][ T5707] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 581.353622][ T4919] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff [ 581.459713][ T9823] comedi comedi3: Minor 8192 is invalid! [ 581.550623][ T5707] usb 3-1: Using ep0 maxpacket: 32 [ 581.570474][ T5707] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 581.577424][ T5588] hid (null): unknown global tag 0x4b [ 581.577459][ T5588] hid (null): unknown global tag 0xe [ 581.577471][ T5588] hid (null): invalid report_count -563312610 [ 581.577483][ T5588] hid (null): unknown global tag 0x94 [ 581.577525][ T5588] hid (null): unknown global tag 0xe [ 581.577536][ T5588] hid (null): invalid report_size 1303607880 [ 581.577575][ T5588] hid (null): report_id 62689 is invalid [ 581.577586][ T5588] hid (null): unknown global tag 0xe [ 581.577613][ T5588] hid (null): unknown global tag 0xe [ 581.577661][ T5588] hid (null): unknown global tag 0xd [ 581.577671][ T5588] hid (null): global environment stack underflow [ 581.577691][ T5588] hid (null): global environment stack underflow [ 581.580510][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.580535][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.580563][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.595358][ T5588] hid (null): global environment stack underflow [ 581.596415][ T5588] hid (null): unknown global tag 0xd [ 581.597259][ T5588] hid (null): unknown global tag 0xe [ 581.597444][ T5588] hid (null): unknown global tag 0x47 [ 581.597798][ T5588] hid (null): unknown global tag 0xc [ 581.597836][ T5588] hid (null): unknown global tag 0xd [ 581.597872][ T5588] hid (null): report_id 1158512002 is invalid [ 581.597944][ T5588] hid (null): unknown global tag 0xc [ 581.598006][ T5588] hid (null): unknown global tag 0x75 [ 581.598125][ T5588] hid (null): invalid report_size 1942714448 [ 581.598882][ T5588] hid (null): unknown global tag 0xd [ 581.610664][ T5588] hid (null): unknown global tag 0x2c [ 581.610712][ T5588] hid (null): unknown global tag 0xd [ 581.610745][ T5588] hid (null): unknown global tag 0xd [ 581.610756][ T5588] hid (null): invalid report_count -456916569 [ 581.610773][ T5588] hid (null): unknown global tag 0xc [ 581.610800][ T5588] hid (null): unknown global tag 0xae [ 581.610811][ T5588] hid (null): invalid report_count -571715713 [ 581.610870][ T5588] hid (null): report_id 1817576901 is invalid [ 581.610881][ T5588] hid (null): unknown global tag 0xe [ 581.610890][ T5588] hid (null): invalid report_size 53055 [ 581.610913][ T5588] hid (null): bogus close delimiter [ 581.610939][ T5588] hid (null): invalid report_size 62654 [ 581.610950][ T5588] hid (null): unknown global tag 0xe [ 581.610965][ T5588] hid (null): unknown global tag 0xe [ 581.610976][ T5588] hid (null): unknown global tag 0xc [ 581.610996][ T5588] hid (null): unknown global tag 0xe [ 581.611033][ T5588] hid (null): unknown global tag 0xe [ 581.611084][ T5588] hid (null): unknown global tag 0xc [ 581.622987][ T5707] usb 3-1: config 0 descriptor?? [ 581.628533][ T5707] hub 3-1:0.0: USB hub found [ 581.637922][ T5588] hid (null): bogus close delimiter [ 581.638161][ T5588] hid (null): invalid report_count -2000808501 [ 581.638588][ T5588] hid (null): invalid report_size 521722784 [ 581.639717][ T5588] hid (null): unknown global tag 0xc [ 581.656643][ T5588] hid (null): invalid report_count 12645 [ 581.957679][ T5588] hid-generic 0002:80000001:0559.001E: unexpected long global item [ 581.970553][ T5707] hub 3-1:0.0: 1 port detected [ 581.971984][ T5588] hid-generic 0002:80000001:0559.001E: probe with driver hid-generic failed with error -22 [ 582.149963][ T4919] Bluetooth: hci0: command 0x0419 tx timeout [ 582.341980][ T9828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.342321][ T9828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.278420][ T5714] usb 3-1: USB disconnect, device number 38 [ 584.444137][ T9836] syz_tun: entered allmulticast mode [ 584.457271][ T31] audit: type=1400 audit(1789592996.237:2192): avc: denied { mounton } for pid=9824 comm="syz.4.1119" path="/219/file0" dev="tmpfs" ino=1237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 584.457617][ T9836] jffs2: notice: (9836) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 584.970464][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1126'. [ 585.382335][ T5728] libceph: connect (1)[c::]:6789 error -101 [ 585.404078][ T5728] libceph: mon0 (1)[c::]:6789 connect error [ 585.591957][ T9852] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1126'. [ 585.667211][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 585.667976][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 586.150831][ T31] audit: type=1400 audit(1789592997.887:2193): avc: denied { read write } for pid=5609 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 586.150963][ T31] audit: type=1400 audit(1789592997.897:2194): avc: denied { open } for pid=5609 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 586.151106][ T31] audit: type=1400 audit(1789592997.907:2195): avc: denied { ioctl } for pid=5609 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 586.315725][ T5728] libceph: connect (1)[c::]:6789 error -101 [ 586.316770][ T5728] libceph: mon0 (1)[c::]:6789 connect error [ 586.462909][ T9859] ceph: No mds server is up or the cluster is laggy [ 586.541396][ T31] audit: type=1400 audit(1789592998.317:2196): avc: denied { mounton } for pid=9865 comm="syz.4.1130" path="/221/mnt" dev="tmpfs" ino=1249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 586.541445][ T31] audit: type=1400 audit(1789592998.317:2197): avc: denied { mount } for pid=9865 comm="syz.4.1130" name="/" dev="hugetlbfs" ino=27671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 586.593374][ T31] audit: type=1400 audit(1789592998.367:2198): avc: denied { read write } for pid=9867 comm="syz.2.1131" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 586.593422][ T31] audit: type=1400 audit(1789592998.367:2199): avc: denied { open } for pid=9867 comm="syz.2.1131" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 586.593456][ T31] audit: type=1400 audit(1789592998.367:2200): avc: denied { ioctl } for pid=9867 comm="syz.2.1131" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 586.595251][ T31] audit: type=1400 audit(1789592998.367:2201): avc: denied { create } for pid=9865 comm="syz.4.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 586.635160][ T31] audit: type=1400 audit(1789592998.407:2202): avc: denied { read } for pid=9865 comm="syz.4.1130" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 586.825171][ T5706] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 586.976441][ T5706] usb 3-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=9f.db [ 586.977301][ T5706] usb 3-1: config 8 has an invalid interface number: 33 but max is 0 [ 586.977322][ T5706] usb 3-1: config 8 has no interface number 0 [ 586.977347][ T5706] usb 3-1: config 8 interface 33 has no altsetting 0 [ 586.980584][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.980597][ T5706] usb 3-1: Product: syz [ 586.980605][ T5706] usb 3-1: Manufacturer: syz [ 586.980614][ T5706] usb 3-1: SerialNumber: syz [ 587.150664][ T30] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 587.747543][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 587.759610][ T30] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 587.762538][ T30] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 587.762559][ T30] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.762573][ T30] usb 1-1: config 0 has no interface number 0 [ 587.762619][ T30] usb 1-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 587.762640][ T30] usb 1-1: config 0 interface 1 has no altsetting 0 [ 587.762664][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.802584][ T30] usb 1-1: config 0 descriptor?? [ 588.114162][ T30] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 588.360788][ T5706] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware [ 588.396210][ T5706] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 588.396247][ T5706] dib0700: firmware download failed at 7 with -22 [ 588.444606][ T5706] usb 3-1: USB disconnect, device number 39 [ 588.881640][ T4919] Bluetooth: hci3: command 0x0406 tx timeout [ 589.533413][ T9887] xt_LOG: prefix is not null-terminated [ 589.919938][ T5706] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 590.018092][ T30] usb 1-1: USB disconnect, device number 36 [ 590.096581][ T5706] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 590.099036][ T5706] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 590.099060][ T5706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.099077][ T5706] usb 2-1: config 0 has no interface number 0 [ 590.100855][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.100877][ T5706] usb 2-1: Product: syz [ 590.100892][ T5706] usb 2-1: Manufacturer: syz [ 590.100905][ T5706] usb 2-1: SerialNumber: syz [ 590.102318][ T5706] usb 2-1: config 0 descriptor?? [ 590.173959][ T5706] hub 2-1:0.31: bad descriptor, ignoring hub [ 590.173981][ T5706] hub 2-1:0.31: probe with driver hub failed with error -5 [ 590.192376][ T5706] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 590.192433][ T5706] uvcvideo 2-1:0.31: Entity type for entity Output 32774 was not initialized! [ 590.192474][ T5706] uvcvideo 2-1:0.31: Failed to create links for entity 32774 [ 590.192489][ T5706] uvcvideo 2-1:0.31: Failed to register entities (-22). [ 591.447989][ T31] kauditd_printk_skb: 43 callbacks suppressed [ 591.448006][ T31] audit: type=1400 audit(1789593003.227:2246): avc: denied { read } for pid=9896 comm="syz.2.1139" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 591.448044][ T31] audit: type=1400 audit(1789593003.227:2247): avc: denied { open } for pid=9896 comm="syz.2.1139" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 591.603659][ T31] audit: type=1400 audit(1789593003.377:2248): avc: denied { read } for pid=9905 comm="syz.3.1141" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 591.603847][ T31] audit: type=1400 audit(1789593003.377:2249): avc: denied { open } for pid=9905 comm="syz.3.1141" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 591.657922][ T31] audit: type=1400 audit(1789593003.437:2250): avc: denied { ioctl } for pid=9905 comm="syz.3.1141" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 591.663977][ T31] audit: type=1400 audit(1789593003.437:2251): avc: denied { create } for pid=9903 comm="syz.4.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 591.714519][ T31] audit: type=1400 audit(1789593003.487:2252): avc: denied { setopt } for pid=9903 comm="syz.4.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 591.716285][ T5707] usb 2-1: USB disconnect, device number 41 [ 591.754258][ T31] audit: type=1400 audit(1789593003.527:2253): avc: denied { write } for pid=9903 comm="syz.4.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 591.863726][ T31] audit: type=1400 audit(1789593003.637:2254): avc: denied { write } for pid=9903 comm="syz.4.1140" name="mcfilter6" dev="proc" ino=4026533313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 591.891481][ T9908] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1141'. [ 592.813202][ T31] audit: type=1400 audit(1789593004.267:2255): avc: denied { bind } for pid=9910 comm="syz.0.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 594.805526][ T5706] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 594.808469][ T5707] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 594.861521][ T9939] FAULT_INJECTION: forcing a failure. [ 594.861521][ T9939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.861543][ T9939] CPU: 0 UID: 0 PID: 9939 Comm: syz.0.1144 Not tainted syzkaller #0 PREEMPT(full) [ 594.861556][ T9939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 594.861562][ T9939] Call Trace: [ 594.861566][ T9939] [ 594.861571][ T9939] dump_stack_lvl+0x100/0x190 [ 594.861591][ T9939] should_fail_ex.cold+0x5/0xa [ 594.861607][ T9939] _copy_from_user+0x2e/0xd0 [ 594.861620][ T9939] load_msg+0x19e/0x4a0 [ 594.861636][ T9939] do_msgsnd+0x1ad/0x1790 [ 594.861658][ T9939] ? __mutex_unlock_slowpath+0x35d/0x930 [ 594.861678][ T9939] ? __pfx_do_msgsnd+0x10/0x10 [ 594.861693][ T9939] ? find_held_lock+0x2b/0x80 [ 594.861709][ T9939] ? __might_fault+0xc5/0x140 [ 594.861726][ T9939] ? __might_fault+0xc5/0x140 [ 594.861746][ T9939] ? __x64_sys_msgsnd+0xe5/0x130 [ 594.861760][ T9939] __x64_sys_msgsnd+0xe5/0x130 [ 594.861777][ T9939] do_syscall_64+0x123/0x790 [ 594.861793][ T9939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.861804][ T9939] RIP: 0033:0x7f55f579e159 [ 594.861814][ T9939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.861824][ T9939] RSP: 002b:00007f55f66e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 594.861835][ T9939] RAX: ffffffffffffffda RBX: 00007f55f5a25fa0 RCX: 00007f55f579e159 [ 594.861842][ T9939] RDX: 0000000000000401 RSI: 00002000000006c0 RDI: 0000000000000000 [ 594.861848][ T9939] RBP: 00007f55f66e4090 R08: 0000000000000000 R09: 0000000000000000 [ 594.861854][ T9939] R10: be573b18f6e31390 R11: 0000000000000246 R12: 0000000000000001 [ 594.861861][ T9939] R13: 00007f55f5a26038 R14: 00007f55f5a25fa0 R15: 00007fff7de4b248 [ 594.861875][ T9939] [ 594.971468][ T5707] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 594.981513][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.981535][ T5707] usb 4-1: Product: syz [ 594.981547][ T5707] usb 4-1: Manufacturer: syz [ 594.981558][ T5707] usb 4-1: SerialNumber: syz [ 595.016514][ T5706] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 595.072508][ T5706] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.072555][ T5706] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.072579][ T5706] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.072598][ T5706] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 595.072633][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.265032][ T9943] fuse: Bad value for 'rootmode' [ 595.574972][ T5707] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 595.575602][ T5707] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 596.496173][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 596.496194][ T31] audit: type=1400 audit(1789593008.267:2286): avc: denied { mount } for pid=9932 comm="syz.3.1152" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 596.730511][ T9934] 9p: Bad value for 'wfdno' [ 596.891070][ T9934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.936959][ T9934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.642644][ T5707] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 597.886837][ T5707] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 597.887979][ T5707] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 597.888023][ T5707] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 598.135231][ T31] audit: type=1400 audit(1789593009.847:2287): avc: denied { mmap_zero } for pid=9959 comm="syz.0.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 598.296968][ T31] audit: type=1400 audit(1789593009.997:2288): avc: denied { map } for pid=9959 comm="syz.0.1158" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 598.297040][ T31] audit: type=1400 audit(1789593009.997:2289): avc: denied { read write } for pid=9959 comm="syz.0.1158" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 598.297075][ T31] audit: type=1400 audit(1789593009.997:2290): avc: denied { map } for pid=9959 comm="syz.0.1158" path="socket:[27466]" dev="sockfs" ino=27466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 598.425433][ T5707] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 598.428360][ T31] audit: type=1400 audit(1789593010.207:2291): avc: denied { mount } for pid=9959 comm="syz.0.1158" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 598.428744][ T5706] usbhid 5-1:1.0: can't add hid device: -71 [ 598.428796][ T5706] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 598.434618][ T5707] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 598.491328][ T5706] usb 5-1: USB disconnect, device number 26 [ 598.535480][ T5707] usb 4-1: USB disconnect, device number 33 [ 598.616663][ T31] audit: type=1400 audit(1789593010.397:2292): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 598.787884][ T31] audit: type=1400 audit(1789593010.567:2293): avc: denied { ioctl } for pid=9966 comm="syz.0.1160" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=27557 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 598.854951][ T31] audit: type=1400 audit(1789593010.627:2294): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 599.166319][ T31] audit: type=1400 audit(1789593010.947:2295): avc: denied { read write } for pid=9973 comm="syz.0.1162" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 600.311562][ T9990] fuse: Bad value for 'rootmode' [ 600.813668][ T9988] ubi0: attaching mtd0 [ 601.167354][ T9988] ubi0: scanning is finished [ 601.167400][ T9988] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 603.611250][ T9988] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 603.781461][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 603.781478][ T31] audit: type=1400 audit(1789593015.557:2307): avc: denied { create } for pid=10006 comm="syz.3.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 603.782121][ T31] audit: type=1400 audit(1789593015.557:2308): avc: denied { ioctl } for pid=10006 comm="syz.3.1170" path="socket:[27915]" dev="sockfs" ino=27915 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 603.783722][ T31] audit: type=1400 audit(1789593015.557:2309): avc: denied { mount } for pid=10006 comm="syz.3.1170" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 604.469460][ T31] audit: type=1400 audit(1789593016.247:2310): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 604.589622][ T31] audit: type=1400 audit(1789593016.367:2311): avc: denied { read } for pid=10011 comm="syz.0.1173" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 604.589868][ T31] audit: type=1400 audit(1789593016.367:2312): avc: denied { open } for pid=10011 comm="syz.0.1173" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 604.704627][ T31] audit: type=1400 audit(1789593016.477:2313): avc: denied { bind } for pid=10011 comm="syz.0.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 604.704758][ T31] audit: type=1400 audit(1789593016.477:2314): avc: denied { node_bind } for pid=10011 comm="syz.0.1173" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 605.252358][T10013] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 605.264001][T10013] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 605.264134][T10013] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 605.292854][T10013] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 605.292994][T10013] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 605.848472][T10023] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 606.693991][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1178'. [ 606.697853][ T31] audit: type=1400 audit(1789593018.467:2315): avc: denied { module_request } for pid=10028 comm="syz.0.1178" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 606.733428][ T31] audit: type=1400 audit(1789593018.507:2316): avc: denied { sys_module } for pid=10028 comm="syz.0.1178" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 606.735620][ T4919] Bluetooth: hci0: command 0x0419 tx timeout [ 607.803739][ T4919] Bluetooth: hci4: command 0x0406 tx timeout [ 607.803775][ T4919] Bluetooth: hci3: command 0x0406 tx timeout [ 607.803810][ T4919] Bluetooth: hci1: command 0x0406 tx timeout [ 607.803832][ T4919] Bluetooth: hci2: command 0x0c1a tx timeout [ 608.090930][T10046] fuse: Unknown parameter 'use00000000000000000000' [ 611.054345][ T31] audit: type=1400 audit(1789593022.827:2317): avc: denied { mount } for pid=10060 comm="syz.3.1186" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 611.066998][ T31] audit: type=1400 audit(1789593022.847:2318): avc: denied { ioctl } for pid=10064 comm="syz.2.1180" path="socket:[28840]" dev="sockfs" ino=28840 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 611.116158][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'. [ 612.048096][ T5728] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 612.234984][ T5728] usb 3-1: Using ep0 maxpacket: 8 [ 612.235758][ T5728] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 612.237559][ T5728] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.237578][ T5728] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 612.237612][ T5728] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.237640][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.257977][ T5728] hub 3-1:1.0: bad descriptor, ignoring hub [ 612.257998][ T5728] hub 3-1:1.0: probe with driver hub failed with error -5 [ 612.263982][ T5728] cdc_wdm 3-1:1.0: skipping garbage [ 612.263998][ T5728] cdc_wdm 3-1:1.0: skipping garbage [ 612.264054][ T5728] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 612.373783][T10085] fuse: Bad value for 'fd' [ 612.672563][T10080] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 612.672662][T10080] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 612.691152][T10080] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 612.691234][T10080] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 612.691296][T10080] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 612.961090][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 613.157769][T10099] FAULT_INJECTION: forcing a failure. [ 613.157769][T10099] name failslab, interval 1, probability 0, space 0, times 0 [ 613.157804][T10099] CPU: 1 UID: 0 PID: 10099 Comm: syz.4.1192 Not tainted syzkaller #0 PREEMPT(full) [ 613.157826][T10099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 613.157837][T10099] Call Trace: [ 613.157843][T10099] [ 613.157851][T10099] dump_stack_lvl+0x100/0x190 [ 613.157881][T10099] should_fail_ex.cold+0x5/0xa [ 613.157907][T10099] should_failslab+0xc2/0x120 [ 613.157932][T10099] kmem_cache_alloc_noprof+0x92/0x6a0 [ 613.157952][T10099] ? do_getname+0x35/0x390 [ 613.157985][T10099] do_getname+0x35/0x390 [ 613.158014][T10099] delayed_getname_uflags+0x2a/0xa0 [ 613.158037][T10099] io_linkat_prep+0x209/0x330 [ 613.158060][T10099] io_submit_sqes+0xa03/0x2480 [ 613.158096][T10099] __do_sys_io_uring_enter+0xa88/0x1b10 [ 613.158121][T10099] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 613.158149][T10099] ? __fget_files+0x21f/0x3d0 [ 613.158171][T10099] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 613.158198][T10099] ? fput+0x7c/0x100 [ 613.158222][T10099] ? ksys_write+0x1ac/0x250 [ 613.158241][T10099] ? __pfx_ksys_write+0x10/0x10 [ 613.158268][T10099] do_syscall_64+0x123/0x790 [ 613.158299][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.158319][T10099] RIP: 0033:0x7fe5b359e159 [ 613.158335][T10099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.158352][T10099] RSP: 002b:00007fe5b4513028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 613.158376][T10099] RAX: ffffffffffffffda RBX: 00007fe5b3825fa0 RCX: 00007fe5b359e159 [ 613.158388][T10099] RDX: 00000000fffffffd RSI: 0000000000002000 RDI: 0000000000000003 [ 613.158399][T10099] RBP: 00007fe5b4513090 R08: 0000000000000000 R09: 0000000000000000 [ 613.158410][T10099] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 613.158421][T10099] R13: 00007fe5b3826038 R14: 00007fe5b3825fa0 R15: 00007ffe40f15428 [ 613.158448][T10099] [ 613.335126][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 613.337564][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 613.363042][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 613.363070][ T9] usb 1-1: config 0 has no interface number 0 [ 613.363100][ T9] usb 1-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 613.363122][ T9] usb 1-1: config 0 interface 1 has no altsetting 0 [ 613.363150][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.526304][ T9] usb 1-1: config 0 descriptor?? [ 613.735159][ T5706] usb 3-1: USB disconnect, device number 40 [ 614.170265][ T9] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 614.305889][ T5611] Bluetooth: hci0: command 0x0419 tx timeout [ 614.673941][ T5706] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 614.729995][ T5611] Bluetooth: hci2: command 0x0c1a tx timeout [ 614.730165][ T5611] Bluetooth: hci3: command 0x0406 tx timeout [ 614.730273][ T5611] Bluetooth: hci4: command 0x0406 tx timeout [ 614.730391][ T5611] Bluetooth: hci1: command 0x0406 tx timeout [ 615.075130][ T5706] usb 4-1: Using ep0 maxpacket: 32 [ 615.076372][ T5706] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 615.077946][ T5706] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.077968][ T5706] usb 4-1: config 0 has no interfaces? [ 615.080708][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.080729][ T5706] usb 4-1: Product: syz [ 615.080742][ T5706] usb 4-1: Manufacturer: syz [ 615.080757][ T5706] usb 4-1: SerialNumber: syz [ 615.082765][ T5706] usb 4-1: config 0 descriptor?? [ 615.146453][ T31] audit: type=1400 audit(1789593026.927:2319): avc: denied { unlink } for pid=10124 comm="syz.1.1198" name="#35" dev="tmpfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 615.199698][T10125] overlayfs: overlapping lowerdir path [ 615.515533][ T31] audit: type=1400 audit(1789593027.287:2320): avc: denied { append } for pid=10129 comm="syz.1.1199" name="comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 615.522185][T10131] comedi comedi3: Minor 8192 is invalid! [ 615.558510][ T31] audit: type=1400 audit(1789593027.327:2321): avc: denied { ioctl } for pid=10129 comm="syz.1.1199" path="socket:[28940]" dev="sockfs" ino=28940 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 615.563934][ T31] audit: type=1400 audit(1789593027.337:2322): avc: denied { write } for pid=10129 comm="syz.1.1199" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 615.574083][ T5728] hid (null): unknown global tag 0x4b [ 615.574266][ T5728] hid (null): unknown global tag 0xe [ 615.574302][ T5728] hid (null): invalid report_count -563312610 [ 615.574366][ T5728] hid (null): unknown global tag 0x94 [ 615.574666][ T5728] hid (null): unknown global tag 0xe [ 615.574703][ T5728] hid (null): invalid report_size 1303607880 [ 615.574905][ T5728] hid (null): report_id 62689 is invalid [ 615.574946][ T5728] hid (null): unknown global tag 0xe [ 615.579704][ T5728] hid (null): unknown global tag 0xe [ 615.580136][ T5728] hid (null): unknown global tag 0xd [ 615.580163][ T5728] hid (null): global environment stack underflow [ 615.580261][ T5728] hid (null): global environment stack underflow [ 615.586345][ T5728] hid (null): global environment stack underflow [ 615.586377][ T5728] hid (null): unknown global tag 0xd [ 615.586393][ T5728] hid (null): unknown global tag 0xe [ 615.586405][ T5728] hid (null): unknown global tag 0x47 [ 615.586442][ T5728] hid (null): unknown global tag 0xc [ 615.586452][ T5728] hid (null): unknown global tag 0xd [ 615.586463][ T5728] hid (null): report_id 1158512002 is invalid [ 615.586489][ T5728] hid (null): unknown global tag 0xc [ 615.586499][ T5728] hid (null): unknown global tag 0x75 [ 615.586510][ T5728] hid (null): invalid report_size 1942714448 [ 615.586536][ T5728] hid (null): unknown global tag 0xd [ 615.586552][ T5728] hid (null): unknown global tag 0x2c [ 615.586583][ T5728] hid (null): unknown global tag 0xd [ 615.586615][ T5728] hid (null): unknown global tag 0xd [ 615.586625][ T5728] hid (null): invalid report_count -456916569 [ 615.586641][ T5728] hid (null): unknown global tag 0xc [ 615.586669][ T5728] hid (null): unknown global tag 0xae [ 615.586679][ T5728] hid (null): invalid report_count -571715713 [ 615.586738][ T5728] hid (null): report_id 1817576901 is invalid [ 615.586749][ T5728] hid (null): unknown global tag 0xe [ 615.586760][ T5728] hid (null): invalid report_size 53055 [ 615.586783][ T5728] hid (null): bogus close delimiter [ 615.586817][ T5728] hid (null): invalid report_size 62654 [ 615.586827][ T5728] hid (null): unknown global tag 0xe [ 615.586843][ T5728] hid (null): unknown global tag 0xe [ 615.586853][ T5728] hid (null): unknown global tag 0xc [ 615.586873][ T5728] hid (null): unknown global tag 0xe [ 615.586911][ T5728] hid (null): unknown global tag 0xe [ 615.608590][ T5728] hid (null): unknown global tag 0xc [ 615.609379][ T5728] hid (null): bogus close delimiter [ 615.609390][ T5728] hid (null): invalid report_count -2000808501 [ 615.609402][ T5728] hid (null): invalid report_size 521722784 [ 615.609429][ T5728] hid (null): unknown global tag 0xc [ 615.609579][ T5728] hid (null): invalid report_count 12645 [ 615.614785][ T5728] hid-generic 0002:80000001:0559.001F: unexpected long global item [ 615.624021][ T5728] hid-generic 0002:80000001:0559.001F: probe with driver hid-generic failed with error -22 [ 615.798226][ T5728] usb 1-1: USB disconnect, device number 37 [ 616.465132][T10139] comedi comedi3: Minor 8192 is invalid! [ 616.955951][ T5693] hid (null): unknown global tag 0x4b [ 616.983372][ T5693] hid (null): unknown global tag 0xe [ 617.022244][ T5693] hid (null): invalid report_count -563312610 [ 617.022274][ T5693] hid (null): unknown global tag 0x94 [ 617.073202][ T5693] hid (null): unknown global tag 0xe [ 617.106428][ T5693] hid (null): invalid report_size 1303607880 [ 617.160967][ T5693] hid (null): report_id 62689 is invalid [ 617.160988][ T5693] hid (null): unknown global tag 0xe [ 617.161018][ T5693] hid (null): unknown global tag 0xe [ 617.161069][ T5693] hid (null): unknown global tag 0xd [ 617.161080][ T5693] hid (null): global environment stack underflow [ 617.161100][ T5693] hid (null): global environment stack underflow [ 617.311452][ T6369] rpcbind: server 127.0.0.1 not responding, timed out [ 618.055182][ T5693] hid (null): global environment stack underflow [ 618.121637][ T5693] hid (null): unknown global tag 0xd [ 618.273269][ T5693] hid (null): unknown global tag 0xe [ 618.273342][ T5693] hid (null): unknown global tag 0x47 [ 618.273584][ T5693] hid (null): unknown global tag 0xc [ 618.273618][ T5693] hid (null): unknown global tag 0xd [ 618.273661][ T5693] hid (null): report_id 1158512002 is invalid [ 618.273755][ T5693] hid (null): unknown global tag 0xc [ 618.273792][ T5693] hid (null): unknown global tag 0x75 [ 618.273819][ T5693] hid (null): invalid report_size 1942714448 [ 618.346666][ T5693] hid (null): unknown global tag 0xd [ 618.346734][ T5693] hid (null): unknown global tag 0x2c [ 618.346925][ T5693] hid (null): unknown global tag 0xd [ 618.347092][ T5693] hid (null): unknown global tag 0xd [ 618.347127][ T5693] hid (null): invalid report_count -456916569 [ 618.347222][ T5693] hid (null): unknown global tag 0xc [ 618.347405][ T5693] hid (null): unknown global tag 0xae [ 618.347439][ T5693] hid (null): invalid report_count -571715713 [ 618.347744][ T5693] hid (null): report_id 1817576901 is invalid [ 618.347783][ T5693] hid (null): unknown global tag 0xe [ 618.347845][ T5693] hid (null): invalid report_size 53055 [ 618.347999][ T5693] hid (null): bogus close delimiter [ 618.348161][ T5693] hid (null): invalid report_size 62654 [ 618.348196][ T5693] hid (null): unknown global tag 0xe [ 618.348261][ T5693] hid (null): unknown global tag 0xe [ 618.348300][ T5693] hid (null): unknown global tag 0xc [ 618.348426][ T5693] hid (null): unknown global tag 0xe [ 618.348679][ T5693] hid (null): unknown global tag 0xe [ 618.349000][ T5693] hid (null): unknown global tag 0xc [ 618.388474][ T5693] hid (null): bogus close delimiter [ 618.389618][ T5693] hid (null): invalid report_count -2000808501 [ 618.396233][ T5693] hid (null): invalid report_size 521722784 [ 618.409930][ T5693] hid (null): unknown global tag 0xc [ 618.477175][ T5693] hid (null): invalid report_count 12645 [ 618.788200][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.788251][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.790150][ T5693] hid-generic 0002:80000001:0559.0020: unexpected long global item [ 618.834928][ T5693] hid-generic 0002:80000001:0559.0020: probe with driver hid-generic failed with error -22 [ 619.227702][ T5693] usb 4-1: USB disconnect, device number 34 [ 620.385639][T10154] fuse: Unknown parameter 'use00000000000000000000' [ 620.478970][ T31] audit: type=1400 audit(1789593032.257:2323): avc: denied { create } for pid=10150 comm="syz.2.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 620.514508][ T31] audit: type=1400 audit(1789593032.287:2324): avc: denied { connect } for pid=10150 comm="syz.2.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 620.555640][ T31] audit: type=1400 audit(1789593032.337:2325): avc: denied { write } for pid=10150 comm="syz.2.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 621.185892][ T5693] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 621.365249][ T5693] usb 4-1: Using ep0 maxpacket: 16 [ 621.366596][ T5693] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 621.404427][ T5693] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 621.404539][ T5693] usb 4-1: config 0 has no interface number 0 [ 621.404651][ T5693] usb 4-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 621.404775][ T5693] usb 4-1: config 0 interface 1 has no altsetting 0 [ 621.404912][ T5693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.491703][ T5693] usb 4-1: config 0 descriptor?? [ 621.550809][ T5693] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 622.022958][ T31] audit: type=1400 audit(1789593033.797:2326): avc: denied { cmd } for pid=10174 comm="syz.4.1213" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 622.336430][ T5728] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 622.538340][ T5728] usb 5-1: Using ep0 maxpacket: 16 [ 622.538863][ T5728] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 622.540326][ T5728] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 622.540346][ T5728] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 622.540360][ T5728] usb 5-1: config 0 interface 0 has no altsetting 0 [ 622.540376][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.546919][ T5728] usb 5-1: config 0 descriptor?? [ 623.065471][ T5728] input: HID 05ac:0265 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:0265.0021/input/input53 [ 623.069277][ T31] audit: type=1400 audit(1789593034.847:2327): avc: denied { read } for pid=4954 comm="acpid" name="mouse1" dev="devtmpfs" ino=3366 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 623.093048][ T5728] magicmouse 0003:05AC:0265.0021: input,hidraw0: USB HID v0.51 Joystick [HID 05ac:0265] on usb-dummy_hcd.4-1/input0 [ 623.129858][ T31] audit: type=1400 audit(1789593034.847:2328): avc: denied { open } for pid=4954 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3366 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 623.202806][ T31] audit: type=1400 audit(1789593034.977:2329): avc: denied { ioctl } for pid=4954 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3366 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 623.280087][T10175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.283972][T10175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.312949][ T5693] usb 5-1: USB disconnect, device number 27 [ 623.922067][T10184] fido_id[10184]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 624.328631][ T9] usb 4-1: USB disconnect, device number 35 [ 628.168247][ T31] audit: type=1400 audit(1789593039.947:2330): avc: denied { ioctl } for pid=10227 comm="syz.3.1229" path="socket:[28256]" dev="sockfs" ino=28256 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 628.169278][ T31] audit: type=1400 audit(1789593039.947:2331): avc: denied { bind } for pid=10227 comm="syz.3.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 628.172644][ T31] audit: type=1400 audit(1789593039.947:2332): avc: denied { write } for pid=10227 comm="syz.3.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 628.260467][ T31] audit: type=1400 audit(1789593040.037:2333): avc: denied { bind } for pid=10227 comm="syz.3.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 629.235156][ T31] audit: type=1400 audit(1789593041.007:2334): avc: denied { read write } for pid=10236 comm="syz.3.1232" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 629.235349][ T31] audit: type=1400 audit(1789593041.017:2335): avc: denied { open } for pid=10236 comm="syz.3.1232" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 629.241632][ T31] audit: type=1400 audit(1789593041.017:2336): avc: denied { ioctl } for pid=10236 comm="syz.3.1232" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 629.326361][ T31] audit: type=1400 audit(1789593041.077:2337): avc: denied { read } for pid=10240 comm="syz.2.1234" name="sg0" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 629.326392][ T31] audit: type=1400 audit(1789593041.077:2338): avc: denied { open } for pid=10240 comm="syz.2.1234" path="/dev/sg0" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 629.362233][T10241] FAULT_INJECTION: forcing a failure. [ 629.362233][T10241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.362258][T10241] CPU: 1 UID: 0 PID: 10241 Comm: syz.2.1234 Not tainted syzkaller #0 PREEMPT(full) [ 629.362276][T10241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 629.362286][T10241] Call Trace: [ 629.362291][T10241] [ 629.362297][T10241] dump_stack_lvl+0x100/0x190 [ 629.362326][T10241] should_fail_ex.cold+0x5/0xa [ 629.362349][T10241] _copy_from_user+0x2e/0xd0 [ 629.362368][T10241] core_sys_select+0x472/0xbb0 [ 629.362393][T10241] ? __pfx_core_sys_select+0x10/0x10 [ 629.362411][T10241] ? find_held_lock+0x2b/0x80 [ 629.362432][T10241] ? get_pid_task+0xfc/0x250 [ 629.362476][T10241] ? __pfx_set_user_sigmask+0x10/0x10 [ 629.362490][T10241] ? __pfx_vfs_write+0x10/0x10 [ 629.362507][T10241] ? do_sys_openat2+0x159/0x1e0 [ 629.362532][T10241] do_pselect.constprop.0+0x238/0x270 [ 629.362554][T10241] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 629.362577][T10241] ? ksys_write+0x1ac/0x250 [ 629.362597][T10241] __x64_sys_pselect6+0x149/0x1c0 [ 629.362625][T10241] do_syscall_64+0x123/0x790 [ 629.362650][T10241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.362666][T10241] RIP: 0033:0x7fa018d9e159 [ 629.362680][T10241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.362695][T10241] RSP: 002b:00007fa019d39028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 629.362712][T10241] RAX: ffffffffffffffda RBX: 00007fa019025fa0 RCX: 00007fa018d9e159 [ 629.362722][T10241] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000040 [ 629.362732][T10241] RBP: 00007fa019d39090 R08: 0000000000000000 R09: 0000000000000000 [ 629.362742][T10241] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 629.362751][T10241] R13: 00007fa019026038 R14: 00007fa019025fa0 R15: 00007ffe02349278 [ 629.362774][T10241] [ 629.777465][T10246] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1222'. [ 629.921519][T10247] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1222'. [ 630.315245][ T7034] rpcbind: server 127.0.0.1 not responding, timed out [ 630.487319][ T31] audit: type=1400 audit(1789593042.267:2339): avc: denied { setopt } for pid=10251 comm="syz.2.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 631.357291][ T4919] Bluetooth: hci3: command 0x0406 tx timeout [ 631.405482][ T5714] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 631.565612][ T5714] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 631.566502][ T5714] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.566527][ T5714] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.566547][ T5714] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 631.566571][ T5714] usb 4-1: config 0 interface 0 has no altsetting 0 [ 631.566603][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.638853][ T5714] usb 4-1: config 0 descriptor?? [ 632.261880][ T5714] usbhid 4-1:0.0: can't add hid device: -71 [ 632.261963][ T5714] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 632.305217][ T5714] usb 4-1: USB disconnect, device number 36 [ 632.348964][T10282] fuse: Unknown parameter 'user_i00000000000000000000' [ 632.370797][T10281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 632.480030][T10281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1243'. [ 632.500169][T10281] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.735461][ T5728] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 632.866199][ T5728] usb 5-1: device descriptor read/64, error -71 [ 633.025136][ T5693] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 633.085534][ T5788] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 633.146587][T10301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1247'. [ 633.216044][ T5693] usb 2-1: Using ep0 maxpacket: 8 [ 633.221505][ T5693] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 633.240096][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 633.240125][ T31] audit: type=1400 audit(1789593044.917:2352): avc: denied { ioctl } for pid=10295 comm="syz.3.1247" path="socket:[29356]" dev="sockfs" ino=29356 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 633.247940][ T31] audit: type=1400 audit(1789593044.917:2353): avc: denied { ioctl } for pid=10295 comm="syz.3.1247" path="socket:[29359]" dev="sockfs" ino=29359 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 633.308511][ T5788] usb 3-1: Using ep0 maxpacket: 8 [ 633.322029][ T5788] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 633.357303][ T5728] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 633.362675][ T5693] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.362720][ T5693] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 633.362743][ T5693] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 29801, setting to 1024 [ 633.362757][ T5693] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 633.362777][ T5693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.375478][ T5788] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.375499][ T5788] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 633.375536][ T5788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.375568][ T5788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.475446][T10291] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 633.493136][ T5728] usb 5-1: device descriptor read/64, error -71 [ 633.493910][ T5693] hub 2-1:1.0: bad descriptor, ignoring hub [ 633.493929][ T5693] hub 2-1:1.0: probe with driver hub failed with error -5 [ 633.494277][ T5693] cdc_wdm 2-1:1.0: skipping garbage [ 633.494288][ T5693] cdc_wdm 2-1:1.0: skipping garbage [ 633.494335][ T5693] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 633.544930][ T5788] hub 3-1:1.0: bad descriptor, ignoring hub [ 633.544945][ T5788] hub 3-1:1.0: probe with driver hub failed with error -5 [ 633.561954][ T5788] cdc_wdm 3-1:1.0: skipping garbage [ 633.561972][ T5788] cdc_wdm 3-1:1.0: skipping garbage [ 633.562030][ T5788] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 633.596685][ T5728] usb usb5-port1: attempt power cycle [ 633.935202][ T5728] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 633.955564][ T5728] usb 5-1: device descriptor read/8, error -71 [ 634.155134][ T5693] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 634.195251][ T5728] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 634.216041][ T5728] usb 5-1: device descriptor read/8, error -71 [ 634.305622][ T5693] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 634.306488][ T5693] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.306502][ T5693] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 634.307811][ T5693] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 634.307824][ T5693] usb 4-1: Product: syz [ 634.307833][ T5693] usb 4-1: SerialNumber: syz [ 634.314658][ T5693] usb 4-1: config 0 descriptor?? [ 634.373856][ T5728] usb usb5-port1: unable to enumerate USB device [ 634.558480][ T5693] usb 3-1: USB disconnect, device number 41 [ 634.611578][ T31] audit: type=1400 audit(1789593046.387:2354): avc: denied { setopt } for pid=10309 comm="syz.2.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 634.659657][ T9] usb 2-1: USB disconnect, device number 42 [ 634.981868][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1253'. [ 636.778589][T10351] xt_LOG: prefix is not null-terminated [ 637.071243][ T5788] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 637.087458][T10354] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1261'. [ 637.244849][ T5728] usb 4-1: USB disconnect, device number 37 [ 637.255738][ T5788] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 637.256669][ T5788] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 637.256691][ T5788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.256707][ T5788] usb 1-1: config 0 has no interface number 0 [ 637.258473][ T5788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.258493][ T5788] usb 1-1: Product: syz [ 637.258511][ T5788] usb 1-1: Manufacturer: syz [ 637.258524][ T5788] usb 1-1: SerialNumber: syz [ 637.264633][ T5788] usb 1-1: config 0 descriptor?? [ 637.336060][ T5788] hub 1-1:0.31: bad descriptor, ignoring hub [ 637.336085][ T5788] hub 1-1:0.31: probe with driver hub failed with error -5 [ 637.337972][ T5788] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 637.338025][ T5788] uvcvideo 1-1:0.31: Entity type for entity Output 32774 was not initialized! [ 637.338071][ T5788] uvcvideo 1-1:0.31: Failed to create links for entity 32774 [ 637.338087][ T5788] uvcvideo 1-1:0.31: Failed to register entities (-22). [ 637.607760][T10367] ip_tables: iptables: counters copy to user failed while replacing table [ 637.755444][ T5788] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 637.945308][ T5788] usb 4-1: Using ep0 maxpacket: 8 [ 637.945752][ T5788] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 637.948062][ T5788] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.948075][ T5788] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 637.948096][ T5788] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.948116][ T5788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.015271][ T60] rpcbind: server 127.0.0.1 not responding, timed out [ 638.024665][ T5788] hub 4-1:1.0: bad descriptor, ignoring hub [ 638.038048][ T5788] hub 4-1:1.0: probe with driver hub failed with error -5 [ 638.038298][ T5788] cdc_wdm 4-1:1.0: skipping garbage [ 638.038306][ T5788] cdc_wdm 4-1:1.0: skipping garbage [ 638.038340][ T5788] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 639.356042][ T31] audit: type=1400 audit(1789593051.127:2355): avc: denied { read } for pid=10377 comm="syz.4.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 640.263574][T10300] usb 4-1: USB disconnect, device number 38 [ 640.396331][ T5728] usb 1-1: USB disconnect, device number 38 [ 640.538194][ T31] audit: type=1400 audit(1789593052.317:2356): avc: denied { ioctl } for pid=10387 comm="syz.4.1272" path="socket:[29505]" dev="sockfs" ino=29505 ioctlcmd=0x5866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 641.063384][ T5611] Bluetooth: hci0: command 0x0419 tx timeout [ 642.743932][T10401] fuse: Unknown parameter 'user_id00000000000000000000' [ 643.004169][T10300] hid (null): unknown global tag 0x4b [ 643.004321][T10300] hid (null): unknown global tag 0xe [ 643.004336][T10300] hid (null): invalid report_count -563312610 [ 643.004374][T10300] hid (null): unknown global tag 0x94 [ 643.004567][T10300] hid (null): unknown global tag 0xe [ 643.004606][T10300] hid (null): invalid report_size 1303607880 [ 643.004757][T10300] hid (null): report_id 62689 is invalid [ 643.004795][T10300] hid (null): unknown global tag 0xe [ 643.004979][T10300] hid (null): unknown global tag 0xe [ 643.005370][T10300] hid (null): unknown global tag 0xd [ 643.005459][T10300] hid (null): global environment stack underflow [ 643.005585][T10300] hid (null): global environment stack underflow [ 643.074064][T10300] hid (null): global environment stack underflow [ 643.074092][T10300] hid (null): unknown global tag 0xd [ 643.074108][T10300] hid (null): unknown global tag 0xe [ 643.074121][T10300] hid (null): unknown global tag 0x47 [ 643.074153][T10300] hid (null): unknown global tag 0xc [ 643.074160][T10300] hid (null): unknown global tag 0xd [ 643.074167][T10300] hid (null): report_id 1158512002 is invalid [ 643.074180][T10300] hid (null): unknown global tag 0xc [ 643.074191][T10300] hid (null): unknown global tag 0x75 [ 643.074202][T10300] hid (null): invalid report_size 1942714448 [ 643.074229][T10300] hid (null): unknown global tag 0xd [ 643.074244][T10300] hid (null): unknown global tag 0x2c [ 643.074266][T10300] hid (null): unknown global tag 0xd [ 643.074301][T10300] hid (null): unknown global tag 0xd [ 643.074308][T10300] hid (null): invalid report_count -456916569 [ 643.178369][T10300] hid (null): unknown global tag 0xc [ 643.178498][T10300] hid (null): unknown global tag 0xae [ 643.178534][T10300] hid (null): invalid report_count -571715713 [ 643.178836][T10300] hid (null): report_id 1817576901 is invalid [ 643.178874][T10300] hid (null): unknown global tag 0xe [ 643.178909][T10300] hid (null): invalid report_size 53055 [ 643.178986][T10300] hid (null): bogus close delimiter [ 643.179101][T10300] hid (null): invalid report_size 62654 [ 643.179141][T10300] hid (null): unknown global tag 0xe [ 643.179185][T10300] hid (null): unknown global tag 0xe [ 643.179221][T10300] hid (null): unknown global tag 0xc [ 643.179326][T10300] hid (null): unknown global tag 0xe [ 643.179505][T10300] hid (null): unknown global tag 0xe [ 643.179706][T10300] hid (null): unknown global tag 0xc [ 643.289675][T10300] hid (null): bogus close delimiter [ 643.289761][T10300] hid (null): invalid report_count -2000808501 [ 643.289802][T10300] hid (null): invalid report_size 521722784 [ 643.289989][T10300] hid (null): unknown global tag 0xc [ 643.290761][T10300] hid (null): invalid report_count 12645 [ 643.394853][T10300] hid-generic 0002:80000001:0559.0022: unexpected long global item [ 643.425011][T10300] hid-generic 0002:80000001:0559.0022: probe with driver hid-generic failed with error -22 [ 648.025829][T10443] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 648.025847][T10443] audit: out of memory in audit_log_start [ 648.025992][T10443] Bluetooth: MGMT ver 1.23 [ 648.075288][ T5788] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 648.357272][ T5788] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 648.362053][ T5788] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.362220][ T5788] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.362491][ T5788] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.362545][ T5788] usb 4-1: config 0 interface 0 has no altsetting 0 [ 648.362657][ T5788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.494667][ T5788] usb 4-1: config 0 descriptor?? [ 648.842478][T10450] xt_LOG: prefix is not null-terminated [ 649.115330][T10300] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 649.155175][ T5788] usbhid 4-1:0.0: can't add hid device: -71 [ 649.155236][ T5788] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 649.160572][ T5788] usb 4-1: USB disconnect, device number 39 [ 649.269889][T10300] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 649.270899][T10300] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 649.270921][T10300] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.270938][T10300] usb 5-1: config 0 has no interface number 0 [ 649.308324][T10300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.308348][T10300] usb 5-1: Product: syz [ 649.308359][T10300] usb 5-1: Manufacturer: syz [ 649.308367][T10300] usb 5-1: SerialNumber: syz [ 649.338991][T10300] usb 5-1: config 0 descriptor?? [ 649.352988][T10300] hub 5-1:0.31: bad descriptor, ignoring hub [ 649.353012][T10300] hub 5-1:0.31: probe with driver hub failed with error -5 [ 649.361603][T10300] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 649.361640][T10300] uvcvideo 5-1:0.31: Entity type for entity Output 32774 was not initialized! [ 649.361666][T10300] uvcvideo 5-1:0.31: Failed to create links for entity 32774 [ 649.361675][T10300] uvcvideo 5-1:0.31: Failed to register entities (-22). [ 649.376759][ T5693] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 649.495366][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 649.523941][T10458] FAULT_INJECTION: forcing a failure. [ 649.523941][T10458] name failslab, interval 1, probability 0, space 0, times 0 [ 649.523969][T10458] CPU: 0 UID: 0 PID: 10458 Comm: syz.1.1291 Not tainted syzkaller #0 PREEMPT(full) [ 649.523990][T10458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 649.524001][T10458] Call Trace: [ 649.524008][T10458] [ 649.524015][T10458] dump_stack_lvl+0x100/0x190 [ 649.524041][T10458] should_fail_ex.cold+0x5/0xa [ 649.524062][T10458] should_failslab+0xc2/0x120 [ 649.524080][T10458] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 649.524098][T10458] ? __alloc_skb+0x140/0x710 [ 649.524118][T10458] __alloc_skb+0x140/0x710 [ 649.524134][T10458] ? __pfx___alloc_skb+0x10/0x10 [ 649.524156][T10458] tipc_buf_acquire+0x26/0xe0 [ 649.524175][T10458] tipc_msg_build+0x112/0x1100 [ 649.524193][T10458] ? tipc_node_find+0x2dc/0x510 [ 649.524215][T10458] ? __pfx_tipc_msg_build+0x10/0x10 [ 649.524243][T10458] __tipc_sendmsg+0xb68/0x1ab0 [ 649.524266][T10458] ? __pfx___tipc_sendmsg+0x10/0x10 [ 649.524281][T10458] ? __lock_acquire+0x5c0/0x1f40 [ 649.524299][T10458] ? sock_has_perm+0x25a/0x2f0 [ 649.524322][T10458] ? __pfx_sock_has_perm+0x10/0x10 [ 649.524347][T10458] ? lock_acquire+0x1d1/0x380 [ 649.524362][T10458] ? __pfx_woken_wake_function+0x10/0x10 [ 649.524381][T10458] ? lock_acquire+0x1d1/0x380 [ 649.524404][T10458] ? __local_bh_enable_ip+0xa5/0x120 [ 649.524423][T10458] tipc_sendmsg+0x4f/0x70 [ 649.524439][T10458] ____sys_sendmsg+0xa4d/0xbe0 [ 649.524459][T10458] ? __pfx_tipc_sendmsg+0x10/0x10 [ 649.524476][T10458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.524499][T10458] ? _kstrtoull+0x144/0x200 [ 649.524517][T10458] ? __pfx__kstrtoull+0x10/0x10 [ 649.524539][T10458] ___sys_sendmsg+0x190/0x1e0 [ 649.524562][T10458] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.524592][T10458] ? __fget_files+0x34/0x3d0 [ 649.524627][T10458] __sys_sendmmsg+0x20c/0x440 [ 649.524648][T10458] ? __pfx___sys_sendmmsg+0x10/0x10 [ 649.524664][T10458] ? ksys_write+0x190/0x250 [ 649.524697][T10458] ? fput+0x7c/0x100 [ 649.524715][T10458] ? ksys_write+0x1ac/0x250 [ 649.524728][T10458] ? __pfx_ksys_write+0x10/0x10 [ 649.524747][T10458] __x64_sys_sendmmsg+0x9c/0x100 [ 649.524763][T10458] ? lockdep_hardirqs_on+0x7d/0x110 [ 649.524782][T10458] do_syscall_64+0x123/0x790 [ 649.524803][T10458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.524818][T10458] RIP: 0033:0x7f344e19e159 [ 649.524829][T10458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.524844][T10458] RSP: 002b:00007f344f0ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 649.524858][T10458] RAX: ffffffffffffffda RBX: 00007f344e426180 RCX: 00007f344e19e159 [ 649.524867][T10458] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000008 [ 649.524876][T10458] RBP: 00007f344f0ef090 R08: 0000000000000000 R09: 0000000000000000 [ 649.524885][T10458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.524893][T10458] R13: 00007f344e426218 R14: 00007f344e426180 R15: 00007fffd5245fc8 [ 649.524914][T10458] [ 649.567342][ T5693] usb 3-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=9f.db [ 649.604355][ T5693] usb 3-1: config 8 has an invalid interface number: 33 but max is 0 [ 649.604380][ T5693] usb 3-1: config 8 has no interface number 0 [ 649.604406][ T5693] usb 3-1: config 8 interface 33 has no altsetting 0 [ 649.668455][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 649.669003][ T9] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 649.673372][ T9] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 649.673390][ T9] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 649.677033][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.677053][ T9] usb 1-1: Product: syz [ 649.677065][ T9] usb 1-1: Manufacturer: syz [ 649.677078][ T9] usb 1-1: SerialNumber: syz [ 649.678228][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.678248][ T5693] usb 3-1: Product: syz [ 649.678261][ T5693] usb 3-1: Manufacturer: syz [ 649.678274][ T5693] usb 3-1: SerialNumber: syz [ 651.195703][ T5788] usb 5-1: USB disconnect, device number 32 [ 651.475903][T10468] ceph: No mds server is up or the cluster is laggy [ 651.477308][ T5788] libceph: connect (1)[c::]:6789 error -101 [ 651.485393][ T5788] libceph: mon0 (1)[c::]:6789 connect error [ 651.597891][ T31] audit: type=1400 audit(1789593063.337:2357): avc: denied { setopt } for pid=10465 comm="syz.4.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 651.598032][ T31] audit: type=1400 audit(1789593063.337:2358): avc: denied { mounton } for pid=10465 comm="syz.4.1294" path="/254/sys" dev="tmpfs" ino=1434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 651.598189][ T31] audit: type=1400 audit(1789593063.347:2359): avc: denied { mount } for pid=10465 comm="syz.4.1294" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 651.624095][ T31] audit: type=1400 audit(1789593063.397:2360): avc: denied { ioctl } for pid=10451 comm="syz.2.1289" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 651.747489][ T5788] libceph: connect (1)[c::]:6789 error -101 [ 651.748441][ T5693] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware [ 651.769530][ T5788] libceph: mon0 (1)[c::]:6789 connect error [ 651.853901][ T31] audit: type=1400 audit(1789593063.627:2361): avc: denied { firmware_load } for pid=5693 comm="kworker/1:3" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 651.862096][ T5693] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 651.862231][ T5693] dib0700: firmware download failed at 7 with -22 [ 651.986040][ T5693] usb 3-1: USB disconnect, device number 42 [ 652.281810][ T31] audit: type=1400 audit(1789593064.057:2362): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 652.309869][ T31] audit: type=1400 audit(1789593064.087:2363): avc: denied { read write } for pid=5605 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 652.312923][ T31] audit: type=1400 audit(1789593064.087:2364): avc: denied { open } for pid=5605 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 653.290610][ T5693] usb 1-1: USB disconnect, device number 39 [ 653.321065][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 653.321079][ T31] audit: type=1400 audit(1789593065.097:2373): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 653.394669][ T31] audit: type=1400 audit(1789593065.167:2374): avc: denied { read } for pid=10476 comm="syz.2.1296" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 653.394906][ T31] audit: type=1400 audit(1789593065.167:2375): avc: denied { open } for pid=10476 comm="syz.2.1296" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 653.471571][ T31] audit: type=1400 audit(1789593065.247:2376): avc: denied { ioctl } for pid=10481 comm="syz.0.1298" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 653.504030][T10482] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1298'. [ 653.523092][ T31] audit: type=1400 audit(1789593065.297:2377): avc: denied { prog_load } for pid=10476 comm="syz.2.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 653.523370][ T31] audit: type=1400 audit(1789593065.297:2378): avc: denied { bpf } for pid=10476 comm="syz.2.1296" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 653.523676][ T31] audit: type=1400 audit(1789593065.297:2379): avc: denied { perfmon } for pid=10476 comm="syz.2.1296" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 653.544907][ T31] audit: type=1400 audit(1789593065.307:2380): avc: denied { prog_run } for pid=10476 comm="syz.2.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 653.613912][ T31] audit: type=1400 audit(1789593065.387:2381): avc: denied { create } for pid=10484 comm="syz.4.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 653.614812][ T31] audit: type=1400 audit(1789593065.387:2382): avc: denied { setopt } for pid=10484 comm="syz.4.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 653.845276][ T5693] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 655.375683][T10502] comedi comedi3: Minor 8192 is invalid! [ 657.190504][ T5693] usb 1-1: unable to get BOS descriptor or descriptor too short [ 657.191739][ T5693] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 657.191774][ T5693] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 657.192405][ T5693] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 657.192423][ T5693] usb 1-1: can't read configurations, error -71 [ 657.340318][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1305'. [ 658.511422][ T31] kauditd_printk_skb: 50 callbacks suppressed [ 658.511437][ T31] audit: type=1400 audit(1789593070.287:2433): avc: denied { write } for pid=10540 comm="syz.0.1310" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 658.568892][ T31] audit: type=1400 audit(1789593070.347:2434): avc: denied { name_bind } for pid=10540 comm="syz.0.1310" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 658.572446][ T31] audit: type=1400 audit(1789593070.347:2435): avc: denied { node_bind } for pid=10540 comm="syz.0.1310" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 658.712336][ T31] audit: type=1400 audit(1789593070.487:2436): avc: denied { setopt } for pid=10540 comm="syz.0.1310" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 658.915507][ T31] audit: type=1400 audit(1789593070.587:2437): avc: denied { create } for pid=10543 comm="syz.2.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 658.915673][ T31] audit: type=1400 audit(1789593070.597:2438): avc: denied { connect } for pid=10543 comm="syz.2.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 658.915792][ T31] audit: type=1400 audit(1789593070.597:2439): avc: denied { ioctl } for pid=10543 comm="syz.2.1311" path="socket:[29909]" dev="sockfs" ino=29909 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 659.399482][ T31] audit: type=1400 audit(1789593071.177:2440): avc: denied { setopt } for pid=10554 comm="syz.0.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 659.402861][ T31] audit: type=1400 audit(1789593071.177:2441): avc: denied { create } for pid=10554 comm="syz.0.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 659.403382][ T31] audit: type=1400 audit(1789593071.177:2442): avc: denied { write } for pid=10554 comm="syz.0.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 659.778949][T10555] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1313'. [ 660.506251][ T5693] libceph: connect (1)[c::]:6789 error -101 [ 660.506416][ T5693] libceph: mon0 (1)[c::]:6789 connect error [ 661.012237][T10300] libceph: connect (1)[c::]:6789 error -101 [ 661.012402][T10300] libceph: mon0 (1)[c::]:6789 connect error [ 661.075861][T10565] ceph: No mds server is up or the cluster is laggy [ 661.566686][T10300] libceph: connect (1)[c::]:6789 error -101 [ 661.566840][T10300] libceph: mon0 (1)[c::]:6789 connect error [ 662.516281][T10300] libceph: connect (1)[c::]:6789 error -101 [ 663.035435][T10300] libceph: mon0 (1)[c::]:6789 connect error [ 663.470632][T10300] libceph: connect (1)[c::]:6789 error -101 [ 663.470733][T10300] libceph: mon0 (1)[c::]:6789 connect error [ 663.540131][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 663.540147][ T31] audit: type=1400 audit(1789593075.317:2455): avc: denied { create } for pid=10579 comm="syz.3.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 663.589610][ T31] audit: type=1400 audit(1789593075.367:2456): avc: denied { read } for pid=10579 comm="syz.3.1319" dev="nsfs" ino=4026533153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 663.589636][ T31] audit: type=1400 audit(1789593075.367:2457): avc: denied { open } for pid=10579 comm="syz.3.1319" path="net:[4026533153]" dev="nsfs" ino=4026533153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 663.589655][ T31] audit: type=1400 audit(1789593075.367:2458): avc: denied { create } for pid=10579 comm="syz.3.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 663.590086][ T31] audit: type=1400 audit(1789593075.367:2459): avc: denied { bind } for pid=10579 comm="syz.3.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 663.684480][ T31] audit: type=1400 audit(1789593075.457:2460): avc: denied { append } for pid=10579 comm="syz.3.1319" name="comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 663.710213][T10581] comedi comedi3: Minor 8192 is invalid! [ 663.820884][ T31] audit: type=1400 audit(1789593075.597:2461): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 663.846731][ T31] audit: type=1400 audit(1789593075.627:2462): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 664.457277][ T31] audit: type=1400 audit(1789593076.237:2463): avc: denied { read write } for pid=10583 comm="syz.0.1320" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 664.457532][ T31] audit: type=1400 audit(1789593076.237:2464): avc: denied { open } for pid=10583 comm="syz.0.1320" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 664.531148][ T5693] hid_parser_main: 8 callbacks suppressed [ 664.531161][ T5693] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 664.552478][ T5693] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 665.336297][T10599] comedi comedi3: comedi_config --init_data is deprecated [ 665.560802][T10605] comedi comedi3: Minor 8192 is invalid! [ 665.629260][T10300] hid (null): unknown global tag 0x4b [ 665.629389][T10300] hid (null): unknown global tag 0xe [ 665.629426][T10300] hid (null): invalid report_count -563312610 [ 665.629463][T10300] hid (null): unknown global tag 0x94 [ 665.629654][T10300] hid (null): unknown global tag 0xe [ 665.629691][T10300] hid (null): invalid report_size 1303607880 [ 665.629846][T10300] hid (null): report_id 62689 is invalid [ 665.629883][T10300] hid (null): unknown global tag 0xe [ 665.630055][T10300] hid (null): unknown global tag 0xe [ 665.630225][T10300] hid (null): unknown global tag 0xd [ 665.630262][T10300] hid (null): global environment stack underflow [ 665.630314][T10300] hid (null): global environment stack underflow [ 665.711079][T10300] hid (null): global environment stack underflow [ 665.711206][T10300] hid (null): unknown global tag 0xd [ 665.711303][T10300] hid (null): unknown global tag 0xe [ 665.711342][T10300] hid (null): unknown global tag 0x47 [ 665.711498][T10300] hid (null): unknown global tag 0xc [ 665.711533][T10300] hid (null): unknown global tag 0xd [ 665.711595][T10300] hid (null): report_id 1158512002 is invalid [ 665.711664][T10300] hid (null): unknown global tag 0xc [ 665.711704][T10300] hid (null): unknown global tag 0x75 [ 665.711747][T10300] hid (null): invalid report_size 1942714448 [ 665.711837][T10300] hid (null): unknown global tag 0xd [ 665.711910][T10300] hid (null): unknown global tag 0x2c [ 665.712030][T10300] hid (null): unknown global tag 0xd [ 665.712169][T10300] hid (null): unknown global tag 0xd [ 665.712213][T10300] hid (null): invalid report_count -456916569 [ 665.712258][T10300] hid (null): unknown global tag 0xc [ 665.712347][T10300] hid (null): unknown global tag 0xae [ 665.712386][T10300] hid (null): invalid report_count -571715713 [ 665.712664][T10300] hid (null): report_id 1817576901 is invalid [ 665.712702][T10300] hid (null): unknown global tag 0xe [ 665.712743][T10300] hid (null): invalid report_size 53055 [ 665.712814][T10300] hid (null): bogus close delimiter [ 665.712927][T10300] hid (null): invalid report_size 62654 [ 665.712965][T10300] hid (null): unknown global tag 0xe [ 665.713031][T10300] hid (null): unknown global tag 0xe [ 665.713090][T10300] hid (null): unknown global tag 0xc [ 665.864021][T10300] hid (null): unknown global tag 0xe [ 665.864219][T10300] hid (null): unknown global tag 0xe [ 665.864386][T10300] hid (null): unknown global tag 0xc [ 665.942187][T10300] hid (null): bogus close delimiter [ 665.942227][T10300] hid (null): invalid report_count -2000808501 [ 665.942314][T10300] hid (null): invalid report_size 521722784 [ 665.942456][T10300] hid (null): unknown global tag 0xc [ 665.985484][T10300] hid (null): invalid report_count 12645 [ 666.071700][T10300] hid-generic 0002:80000001:0559.0024: unexpected long global item [ 666.089626][T10300] hid-generic 0002:80000001:0559.0024: probe with driver hid-generic failed with error -22 [ 667.235306][T10300] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 667.549166][T10620] ip_tables: iptables: counters copy to user failed while replacing table [ 667.565338][T10300] usb 4-1: Using ep0 maxpacket: 8 [ 667.566262][T10300] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 667.567086][T10300] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 667.567110][T10300] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 667.567125][T10300] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 667.567138][T10300] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 667.567152][T10300] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 667.567164][T10300] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.567184][T10300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.956680][T10623] ceph: No mds server is up or the cluster is laggy [ 667.968773][ T5728] libceph: connect (1)[c::]:6789 error -101 [ 667.968911][ T5728] libceph: mon0 (1)[c::]:6789 connect error [ 668.069742][T10300] usb 4-1: usb_control_msg returned -32 [ 668.069784][T10300] usbtmc 4-1:16.0: can't read capabilities [ 669.746847][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 669.746874][ T31] audit: type=1400 audit(1789593081.497:2521): avc: denied { connect } for pid=10613 comm="syz.3.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 669.985231][ T31] audit: type=1400 audit(1789593081.737:2522): avc: denied { setopt } for pid=10627 comm="syz.0.1332" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 672.809361][ T5611] Bluetooth: hci1: command 0x0406 tx timeout [ 674.658523][ C0] sched: DL replenish lagged too much [ 682.705489][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 682.722170][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 713.470203][ T5714] usb 4-1: USB disconnect, device number 40 [ 741.752463][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.758315][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.246088][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.257877][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 863.983792][ T32] INFO: task kworker/0:4:5588 blocked for more than 149 seconds. [ 863.983815][ T32] Not tainted syzkaller #0 [ 863.983825][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 863.983833][ T32] task:kworker/0:4 state:D stack:21464 pid:5588 tgid:5588 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 863.983889][ T32] Workqueue: events_power_efficient reg_check_chans_work [ 863.983914][ T32] Call Trace: [ 863.983920][ T32] [ 863.983932][ T32] __schedule+0x1259/0x6920 [ 863.983966][ T32] ? mark_held_locks+0x40/0x70 [ 863.983986][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 863.984013][ T32] ? __pfx___schedule+0x10/0x10 [ 863.984041][ T32] ? find_held_lock+0x2b/0x80 [ 863.984067][ T32] ? schedule+0x225/0x2c0 [ 863.984094][ T32] schedule+0xdd/0x2c0 [ 863.984116][ T32] schedule_preempt_disabled+0x13/0x30 [ 863.984139][ T32] __mutex_lock+0xccb/0x1bd0 [ 863.984164][ T32] ? reg_check_chans_work+0x169/0x12e0 [ 863.984185][ T32] ? reg_check_chans_work+0x471/0x12e0 [ 863.984205][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 863.984232][ T32] ? __mutex_unlock_slowpath+0x35d/0x930 [ 863.984264][ T32] ? register_lock_class+0x3f/0x7b0 [ 863.984286][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 863.984311][ T32] ? reg_check_chans_work+0x169/0x12e0 [ 863.984328][ T32] reg_check_chans_work+0x169/0x12e0 [ 863.984353][ T32] ? __pfx_reg_check_chans_work+0x10/0x10 [ 863.984374][ T32] ? lock_acquire+0x1d1/0x380 [ 863.984397][ T32] ? process_one_work+0x906/0x1b10 [ 863.984425][ T32] ? process_one_work+0x906/0x1b10 [ 863.984458][ T32] process_one_work+0xac7/0x1b10 [ 863.984497][ T32] ? __pfx_process_one_work+0x10/0x10 [ 863.984525][ T32] ? lock_acquire+0x1d1/0x380 [ 863.984553][ T32] ? __pfx_reg_check_chans_work+0x10/0x10 [ 863.984575][ T32] worker_thread+0x5ef/0xe50 [ 863.984610][ T32] ? __pfx_worker_thread+0x10/0x10 [ 863.984640][ T32] ? kthread+0x13a/0x450 [ 863.984664][ T32] ? __pfx_worker_thread+0x10/0x10 [ 863.984690][ T32] kthread+0x373/0x450 [ 863.984714][ T32] ? __pfx_kthread+0x10/0x10 [ 863.984741][ T32] ret_from_fork+0x730/0xd60 [ 863.984763][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 863.984786][ T32] ? __switch_to+0x800/0x10f0 [ 863.984812][ T32] ? __pfx_kthread+0x10/0x10 [ 863.984839][ T32] ret_from_fork_asm+0x1a/0x30 [ 863.984873][ T32] [ 863.984924][ T32] [ 863.984924][ T32] Showing all locks held in the system: [ 863.984931][ T32] locks held by kthreadd/2: 1, last CPU#1: [ 863.984944][ T32] #0: ffffffff8effd1d8 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 863.991956][ T32] locks held by kworker/0:0/9: 3, last CPU#0: [ 863.991969][ T32] #0: ffff888035e67d40 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 863.992032][ T32] #1: ffffc900000e7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 863.992102][ T32] #2: ffff88807a4d9700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 863.992154][ T32] locks held by kworker/u8:0/12: 3, last CPU#1: [ 863.992167][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 863.992219][ T32] #1: ffffc90000117d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 863.992269][ T32] #2: ffff888055a307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 863.992323][ T32] locks held by kworker/u8:1/13: 3, last CPU#1: [ 863.992335][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 863.992386][ T32] #1: ffffc90000127d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 863.992439][ T32] #2: ffff8880558a07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 863.992491][ T32] locks held by kworker/1:0/25: 4, last CPU#1: [ 863.992504][ T32] #0: ffff888035e67d40 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 863.992558][ T32] #1: ffffc900001f7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 863.992627][ T32] #2: ffff888034a99440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xc5/0x5f0 [ 863.992678][ T32] #3: ffff88807a4da0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xd8/0x5f0 [ 863.992729][ T32] locks held by kworker/1:1/30: 3, last CPU#1: [ 863.992742][ T32] #0: ffff888035c42d40 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 863.992797][ T32] #1: ffffc90000a57d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 863.992866][ T32] #2: ffff88807a4d8d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 863.992916][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 863.992929][ T32] #0: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 863.992980][ T32] locks held by kcompactd0/35: 1, last CPU#1: [ 863.992992][ T32] #0: ffff88802ad7c6a0 (&anon_vma->rwsem){++++}-{4:4}, at: rmap_walk_anon+0x740/0x9a0 [ 863.993046][ T32] locks held by kworker/u8:2/43: 4, last CPU#1: [ 863.993058][ T32] #0: ffff888026eb0940 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 863.993113][ T32] #1: ffffc90000b37d08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 863.993166][ T32] #2: ffff888026a65440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 863.993217][ T32] #3: ffff88807ee46640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 863.993268][ T32] locks held by kworker/u8:3/50: 3, last CPU#1: [ 863.993281][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 863.993332][ T32] #1: ffffc90000ba7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 863.993383][ T32] #2: ffff8880555d07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 863.993436][ T32] locks held by kworker/0:2/56: 3, last CPU#0: [ 863.993448][ T32] #0: ffff888033134940 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 863.993504][ T32] #1: ffffc9000100fd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 863.993571][ T32] #2: ffff88807f688d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 863.993620][ T32] locks held by kworker/u8:4/60: 4, last CPU#1: [ 863.993632][ T32] #0: ffff888026eb1140 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 863.993688][ T32] #1: ffffc9000203fd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 863.993740][ T32] #2: ffff88807a639440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 863.993790][ T32] #3: ffff88807f68f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 863.993840][ T32] locks held by kswapd0/87: 2, last CPU#1: [ 863.993853][ T32] #0: ffffffff8efcaca0 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0xbce/0x1f00 [ 863.993902][ T32] #1: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: folio_evictable+0x23/0x2c0 [ 863.993948][ T32] locks held by kworker/u8:5/140: 3, last CPU#1: [ 863.993961][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 863.994011][ T32] #1: ffffc90002d37d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 863.994068][ T32] #2: ffff8880562e07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 863.994120][ T32] locks held by kworker/u8:6/153: 3, last CPU#1: [ 863.994132][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 863.994182][ T32] #1: ffffc90002dc7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 863.994235][ T32] #2: ffff888023adf258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 863.994288][ T32] locks held by kworker/u8:7/165: 3, last CPU#1: [ 863.994300][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 863.994350][ T32] #1: ffffc90002ee7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 863.994401][ T32] #2: ffff8880552807a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 863.994456][ T32] locks held by kworker/u8:8/1101: 3, last CPU#1: [ 863.994468][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 863.994519][ T32] #1: ffffc90004fffd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 863.994568][ T32] #2: ffff888055bc07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 863.994620][ T32] locks held by kworker/u8:9/1112: 4, last CPU#1: [ 863.994632][ T32] #0: ffff888026eb0940 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 863.994687][ T32] #1: ffffc900050bfd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 863.994739][ T32] #2: ffff888026a65440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 863.994788][ T32] #3: ffff88807ee47028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 863.994838][ T32] locks held by kworker/u8:10/1131: 3, last CPU#1: [ 863.994852][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 863.994903][ T32] #1: ffffc900050dfd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 863.994954][ T32] #2: ffff8880557607a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 864.008219][ T32] locks held by kworker/0:3/2283: 4, on CPU#0: [ 864.008231][ T32] #0: ffff888035c42d40 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.008288][ T32] #1: ffffc90006e7fd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.008357][ T32] #2: ffff88802c775440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 864.008409][ T32] #3: ffff88807a4d8d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x860 [ 864.008468][ T32] locks held by kworker/R-ipv6_/3193: 3, on CPU#1: [ 864.008481][ T32] #0: ffff8880345fb940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.008530][ T32] #1: ffffc9000e1c7c68 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.008583][ T32] #2: ffffffff90cd2700 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 864.008630][ T32] locks held by udevd/4969: 2, last CPU#1: [ 864.008642][ T32] #0: ffffffff8f909538 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x262/0x460 [ 864.008684][ T32] #1: ffffffff8effd1d8 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 864.008729][ T32] locks held by dhcpcd/5263: 1, last CPU#0: [ 864.008742][ T32] #0: ffffffff8effd1d8 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 864.008786][ T32] locks held by dhcpcd/5264: 4, last CPU#1: [ 864.008799][ T32] #0: ffffffff8ef3d970 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x4806/0x8370 [ 864.008844][ T32] #1: ffff88801c079d38 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 864.008890][ T32] #2: ffff88803784c378 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 864.008940][ T32] #3: ffffffff8effd1d8 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 864.008985][ T32] locks held by getty/5363: 2, on CPU#0: [ 864.008997][ T32] #0: ffff8880347340a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 864.009046][ T32] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 864.009097][ T32] locks held by kworker/0:4/5588: 4, on CPU#0: [ 864.009109][ T32] #0: ffff88801c059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.009161][ T32] #1: ffffc900033efd08 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.009211][ T32] #2: ffffffff90cd2700 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x8a/0x12e0 [ 864.009253][ T32] #3: ffff8880552807a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x169/0x12e0 [ 864.009295][ T32] locks held by syz-executor/5598: 1, last CPU#1: [ 864.009308][ T32] #0: ffffffff8effd1d8 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 864.009352][ T32] locks held by syz-executor/5605: 1, last CPU#1: [ 864.009364][ T32] #0: ffffffff8effd1d8 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 864.009408][ T32] locks held by syz-executor/5609: 3, last CPU#1: [ 864.009421][ T32] #0: ffffffff8f909538 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x169/0x3c0 [ 864.009464][ T32] #1: ffffffff8effd1d8 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 864.009508][ T32] #2: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 864.009561][ T32] locks held by kworker/1:3/5693: 4, last CPU#1: [ 864.009573][ T32] #0: ffff888034427d40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.009628][ T32] #1: ffffc90003acfd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.009695][ T32] #2: ffff888033771440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xc5/0x5f0 [ 864.009744][ T32] #3: ffff88807a4dc888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xd8/0x5f0 [ 864.009795][ T32] locks held by kworker/1:4/5706: 3, last CPU#1: [ 864.009807][ T32] #0: ffff888031455540 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.009863][ T32] #1: ffffc90003b9fd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.009931][ T32] #2: ffff88802d229440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 864.009982][ T32] locks held by kworker/0:5/5707: 4, on CPU#0: [ 864.009995][ T32] #0: ffff888057a98140 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.010056][ T32] #1: ffffc90003ff7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.010124][ T32] #2: ffff88807a63d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 864.010175][ T32] #3: ffff88807f68a0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x860 [ 864.010225][ T32] locks held by kworker/0:6/5714: 5, last CPU#0: [ 864.010238][ T32] #0: ffff8880246e9940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.010288][ T32] #1: ffffc90004067d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.010339][ T32] #2: ffff8880233e61d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 864.010387][ T32] #3: ffffffff8effd1d8 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 864.010431][ T32] #4: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 864.010480][ T32] locks held by kworker/0:7/5728: 3, last CPU#0: [ 864.010492][ T32] #0: ffff888034427d40 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.010546][ T32] #1: ffffc90004147d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.010615][ T32] #2: ffff88807a4dbea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 864.010665][ T32] locks held by kworker/1:5/5736: 3, last CPU#1: [ 864.010678][ T32] #0: ffff888079404140 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.010733][ T32] #1: ffffc90004157d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.010801][ T32] #2: ffff88807ee44888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 864.010852][ T32] locks held by kworker/1:7/5788: 3, last CPU#1: [ 864.010864][ T32] #0: ffff888033134940 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.010919][ T32] #1: ffffc900042c7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.010987][ T32] #2: ffff88807f688330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 864.011041][ T32] locks held by kworker/1:8/5789: 3, last CPU#1: [ 864.011054][ T32] #0: ffff888057aa8540 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.011108][ T32] #1: ffffc900042d7d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.011176][ T32] #2: ffff88807f68bea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x30/0xe40 [ 864.011227][ T32] locks held by kworker/u8:11/6003: 3, last CPU#1: [ 864.011240][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.011290][ T32] #1: ffffc9000550fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.011342][ T32] #2: ffff8880562807a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 864.011394][ T32] locks held by kworker/u8:12/6369: 3, last CPU#1: [ 864.011407][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.011459][ T32] #1: ffffc9000557fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.011510][ T32] #2: ffff888055ff07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 864.011561][ T32] locks held by kworker/u8:13/6370: 4, last CPU#1: [ 864.011574][ T32] #0: ffff888026eb1940 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.011629][ T32] #1: ffffc9000556fd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.011682][ T32] #2: ffff88807a63d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 864.011732][ T32] #3: ffff88807f68a0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 864.011782][ T32] locks held by kworker/u8:15/6957: 4, last CPU#1: [ 864.011794][ T32] #0: ffff88802d7a2140 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.011850][ T32] #1: ffffc9000542fd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.011903][ T32] #2: ffff88802d22d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 864.011953][ T32] #3: ffff88807f68dc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 864.012003][ T32] locks held by kworker/u8:17/7034: 4, last CPU#0: [ 864.012016][ T32] #0: ffff88801c092940 ((wq_completion)kvfree_rcu_reclaim){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.012072][ T32] #1: ffffc90005377d08 ((work_completion)(&(&krcp->krw_arr[i].rcu_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.012125][ T32] #2: ffffffff8edec380 (rcu_callback){....}-{0:0}, at: kvfree_rcu_bulk+0x6a/0x190 [ 864.012172][ T32] #3: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 864.012221][ T32] locks held by kworker/u8:19/7129: 4, last CPU#1: [ 864.012233][ T32] #0: ffff888026eb3940 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.012288][ T32] #1: ffffc90003087d08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.012340][ T32] #2: ffff888079555440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 864.012389][ T32] #3: ffff88807f68b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 864.012442][ T32] locks held by kworker/u8:14/9481: 3, last CPU#1: [ 864.012453][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.012504][ T32] #1: ffffc90004c9fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.012554][ T32] #2: ffff8880551307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 864.012607][ T32] locks held by kworker/1:2/10300: 4, last CPU#1: [ 864.012619][ T32] #0: ffff888057a98140 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.012675][ T32] #1: ffffc900033dfd08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.012744][ T32] #2: ffff88807a63d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xc5/0x5f0 [ 864.012794][ T32] #3: ffff88807f68a0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0xd8/0x5f0 [ 864.012843][ T32] locks held by syz.4.1304/10538: 1, last CPU#1: [ 864.012856][ T32] #0: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: folio_lruvec_lock_irqsave+0x2c/0x5f0 [ 864.012906][ T32] locks held by syz.1.1321/10589: 1, last CPU#1: [ 864.012919][ T32] #0: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 864.012967][ T32] locks held by syz.0.1332/10627: 1, on CPU#0: [ 864.012979][ T32] #0: ffffffff8edf8278 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 864.013027][ T32] locks held by kworker/u8:16/10635: 4, last CPU#1: [ 864.013039][ T32] #0: ffff88802d7a1940 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.013093][ T32] #1: ffffc900036dfd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.013146][ T32] #2: ffff88802d229440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 864.013196][ T32] #3: ffff88807ee45270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 864.013246][ T32] locks held by syz-executor/10636: 3, last CPU#1: [ 864.013259][ T32] #0: ffff8880320c9460 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xa3/0x1940 [ 864.013303][ T32] #1: ffffffff8f909538 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_bprm_check_security+0x11f/0x1d0 [ 864.013352][ T32] #2: ffffffff8effd1d8 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 864.013397][ T32] locks held by kworker/u8:18/10637: 3, last CPU#1: [ 864.013410][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 864.013461][ T32] #1: ffffc9000474fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 864.013514][ T32] #2: ffff88807e74b258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 864.013569][ T32] [ 864.013573][ T32] ============================================= [ 864.013573][ T32] [ 864.013581][ T32] NMI backtrace for cpu 1 [ 864.013592][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 864.013613][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 864.013623][ T32] Call Trace: [ 864.013630][ T32] [ 864.013637][ T32] dump_stack_lvl+0x100/0x190 [ 864.013664][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 864.013693][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 864.013715][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 864.013738][ T32] sys_info+0x141/0x190 [ 864.013756][ T32] watchdog+0xcb1/0x1030 [ 864.013782][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 864.013805][ T32] ? __pfx_watchdog+0x10/0x10 [ 864.013826][ T32] ? __kthread_parkme+0x18f/0x230 [ 864.013852][ T32] ? kthread+0x13a/0x450 [ 864.013875][ T32] ? __pfx_watchdog+0x10/0x10 [ 864.013894][ T32] kthread+0x373/0x450 [ 864.013917][ T32] ? __pfx_kthread+0x10/0x10 [ 864.013943][ T32] ret_from_fork+0x730/0xd60 [ 864.013964][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 864.013986][ T32] ? __switch_to+0x800/0x10f0 [ 864.014011][ T32] ? __pfx_kthread+0x10/0x10 [ 864.014043][ T32] ret_from_fork_asm+0x1a/0x30 [ 864.014075][ T32] [ 864.014082][ T32] Sending NMI from CPU 1 to CPUs 0: [ 864.014105][ C0] NMI backtrace for cpu 0 [ 864.014117][ C0] CPU: 0 UID: 0 PID: 56 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 864.014135][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 864.014144][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 864.014163][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x20/0x40 [ 864.014184][ C0] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 8b 05 96 4c 74 05 85 c0 74 20 8b 05 20 7d 74 05 85 c0 74 16 65 48 8b 05 28 8f bb 08 <8b> 80 a4 0b 00 00 85 c0 0f 94 c0 0f b6 c0 c3 cc cc cc cc 66 2e 0f [ 864.014197][ C0] RSP: 0018:ffffc900000070f8 EFLAGS: 00000202 [ 864.014209][ C0] RAX: ffff88801cbb2580 RBX: 0000000000000001 RCX: ffffffff91e21020 [ 864.014219][ C0] RDX: 1ffff92000000e2e RSI: 0000000000000000 RDI: ffffffff915a2274 [ 864.014228][ C0] RBP: 0000000000000000 R08: ffffffff91e2104a R09: 0000000000000007 [ 864.014237][ C0] R10: 0000000000000200 R11: 000000000000762b R12: ffffc900000071c0 [ 864.014246][ C0] R13: ffffc90000007170 R14: ffffc900000071a5 R15: ffffffff91e21025 [ 864.014256][ C0] FS: 0000000000000000(0000) GS:ffff888123b59000(0000) knlGS:0000000000000000 [ 864.014272][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 864.014281][ C0] CR2: 00007fd43eceb120 CR3: 00000000765ec000 CR4: 00000000003526f0 [ 864.014291][ C0] Call Trace: [ 864.014296][ C0] [ 864.014301][ C0] unwind_next_frame+0x3a8/0x2090 [ 864.014321][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 864.014337][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 864.014360][ C0] arch_stack_walk+0x94/0xf0 [ 864.014379][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 864.014394][ C0] ? skb_free_head+0xb9/0x160 [ 864.014410][ C0] stack_trace_save+0x8e/0xc0 [ 864.014423][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 864.014437][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 864.014454][ C0] kasan_save_stack+0x30/0x50 [ 864.014469][ C0] ? kasan_save_stack+0x30/0x50 [ 864.014484][ C0] ? kasan_save_track+0x14/0x30 [ 864.014499][ C0] ? kasan_save_free_info+0x3b/0x70 [ 864.014524][ C0] ? __kasan_slab_free+0x5f/0x80 [ 864.014539][ C0] ? kfree+0x22b/0x6d0 [ 864.014558][ C0] ? skb_free_head+0xb9/0x160 [ 864.014571][ C0] ? skb_release_data+0x6c5/0x8e0 [ 864.014587][ C0] ? consume_skb+0xc4/0x110 [ 864.014605][ C0] ? nft_synproxy_do_eval+0x919/0xce0 [ 864.014623][ C0] ? nft_do_chain+0x2e5/0x19d0 [ 864.014640][ C0] ? nft_do_chain_inet+0xf3/0x400 [ 864.014657][ C0] ? nf_hook_slow+0xbf/0x220 [ 864.014671][ C0] ? nf_hook.constprop.0+0x2a6/0x750 [ 864.014689][ C0] ? ip6_input+0xe0/0x2f0 [ 864.014706][ C0] ? ipv6_rcv+0x263/0x3d0 [ 864.014722][ C0] ? __netif_receive_skb_one_core+0x12d/0x1e0 [ 864.014737][ C0] ? __netif_receive_skb+0x1f/0x120 [ 864.014750][ C0] ? process_backlog+0x487/0x1600 [ 864.014763][ C0] ? __napi_poll.constprop.0+0xaf/0x450 [ 864.014777][ C0] ? net_rx_action+0xa40/0xf20 [ 864.014790][ C0] ? handle_softirqs+0x1e6/0x9d0 [ 864.014804][ C0] ? do_softirq+0xaf/0xf0 [ 864.014818][ C0] ? __local_bh_enable_ip+0xff/0x120 [ 864.014832][ C0] ? kernel_fpu_end+0x64/0x80 [ 864.014849][ C0] ? blake2s_compress+0x78/0xf0 [ 864.014866][ C0] ? blake2s_update+0xef/0x320 [ 864.014882][ C0] ? hmac.constprop.0+0x33f/0x480 [ 864.014898][ C0] ? kdf.constprop.0+0x209/0x280 [ 864.014914][ C0] ? wg_noise_handshake_begin_session+0x30b/0xe40 [ 864.014933][ C0] ? wg_packet_send_handshake_response+0x219/0x310 [ 864.014948][ C0] ? wg_receive_handshake_packet+0x7dd/0xc20 [ 864.014962][ C0] ? wg_packet_handshake_receive_worker+0x15e/0x370 [ 864.014981][ C0] ? process_one_work+0xac7/0x1b10 [ 864.015002][ C0] ? worker_thread+0x5ef/0xe50 [ 864.015022][ C0] ? kthread+0x373/0x450 [ 864.015043][ C0] ? ret_from_fork+0x730/0xd60 [ 864.015061][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 864.015089][ C0] kasan_save_track+0x14/0x30 [ 864.015108][ C0] kasan_save_free_info+0x3b/0x70 [ 864.015133][ C0] __kasan_slab_free+0x5f/0x80 [ 864.015153][ C0] ? skb_free_head+0x20/0x160 [ 864.015170][ C0] kfree+0x22b/0x6d0 [ 864.015196][ C0] skb_free_head+0xb9/0x160 [ 864.015213][ C0] skb_release_data+0x6c5/0x8e0 [ 864.015236][ C0] consume_skb+0xc4/0x110 [ 864.015268][ C0] nft_synproxy_do_eval+0x919/0xce0 [ 864.015291][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 864.015318][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 864.015340][ C0] nft_do_chain+0x2e5/0x19d0 [ 864.015362][ C0] ? ip6t_do_table+0xbed/0x1c90 [ 864.015381][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 864.015402][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 864.015425][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 864.015447][ C0] ? nf_nat_inet_fn+0x530/0xb50 [ 864.015476][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 864.015503][ C0] nft_do_chain_inet+0xf3/0x400 [ 864.015529][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 864.015549][ C0] ? nf_nat_ipv6_local_in+0x4b5/0x6c0 [ 864.015577][ C0] ? lock_acquire+0x1d1/0x380 [ 864.015595][ C0] ? nf_hook.constprop.0+0x98/0x750 [ 864.015618][ C0] nf_hook_slow+0xbf/0x220 [ 864.015637][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 864.015658][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 864.015681][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 864.015703][ C0] ? lock_acquire+0x1d1/0x380 [ 864.015721][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 864.015747][ C0] ip6_input+0xe0/0x2f0 [ 864.015767][ C0] ? __pfx_ip6_input+0x10/0x10 [ 864.015788][ C0] ipv6_rcv+0x263/0x3d0 [ 864.015810][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 864.015831][ C0] __netif_receive_skb_one_core+0x12d/0x1e0 [ 864.015849][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 864.015868][ C0] ? lock_acquire+0x1d1/0x380 [ 864.015887][ C0] ? process_backlog+0x437/0x1600 [ 864.015905][ C0] ? process_backlog+0x437/0x1600 [ 864.015921][ C0] __netif_receive_skb+0x1f/0x120 [ 864.015939][ C0] process_backlog+0x487/0x1600 [ 864.015960][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 864.015980][ C0] net_rx_action+0xa40/0xf20 [ 864.016002][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 864.016019][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 864.016040][ C0] ? try_to_wake_up+0x158/0x1c90 [ 864.016061][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 864.016081][ C0] ? sched_clock+0x3a/0x60 [ 864.016097][ C0] ? sched_clock_cpu+0x6c/0x570 [ 864.016118][ C0] ? mark_held_locks+0x40/0x70 [ 864.016137][ C0] handle_softirqs+0x1e6/0x9d0 [ 864.016156][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 864.016174][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 864.016191][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 864.016217][ C0] ? kernel_fpu_end+0x5f/0x80 [ 864.016238][ C0] do_softirq+0xaf/0xf0 [ 864.016255][ C0] [ 864.016261][ C0] [ 864.016268][ C0] __local_bh_enable_ip+0xff/0x120 [ 864.016286][ C0] kernel_fpu_end+0x64/0x80 [ 864.016307][ C0] blake2s_compress+0x78/0xf0 [ 864.016328][ C0] blake2s_update+0xef/0x320 [ 864.016350][ C0] hmac.constprop.0+0x33f/0x480 [ 864.016372][ C0] ? __pfx_hmac.constprop.0+0x10/0x10 [ 864.016404][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 864.016423][ C0] kdf.constprop.0+0x209/0x280 [ 864.016446][ C0] ? __pfx_kdf.constprop.0+0x10/0x10 [ 864.016469][ C0] ? find_held_lock+0x2b/0x80 [ 864.016494][ C0] ? ktime_get_coarse_with_offset+0x1af/0x240 [ 864.016513][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 864.016544][ C0] wg_noise_handshake_begin_session+0x30b/0xe40 [ 864.016572][ C0] wg_packet_send_handshake_response+0x219/0x310 [ 864.016589][ C0] ? wg_socket_set_peer_endpoint+0x324/0xbe0 [ 864.016609][ C0] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 864.016633][ C0] ? kfree_skbmem+0x19a/0x210 [ 864.016659][ C0] wg_receive_handshake_packet+0x7dd/0xc20 [ 864.016677][ C0] ? __pfx_wg_receive_handshake_packet+0x10/0x10 [ 864.016695][ C0] ? lock_acquire+0x1d1/0x380 [ 864.016713][ C0] ? do_raw_spin_lock+0x128/0x260 [ 864.016737][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 864.016757][ C0] wg_packet_handshake_receive_worker+0x15e/0x370 [ 864.016779][ C0] process_one_work+0xac7/0x1b10 [ 864.016809][ C0] ? __pfx_process_one_work+0x10/0x10 [ 864.016835][ C0] ? lock_acquire+0x1d1/0x380 [ 864.016856][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 864.016878][ C0] worker_thread+0x5ef/0xe50 [ 864.016906][ C0] ? __pfx_worker_thread+0x10/0x10 [ 864.016932][ C0] ? kthread+0x13a/0x450 [ 864.016953][ C0] ? __pfx_worker_thread+0x10/0x10 [ 864.016977][ C0] kthread+0x373/0x450 [ 864.016999][ C0] ? __pfx_kthread+0x10/0x10 [ 864.017022][ C0] ret_from_fork+0x730/0xd60 [ 864.017041][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 864.017060][ C0] ? __switch_to+0x800/0x10f0 [ 864.017084][ C0] ? __pfx_kthread+0x10/0x10 [ 864.017109][ C0] ret_from_fork_asm+0x1a/0x30 [ 864.017134][ C0] [ 864.657018][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.668837][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.084200][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 874.575302][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 874.584404][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 874.594450][ T32] Call Trace: [ 874.597720][ T32] [ 874.600642][ T32] dump_stack_lvl+0x100/0x190 [ 874.605330][ T32] vpanic+0x553/0x970 [ 874.609303][ T32] ? __pfx_vpanic+0x10/0x10 [ 874.613808][ T32] panic+0xd1/0xe0 [ 874.617519][ T32] ? __pfx_panic+0x10/0x10 [ 874.621934][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 874.628081][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 874.634228][ T32] ? watchdog.cold+0x1ec/0x234 [ 874.638992][ T32] watchdog.cold+0x1fd/0x234 [ 874.643582][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 874.649384][ T32] ? __pfx_watchdog+0x10/0x10 [ 874.654063][ T32] ? __kthread_parkme+0x18f/0x230 [ 874.659090][ T32] ? kthread+0x13a/0x450 [ 874.663330][ T32] ? __pfx_watchdog+0x10/0x10 [ 874.668000][ T32] kthread+0x373/0x450 [ 874.672070][ T32] ? __pfx_kthread+0x10/0x10 [ 874.676659][ T32] ret_from_fork+0x730/0xd60 [ 874.681245][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 874.686351][ T32] ? __switch_to+0x800/0x10f0 [ 874.691031][ T32] ? __pfx_kthread+0x10/0x10 [ 874.695620][ T32] ret_from_fork_asm+0x1a/0x30 [ 874.700394][ T32] [ 874.703605][ T32] Kernel Offset: disabled [ 874.707916][ T32] Rebooting in 86400 seconds..