last executing test programs: 9.678591216s ago: executing program 4 (id=203): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x32, 0x7, @void}, 0x10) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x400010, &(0x7f0000394000/0x3000)=nil, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000200)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x32, 0x7, @void}, 0x10) (async) pipe2$9p(0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) (async) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async) rseq(0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) (async) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) (async) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) (async) get_mempolicy(0x0, 0x0, 0x400010, &(0x7f0000394000/0x3000)=nil, 0x2) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000200)) (async) 7.071693397s ago: executing program 3 (id=218): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x286043, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x813}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x10}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x7ef, 0x9, 0x3031334d, 0x5, 0x0, [{}, {0xffffffff}, {}, {0x0, 0x76dfbff1}, {}, {0x0, 0xffffffff}, {}, {0x3}], 0x0, 0x20}}) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40046f41, &(0x7f0000000440)=0x1f) 6.68659982s ago: executing program 2 (id=220): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000080)) 6.524232071s ago: executing program 2 (id=222): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x4e) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) userfaultfd(0x80001) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r3, r3, 0x3, 0xfffffffffffffffa, 0x3fff}) 5.612356195s ago: executing program 3 (id=223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @remote}, {0x118}, 0x53848a4054cad0aa, {0x2, 0x1, @broadcast}}) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000000040)={0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x4080) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x3, 0x30) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @broadcast, @dev}, &(0x7f0000000140)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0xfe5}, 0x8) signalfd(0xffffffffffffffff, &(0x7f00000009c0)={[0x20000000004]}, 0xfffffffffffffe65) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x10, 0xffff, 0x2, 0x4, 0xa0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r5, &(0x7f0000000040), 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 5.441033982s ago: executing program 2 (id=224): syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "021736", 0x44, 0x2b, 0x0, @private2, @mcast2}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 5.024399243s ago: executing program 2 (id=226): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, &(0x7f0000000040)={0x60, 0xa, 0x6, "dfb7b6eab4b2"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x3ab, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0xea, 0x7b, 0x97, 0x20, 0x3340, 0x191c, 0xb10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x399, 0x3, 0x10, 0x9, 0x40, 0x72, [{{0x9, 0x4, 0x27, 0x0, 0x3, 0x52, 0x74, 0xfa, 0x9, [], [{{0x9, 0x5, 0x5, 0x8, 0x8, 0x7, 0x73, 0xfc, [@generic={0x41, 0x30, "72805341bfb29704d8fd074d66aad92739bc99328652c96f1e61313dcbab4f22833a121b65d3f69888d63237b5fde3337a245c46c4615073f4c61a95a79e79"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x5, 0xc, 0x7, [@generic={0x4f, 0x7, "6cb85156ff3dc633a41fc40ea7424af9f87f52bae5245cfcc44276d5b53342ba9f0e042520af0e6a62049a86672b70260a182f22ba678fb74fa539792442aa7134cd36cf9799f355acbe260b57"}, @generic={0x86, 0x30, "ff91e73c7799a22cfb08518b7b0b78c596d124b81adee5cd9caeb69036b54aa7e82096669d225d6d8bdc09407beb7c8f9fcbad2597fc05f86dbda5bcdee5944a5ecffbdcffaca1dec4e42e5246aa5ca544ebbe88400fad4d45380b0c2cda845cdf2a52ad44a123193c36efff08742803f103cc528d9dde340c1bfa3b2b9ebdd2420f7af3"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0xf8, 0x83, 0x81, [@generic={0x5d, 0x22, "e71d72355e690cae662ce70340b2af8be44f67f2fb1d741b8ee73768dad94797c15e06f2818ebb219452339db82fdf8ff19656548ecf7ebfcf1fc42c1a4e8a205bce8121efa59ad48ebd64bb49002529e884819f7077b519c61887"}]}}]}}, {{0x9, 0x4, 0xdb, 0x4, 0x4, 0x26, 0x99, 0xc9, 0x2a, [@generic={0x2, 0x23}, @uac_control={{0xa, 0x24, 0x1, 0x2, 0x3}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x306, 0x6, 0x2, 0xce}]}], [{{0x9, 0x5, 0xa, 0x8, 0x10, 0x8, 0xa, 0x78, [@generic={0x4a, 0x23, "a39928fdcdc3b8a08201cfddb201e3befc78ed3740f670708471815dc570da72ea6588c882e2175763397cdf5b2c2ff46fef353be86e1aa1274c2f9a491e9bc78e6641a8bfd2b56d"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x0, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe4, 0x3}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x1, 0x7, 0xfe, [@generic={0x44, 0xb, "219e08d6cb995924fae9bbae07826e2ac0442062fd795baa7141450599becc5369b4c51846cdcfb2aac9c47d78170cb41528a965e505eee539f8802f9cb3004b0431"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x1, 0xca, 0x9, [@generic={0x2, 0x21}, @generic={0xc3, 0x4, "414d5637e2d3131651176452fa06864e62548f6c48d35aeb68f035bdcc605c3b2a3e18686db0d88f5d67a631b9519e92683ec8351a884c6edc054b548c22de836aaec80302ccbc829a1a4d4701644b37440a2c21fee1fbd410ae5553d2e08d83af74a7eea2104b3b2f66f67b2f4e744bf94edc155bee22ba3ed1676d7a560c5d4a0a204a8eb4e4884d1a3d3b19c816665cf64782ae138c1d048b707b0fdb95b9ad0340348ec2e057839a7e9ca789c416a714fcbdeb6f4a898681ec912fa68568cb"}]}}]}}, {{0x9, 0x4, 0x4e, 0x7, 0x0, 0x33, 0x90, 0xe0, 0xd, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "7abe83baf26f"}, {0x5, 0x24, 0x0, 0x6462}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x3ff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @country_functional={0x6, 0x24, 0x7, 0x1, 0x1}]}, @generic={0x17, 0x21, "84dfc2b36e38ba4ad39e0b358b5ad55ec18d1f4323"}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x5, 0x7, 0x4, 0x10, 0x3}, 0xa8, &(0x7f0000000080)={0x5, 0xf, 0xa8, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "104c07b2b939b1639846f6b99ae39cb6"}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x8e, 0x0, 0xae01, [0xff3fc0, 0x3f3f]}, @ptm_cap={0x3}, @generic={0x78, 0x10, 0x4, "6448db8198b3cb9d14dd415bafbad9d82d03566e0b10e7270ad2fd127905910abb06513c32e0ec96b56c4237bdce77684f651152f503ed87f240b1d1c1bfa3a027775c213750b0bdce91e71847a15f01954bf7a0b7792406b80b326a3fe5d14b1991316c7767e3c5a3cc021691f9754b0bafc04cad"}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000900)={0x14, &(0x7f0000000780)={0x0, 0x24, 0xd8, {0xd8, 0x31, "0788615c29d9fe69ff689f89ce0f7cf5e85ed3ac5e8409b84037a44fc3074a4f2ff3c4cb489cb35a0f401fdc3e53c31bdc4877fc45e02ed4d21b9f3678be0c728e9185100fddb9cb99d6ebd742e32c0a1c6dd733f3d74c18a712b48506e53d9f469edea4875b416329f7de88277adf2659f69edbc3c631b335062475154b59edb0a4c7a91289f63831eb69cc27f94ecb705594d60d8b6e0cd8f4af3f278ba2ed96dc5ab2dbbc4378d38215a1bf5f3dfb4711187f8ab04dc125fe763c2c971e652d46ba807f8c913313c14f6c34536f051cd918ef1e71"}}, &(0x7f0000000880)={0x0, 0x3, 0x76, @string={0x76, 0x3, "92ca8f4f390aed854922f3940499fe8484386d25fcdaf2f7fc3631b0fa320cf627c884dc4bbb15ddba87f658d20905a000622d206194f8cc33928d82be603b408ddeeada99db5b875e7bc838b20017f7375694bcecb231952ef7bdbc1e862e0afbc0bbc35c4c79889cb78dcaa96b2490995e88e9"}}}, &(0x7f0000000bc0)={0x34, &(0x7f0000000a00)={0x20, 0xe, 0x97, "b89042c6c722b75e80c0a839337054cf3e266fabfa47c98009720068ef55ffde8d942cabdd6a43a68e7d00e217ce4c1b2faf2ef6a437540652254c7295630ebbda651b51bcf88bc5fb310a4557e23b11c2d36208e98cad65a476ec3c5453f083d92f031ba843161944fa4e6ba8da5cc42cd96783ad09c753344a2aa511541dfe270e2c9c08734824000599dcf1728097975b9a0a3f5c2a"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000ac0)={0x20, 0x0, 0x7a, {0x78, "ec0023b8a33be3ddb7e66b2503c21837150b38b32764f11ee8a2c22eb6ad8c9884acb7943bca93a67f73b036f32b0dc8fec55f8edc7f022d8930cce0c89c737d42b86dc1916d3b9bf014e052fb0ce372bf07f483c8b1207b8f0401a8f1887b9ae0f8d8551aa9b327d98c34862a259bcf16e38978e870d7bf"}}, &(0x7f0000000b40)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x0, 0x1, 0xb}}) 4.972586668s ago: executing program 4 (id=228): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32250000000900010073797a3000000000080005400000001f"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1191ce0}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x60, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_IFNAME={0xffffffffffffffe5, 0x8, 'batadv_slave_0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x101}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4004040) syz_io_uring_setup(0x10c, &(0x7f00000004c0)={0x0, 0x6d89, 0x8000, 0x40000, 0x115}, 0x0, 0x0) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2}, &(0x7f0000000040), &(0x7f0000000140)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000000180)={0x3ff, 0x99}, 0x1) 4.623678478s ago: executing program 3 (id=233): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x286043, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x813}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x10}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x7ef, 0x9, 0x3031334d, 0x5, 0x0, [{}, {0xffffffff}, {}, {0x0, 0x76dfbff1}, {}, {0x0, 0xffffffff}, {}, {0x3}], 0x0, 0x20}}) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40046f41, &(0x7f0000000440)=0x1f) 4.526123541s ago: executing program 0 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000100)='./bus\x00', 0x94) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000380)=ANY=[@ANYBLOB="06"], 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) (fail_nth: 5) 4.176402821s ago: executing program 0 (id=236): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x47cdc) 3.999595715s ago: executing program 0 (id=238): timer_create(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='fsi_master_gpio_crc_rsp_error\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYRESHEX=0x0], 0xb4}}, 0x0) 3.949388534s ago: executing program 4 (id=240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x2d58, &(0x7f0000000380)={0x0, 0x62cc, 0x400, 0x8000002, 0x3f7}) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$usbmon(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x2000000000000069, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000010800084000000001140000001100010000080000000000000000000a"], 0x6c}, 0x1, 0x0, 0x0, 0x890}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000280)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r5, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001500)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x3, 0x8, 0x0, 'queue1\x00', 0x8}) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000140)=ANY=[@ANYBLOB="5b3b14c928ec00000000000000ba134248086e94621c6adf0c6c452796cebf0eafca4dcb75b8700413b994d1c4d31c023837f535a1196ae84fd790abab73"]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000f010000d00000000000000", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4400) 3.507608655s ago: executing program 3 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x60, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 3.384622911s ago: executing program 1 (id=242): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x1c) listen(r3, 0x0) r4 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r4, &(0x7f0000000080)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x1}, 0x10, 0x0}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r3, 0x0, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socket$alg(0x26, 0x5, 0x0) r8 = syz_io_uring_setup(0x2c15, &(0x7f0000000380)={0x0, 0x78e9, 0x400, 0x0, 0x133}, &(0x7f0000000180), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r8, 0x1e, &(0x7f0000000300)={r1}, 0x1) 3.302459558s ago: executing program 3 (id=243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @remote}, {0x118}, 0x53848a4054cad0aa, {0x2, 0x1, @broadcast}}) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000000040)={0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x4080) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x3, 0x30) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0xfe5}, 0x8) signalfd(0xffffffffffffffff, &(0x7f00000009c0)={[0x20000000004]}, 0xfffffffffffffe65) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x10, 0xffff, 0x2, 0x4, 0xa0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r5, &(0x7f0000000040), 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 3.27828523s ago: executing program 4 (id=244): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x4e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) userfaultfd(0x80001) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r3, r3, 0x3, 0xfffffffffffffffa, 0x3fff}) 3.020785234s ago: executing program 1 (id=245): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, 0x0) 2.959658132s ago: executing program 0 (id=246): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) flock(r0, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x21, 0x3, 0xb) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000052000123000000000000000002"], 0x1c}}, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x47, 0x0, &(0x7f0000000180)) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg(r3, &(0x7f0000000180)={0x1, {&(0x7f0000000440)=""/196, 0xc4, 0x0, 0x1, 0x2}}, 0x48) map_shadow_stack(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="d144485c84df53ca02b6813371b8df358f72811fb4c7d558285bdfc2d45c8e0491363af19cdd1b0ebcdb2c2e3df3c2cfed35ec76805c334827165f5c1f54b5c22f22", 0x42}], 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x0, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x240) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) 2.549579355s ago: executing program 1 (id=247): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x47cdc) 2.394805621s ago: executing program 1 (id=248): r0 = syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) setns(r0, 0x24020000) mkdir(0x0, 0x21) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r8 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80000) poll(&(0x7f00000002c0)=[{r8, 0x400}, {r4, 0x2120}, {r3, 0x2010}, {r5, 0x4402}, {0xffffffffffffffff, 0x5000}, {r4, 0x9100}], 0x6, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='kfree\x00'}, 0x18) recvmsg$unix(0xffffffffffffffff, 0x0, 0x566e105bf7b091e4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x4, 0x8, 0xd27, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.336758127s ago: executing program 0 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) madvise(&(0x7f000033d000/0x1000)=nil, 0x1000, 0x17) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f00000003c0)=[{}, {}], 0x2, 0x401, 0x0, 0x0, 0x0, 0x59}) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 2.319630209s ago: executing program 3 (id=250): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="bc66f4bf", 0x4, 0x20048894, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd}, 0x1c) vmsplice(r1, &(0x7f0000001700)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r4, 0x601, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0xc884) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000140)=0x6000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000000000008, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) getpid() sched_setscheduler(0xffffffffffffffff, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000080)=0x3, 0x4) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) connect$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4, 0x2}}, 0x10) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = dup(r9) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) fsetxattr$security_capability(r8, &(0x7f0000000240), &(0x7f00000002c0)=@v2={0x2000000, [{0x6, 0x3}, {0xffffffff, 0x11d9}]}, 0x14, 0x5) 2.144879985s ago: executing program 4 (id=251): r0 = mq_open(&(0x7f0000000000)='!se\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00\v\xb4\xeb\xba\xc6e^\x15\t\x98-\xd8A\xec\xc6\xb2{\xb1\xf1\xfa\xd0^\x84\xda\xef\xb1f\xe7\xaf\xf0\xe8\x05\x05\xe8\x1c~\xa7\xbf\x90\x0f)\xbc\r\xf9\xeb\x18MaJn\xee\x0f\xd0w\xd0B\x8b\xa5S%m\f\xd0\xf8Y\xa0\xb6W\xe7\xd5\x8f\xbdN9\x14M\b0\xf9\x02I\xcc\xf9\x8b\x926\xc7\xfb\xc8\xff\xa9\vt\xaeP\xd6\xa7\x1f\x16\x12N\x1cq\x02\xfc\x85\xd3\xe3|*\xac\v\xc6C\xa4<(\xc3\xbb\x99\tl\x9a\x1d\x12q\xa1\xb4\x87\xf6GU\xe8U\xd80f\xb8\x95~\xb7\x7f\xf5\xb0X\x06\xb6{\x81BB\xfb\xa7+13\xeba\xa1\x1b&\xd3\x9b\x87&\xc5_\x1c\x98\x06\xceH\xb7.C\xbd\xa2\xd9\xa0c-\x9a\x95\xcb\x9e\xeb\xc7\xee\x8c\xce\xa3\xbcF\xb8\x8d\xb9\xf6s\xce5\xb5\xc0\x9c \x9d\x18.\xcd\xcd\x90u\xac\x1fG5\xd3\xeb+\xbe\xd5\xad\xcf#\xc5\x98\xf3A\xd0\xf0\xd0J\xf9\x9b\xe2}\xf5\xe8yc\xf5\n\x9f\xf8\xdfQ\x8a\xf5Wt\xca+\xbd\x88\x13\xa7h\x13\xb6\x1f\xc2.\xf1l\x1c\x80RN\xab\x1e#7\xeb\xac\x95\x18', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet_udp(0x2, 0x2, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e23, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000"], 0x50) sendto$inet(r1, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x8}, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x1000080, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB='\x00\x00']) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) mq_timedreceive(r0, &(0x7f0000000140)=""/214, 0xd6, 0x200001000004, 0x0) 1.413678369s ago: executing program 2 (id=252): socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[]) read$FUSE(r0, 0x0, 0x0) mkdir(0x0, 0x41) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) fsync(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="c3b991d28f82"], 0x48) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES64=r0]) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0xd) syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) 1.344926257s ago: executing program 1 (id=253): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='jffs2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r6, 0x80087601, 0xfffffffffffffffe) 701.225886ms ago: executing program 2 (id=254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xea000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r0) r4 = fcntl$dupfd(r1, 0x406, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x4000}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45b], 0x0, 0x0, 0x1, 0x1, r7}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r8, 0x0, 0x0}, 0x10) ioctl$AUTOFS_IOC_FAIL(r8, 0x9361, 0x5) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) 418.595452ms ago: executing program 4 (id=255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x2d58, &(0x7f0000000380)={0x0, 0x62cc, 0x400, 0x8000002, 0x3f7}) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$usbmon(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x2000000000000069, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000010800084000000001140000001100010000080000000000000000000a"], 0x6c}, 0x1, 0x0, 0x0, 0x890}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000280)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001500)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x3, 0x8, 0x0, 'queue1\x00', 0x8}) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000140)=ANY=[@ANYBLOB="5b3b14c928ec00000000000000ba134248086e94621c6adf0c6c452796cebf0eafca4dcb75b8700413b994d1c4d31c023837f535a1196ae84fd790abab73"]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000f010000d00000000000000", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4400) 140.178037ms ago: executing program 1 (id=256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) (fail_nth: 5) 0s ago: executing program 0 (id=257): r0 = mq_open(&(0x7f0000000000)='!se\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00\v\xb4\xeb\xba\xc6e^\x15\t\x98-\xd8A\xec\xc6\xb2{\xb1\xf1\xfa\xd0^\x84\xda\xef\xb1f\xe7\xaf\xf0\xe8\x05\x05\xe8\x1c~\xa7\xbf\x90\x0f)\xbc\r\xf9\xeb\x18MaJn\xee\x0f\xd0w\xd0B\x8b\xa5S%m\f\xd0\xf8Y\xa0\xb6W\xe7\xd5\x8f\xbdN9\x14M\b0\xf9\x02I\xcc\xf9\x8b\x926\xc7\xfb\xc8\xff\xa9\vt\xaeP\xd6\xa7\x1f\x16\x12N\x1cq\x02\xfc\x85\xd3\xe3|*\xac\v\xc6C\xa4<(\xc3\xbb\x99\tl\x9a\x1d\x12q\xa1\xb4\x87\xf6GU\xe8U\xd80f\xb8\x95~\xb7\x7f\xf5\xb0X\x06\xb6{\x81BB\xfb\xa7+13\xeba\xa1\x1b&\xd3\x9b\x87&\xc5_\x1c\x98\x06\xceH\xb7.C\xbd\xa2\xd9\xa0c-\x9a\x95\xcb\x9e\xeb\xc7\xee\x8c\xce\xa3\xbcF\xb8\x8d\xb9\xf6s\xce5\xb5\xc0\x9c \x9d\x18.\xcd\xcd\x90u\xac\x1fG5\xd3\xeb+\xbe\xd5\xad\xcf#\xc5\x98\xf3A\xd0\xf0\xd0J\xf9\x9b\xe2}\xf5\xe8yc\xf5\n\x9f\xf8\xdfQ\x8a\xf5Wt\xca+\xbd\x88\x13\xa7h\x13\xb6\x1f\xc2.\xf1l\x1c\x80RN\xab\x1e#7\xeb\xac\x95\x18', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r1, &(0x7f00000018c0)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e63, @multicast2}, 0x80, 0x0}}], 0x1, 0x1900) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e23, @multicast1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r2}, 0x20) r4 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x8}, 0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x1000080, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB='\x00\x00']) kernel console output (not intermixed with test programs): ][ T5820] veth0_vlan: entered promiscuous mode [ 61.829562][ T5832] veth1_macvtap: entered promiscuous mode [ 61.839142][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.850999][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.862942][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.875891][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.884675][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.893445][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.902552][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.923807][ T5820] veth1_vlan: entered promiscuous mode [ 61.946502][ T5821] veth0_vlan: entered promiscuous mode [ 61.954825][ T1348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.969039][ T1348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.972400][ T5821] veth1_vlan: entered promiscuous mode [ 61.992163][ T30] audit: type=1400 audit(1743737524.153:112): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.KtS2kf/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 62.010143][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.018637][ T30] audit: type=1400 audit(1743737524.153:113): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.050337][ T30] audit: type=1400 audit(1743737524.163:114): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.KtS2kf/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.060105][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.088027][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.098536][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.108382][ T30] audit: type=1400 audit(1743737524.163:115): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.115821][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.134363][ T30] audit: type=1400 audit(1743737524.163:116): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.KtS2kf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 62.141207][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.170652][ T30] audit: type=1400 audit(1743737524.163:117): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.KtS2kf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 62.203453][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.211110][ T30] audit: type=1400 audit(1743737524.163:118): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.214870][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.236173][ T30] audit: type=1400 audit(1743737524.223:119): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 62.267369][ T30] audit: type=1400 audit(1743737524.223:120): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="gadgetfs" ino=6464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 62.289812][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.290323][ T30] audit: type=1400 audit(1743737524.273:121): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 62.324705][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.327306][ T30] audit: type=1400 audit(1743737524.273:122): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 62.366815][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.373247][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.393217][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.402653][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.411592][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.513813][ T1348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.524887][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 62.527047][ T1348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.553692][ T5820] veth0_macvtap: entered promiscuous mode [ 62.567141][ T5820] veth1_macvtap: entered promiscuous mode [ 62.588258][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.599399][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.612135][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.624475][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.636284][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.648595][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.666288][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.675145][ T5821] veth0_macvtap: entered promiscuous mode [ 62.725370][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.735879][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.746194][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.756779][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.767274][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.778189][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.798763][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.811326][ T5821] veth1_macvtap: entered promiscuous mode [ 63.184269][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.199199][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.208645][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.220133][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.236519][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.249728][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.263544][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.283594][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.320730][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.337972][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.354008][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.367950][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.379725][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.396655][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.409215][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.432089][ T54] Bluetooth: hci1: command tx timeout [ 63.441595][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.459735][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.476689][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.486794][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.501664][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.513210][ T54] Bluetooth: hci2: command tx timeout [ 63.517762][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.520770][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.536386][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.546254][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.556818][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.566710][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.577172][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.588727][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.596123][ T54] Bluetooth: hci3: command tx timeout [ 63.601576][ T5834] Bluetooth: hci0: command tx timeout [ 63.607425][ T5834] Bluetooth: hci4: command tx timeout [ 63.727983][ T5821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.745428][ T5821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.755478][ T5821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.765347][ T5821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.790495][ T5918] Zero length message leads to an empty skb [ 64.225737][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.251140][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.350116][ T1348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.371009][ T1348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.638315][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.685417][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.006462][ T1348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.040756][ T1348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.430423][ T5935] kernel read not supported for file /!se (pid: 5935 comm: syz.3.8) [ 65.491682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.513245][ T5829] Bluetooth: hci1: command tx timeout [ 65.519633][ T5938] 9pnet_fd: Insufficient options for proto=fd [ 65.537950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 65.561487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.597027][ T5829] Bluetooth: hci2: command tx timeout [ 65.633085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.681582][ T5829] Bluetooth: hci4: command tx timeout [ 65.687398][ T5834] Bluetooth: hci3: command tx timeout [ 65.693245][ T54] Bluetooth: hci0: command tx timeout [ 65.698942][ T5876] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.732050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.041308][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 66.052636][ T5876] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 66.061703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.063742][ T5876] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 66.079410][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 66.106913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.128340][ T5876] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 66.141966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 66.177211][ T5876] usb 3-1: Product: syz [ 66.348357][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 66.444341][ T5876] usb 3-1: Manufacturer: syz [ 66.451878][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 66.473062][ T5876] usb 3-1: SerialNumber: syz [ 66.621462][ T10] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 66.960701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 66.969727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 67.090316][ T10] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 67.163254][ T10] usb 2-1: Product: syz [ 67.340332][ T10] usb 2-1: Manufacturer: syz [ 67.348791][ T5876] usb 3-1: palm_os_3_probe - error -71 getting connection information [ 67.879660][ T10] usb 2-1: SerialNumber: syz [ 67.944189][ T5876] visor 3-1:1.0: probe with driver visor failed with error -71 [ 67.998915][ T5876] usb 3-1: USB disconnect, device number 2 [ 69.208630][ T10] usb 2-1: can't set config #1, error -71 [ 69.242892][ T10] usb 2-1: USB disconnect, device number 2 [ 69.340565][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 69.340579][ T30] audit: type=1400 audit(1743737531.503:164): avc: denied { create } for pid=5971 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 69.817109][ T30] audit: type=1400 audit(1743737531.503:165): avc: denied { bind } for pid=5971 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 70.332849][ T30] audit: type=1400 audit(1743737531.523:166): avc: denied { setopt } for pid=5971 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 70.353126][ T30] audit: type=1400 audit(1743737531.673:167): avc: denied { create } for pid=5970 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 70.372403][ T30] audit: type=1400 audit(1743737531.773:168): avc: denied { write } for pid=5970 comm="syz.1.16" name="cgroup.subtree_control" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.406181][ T30] audit: type=1400 audit(1743737531.783:169): avc: denied { open } for pid=5970 comm="syz.1.16" path="" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.429982][ T30] audit: type=1400 audit(1743737532.583:170): avc: denied { create } for pid=5971 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.007924][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.014471][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.111451][ T30] audit: type=1400 audit(1743737533.233:171): avc: denied { read write } for pid=5976 comm="syz.1.20" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 71.151400][ T5986] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20'. [ 71.167239][ T5986] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 71.333083][ T30] audit: type=1400 audit(1743737533.243:172): avc: denied { open } for pid=5976 comm="syz.1.20" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 71.365657][ T30] audit: type=1400 audit(1743737533.253:173): avc: denied { ioctl } for pid=5976 comm="syz.1.20" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 71.629678][ T5992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'. [ 71.684598][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 71.757861][ T5996] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 71.764504][ T5996] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 71.790700][ T5996] vhci_hcd vhci_hcd.0: Device attached [ 71.838383][ T6002] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 71.845012][ T6002] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 71.861396][ T6005] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 71.868024][ T6005] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 71.885729][ T5999] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 71.892273][ T5999] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 71.922063][ T6005] vhci_hcd vhci_hcd.0: Device attached [ 71.929451][ T5999] vhci_hcd vhci_hcd.0: Device attached [ 71.930425][ T6002] vhci_hcd vhci_hcd.0: Device attached [ 71.946450][ T5996] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 71.962887][ T5995] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 71.971678][ T5875] vhci_hcd: vhci_device speed not set [ 71.990562][ T5995] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11) [ 71.997203][ T5995] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 72.008270][ T5992] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(13) [ 72.014891][ T5992] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 72.022451][ T5995] vhci_hcd vhci_hcd.0: Device attached [ 72.035265][ T5875] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 72.064166][ T5992] vhci_hcd vhci_hcd.0: Device attached [ 72.099101][ T5992] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 72.099386][ T5995] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 72.105721][ T5992] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 72.112285][ T5995] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 72.160878][ T5995] vhci_hcd vhci_hcd.0: Device attached [ 72.176195][ T5999] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(22) [ 72.176555][ T5992] vhci_hcd vhci_hcd.0: Device attached [ 72.182799][ T5999] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 72.183927][ T10] usb 33-2: new low-speed USB device number 2 using vhci_hcd [ 72.219915][ T5996] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(22) [ 72.226545][ T5996] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 72.286206][ T5999] vhci_hcd vhci_hcd.0: Device attached [ 72.296044][ T5996] vhci_hcd vhci_hcd.0: Device attached [ 72.355262][ T5992] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.372927][ T5995] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.379021][ T5992] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.402849][ T5992] vhci_hcd vhci_hcd.0: port 0 already used [ 72.414728][ T5995] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.464246][ T5995] vhci_hcd vhci_hcd.0: port 0 already used [ 72.496487][ T6006] vhci_hcd: connection closed [ 72.498156][ T6012] vhci_hcd: connection closed [ 72.498716][ T6022] vhci_hcd: connection closed [ 72.498851][ T5997] vhci_hcd: connection reset by peer [ 72.507914][ T6014] vhci_hcd: connection closed [ 72.516076][ T36] vhci_hcd: stop threads [ 72.516391][ T36] vhci_hcd: release socket [ 72.516717][ T36] vhci_hcd: disconnect device [ 72.521887][ T36] vhci_hcd: stop threads [ 72.521896][ T36] vhci_hcd: release socket [ 72.521924][ T36] vhci_hcd: disconnect device [ 72.526157][ T36] vhci_hcd: stop threads [ 72.545746][ T6016] vhci_hcd: connection closed [ 72.547410][ T6018] vhci_hcd: connection closed [ 72.565098][ T6003] vhci_hcd: connection reset by peer [ 72.572391][ T6010] vhci_hcd: connection closed [ 72.580605][ T6000] vhci_hcd: connection closed [ 72.623992][ T36] vhci_hcd: release socket [ 72.650200][ T36] vhci_hcd: disconnect device [ 72.663198][ T36] vhci_hcd: stop threads [ 72.670817][ T36] vhci_hcd: release socket [ 72.685308][ T36] vhci_hcd: disconnect device [ 72.690662][ T36] vhci_hcd: stop threads [ 72.695889][ T36] vhci_hcd: release socket [ 72.700450][ T36] vhci_hcd: disconnect device [ 72.706973][ T36] vhci_hcd: stop threads [ 72.711608][ T36] vhci_hcd: release socket [ 72.716070][ T36] vhci_hcd: disconnect device [ 72.721747][ T36] vhci_hcd: stop threads [ 72.725989][ T36] vhci_hcd: release socket [ 72.730902][ T36] vhci_hcd: disconnect device [ 72.757095][ T36] vhci_hcd: stop threads [ 72.762507][ T36] vhci_hcd: release socket [ 72.767036][ T36] vhci_hcd: disconnect device [ 72.837547][ T36] vhci_hcd: stop threads [ 72.843477][ T36] vhci_hcd: release socket [ 72.848226][ T36] vhci_hcd: disconnect device [ 72.854530][ T36] vhci_hcd: stop threads [ 72.859023][ T36] vhci_hcd: release socket [ 72.865689][ T36] vhci_hcd: disconnect device [ 72.991442][ T5903] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.415889][ T6047] FAULT_INJECTION: forcing a failure. [ 73.415889][ T6047] name failslab, interval 1, probability 0, space 0, times 1 [ 73.449025][ T6047] CPU: 1 UID: 0 PID: 6047 Comm: syz.4.31 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 73.449051][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 73.449060][ T6047] Call Trace: [ 73.449066][ T6047] [ 73.449072][ T6047] dump_stack_lvl+0x16c/0x1f0 [ 73.449104][ T6047] should_fail_ex+0x512/0x640 [ 73.449123][ T6047] ? __kmalloc_node_noprof+0xc5/0x500 [ 73.449145][ T6047] should_failslab+0xc2/0x120 [ 73.449167][ T6047] __kmalloc_node_noprof+0xd8/0x500 [ 73.449184][ T6047] ? __vmalloc_node_range_noprof+0x3eb/0x1540 [ 73.449212][ T6047] __vmalloc_node_range_noprof+0x3eb/0x1540 [ 73.449236][ T6047] ? find_held_lock+0x2b/0x80 [ 73.449269][ T6047] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 73.449293][ T6047] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 73.449325][ T6047] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 73.449343][ T6047] __vmalloc_noprof+0x6d/0x90 [ 73.449366][ T6047] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 73.449384][ T6047] bpf_prog_alloc_no_stats+0x54/0x630 [ 73.449400][ T6047] ? security_capable+0x7e/0x260 [ 73.449421][ T6047] bpf_prog_alloc+0x3b/0x230 [ 73.449436][ T6047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.449457][ T6047] bpf_prog_load+0x1a04/0x2490 [ 73.449484][ T6047] ? __pfx_bpf_prog_load+0x10/0x10 [ 73.449503][ T6047] ? avc_has_perm_noaudit+0x149/0x3b0 [ 73.449533][ T6047] ? selinux_bpf+0xde/0x130 [ 73.449546][ T6047] ? bpf_lsm_bpf+0x9/0x10 [ 73.449562][ T6047] __sys_bpf+0x433c/0x4d80 [ 73.449585][ T6047] ? __pfx___sys_bpf+0x10/0x10 [ 73.449607][ T6047] ? ksys_write+0x190/0x240 [ 73.449627][ T6047] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 73.449661][ T6047] ? fput+0x70/0xf0 [ 73.449679][ T6047] ? ksys_write+0x1b9/0x240 [ 73.449693][ T6047] ? __pfx_ksys_write+0x10/0x10 [ 73.449706][ T6047] ? rcu_is_watching+0x12/0xc0 [ 73.449731][ T6047] __x64_sys_bpf+0x78/0xc0 [ 73.449752][ T6047] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.449772][ T6047] do_syscall_64+0xcd/0x260 [ 73.449794][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.449810][ T6047] RIP: 0033:0x7f6fc318d169 [ 73.449823][ T6047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.449836][ T6047] RSP: 002b:00007f6fc4061038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.449853][ T6047] RAX: ffffffffffffffda RBX: 00007f6fc33a5fa0 RCX: 00007f6fc318d169 [ 73.449861][ T6047] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 73.449870][ T6047] RBP: 00007f6fc4061090 R08: 0000000000000000 R09: 0000000000000000 [ 73.449878][ T6047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.449886][ T6047] R13: 0000000000000001 R14: 00007f6fc33a5fa0 R15: 00007ffece25a218 [ 73.449905][ T6047] [ 73.450200][ T6047] syz.4.31: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 73.521126][ T6051] netlink: 32 bytes leftover after parsing attributes in process `syz.1.33'. [ 73.541175][ T6047] ,cpuset= [ 73.799874][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 73.842340][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 73.848796][ T6047] /,mems_allowed=0-1 [ 73.853820][ T5903] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 73.862688][ T5872] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 73.870203][ T6047] CPU: 1 UID: 0 PID: 6047 Comm: syz.4.31 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 73.870223][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 73.870232][ T6047] Call Trace: [ 73.870238][ T6047] [ 73.870244][ T6047] dump_stack_lvl+0x16c/0x1f0 [ 73.870268][ T6047] warn_alloc+0x248/0x3a0 [ 73.870287][ T6047] ? __pfx_warn_alloc+0x10/0x10 [ 73.870301][ T6047] ? dump_stack_lvl+0x1a1/0x1f0 [ 73.870327][ T6047] ? rcu_is_watching+0x12/0xc0 [ 73.870347][ T6047] ? __kmalloc_node_noprof+0x23b/0x500 [ 73.870369][ T6047] __vmalloc_node_range_noprof+0x1110/0x1540 [ 73.870393][ T6047] ? find_held_lock+0x2b/0x80 [ 73.870420][ T6047] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 73.870442][ T6047] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 73.870473][ T6047] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 73.870489][ T6047] __vmalloc_noprof+0x6d/0x90 [ 73.870511][ T6047] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 73.870527][ T6047] bpf_prog_alloc_no_stats+0x54/0x630 [ 73.870543][ T6047] ? security_capable+0x7e/0x260 [ 73.870563][ T6047] bpf_prog_alloc+0x3b/0x230 [ 73.870578][ T6047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.870598][ T6047] bpf_prog_load+0x1a04/0x2490 [ 73.870622][ T6047] ? __pfx_bpf_prog_load+0x10/0x10 [ 73.870640][ T6047] ? avc_has_perm_noaudit+0x149/0x3b0 [ 73.870672][ T6047] ? selinux_bpf+0xde/0x130 [ 73.870687][ T6047] ? bpf_lsm_bpf+0x9/0x10 [ 73.870703][ T6047] __sys_bpf+0x433c/0x4d80 [ 73.870726][ T6047] ? __pfx___sys_bpf+0x10/0x10 [ 73.870748][ T6047] ? ksys_write+0x190/0x240 [ 73.870766][ T6047] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 73.870801][ T6047] ? fput+0x70/0xf0 [ 73.870819][ T6047] ? ksys_write+0x1b9/0x240 [ 73.870832][ T6047] ? __pfx_ksys_write+0x10/0x10 [ 73.870844][ T6047] ? rcu_is_watching+0x12/0xc0 [ 73.870866][ T6047] __x64_sys_bpf+0x78/0xc0 [ 73.870885][ T6047] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.870903][ T6047] do_syscall_64+0xcd/0x260 [ 73.870924][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.870939][ T6047] RIP: 0033:0x7f6fc318d169 [ 73.870957][ T6047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.870971][ T6047] RSP: 002b:00007f6fc4061038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 73.870986][ T6047] RAX: ffffffffffffffda RBX: 00007f6fc33a5fa0 RCX: 00007f6fc318d169 [ 73.870997][ T6047] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 73.871005][ T6047] RBP: 00007f6fc4061090 R08: 0000000000000000 R09: 0000000000000000 [ 73.871013][ T6047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.871022][ T6047] R13: 0000000000000001 R14: 00007f6fc33a5fa0 R15: 00007ffece25a218 [ 73.871042][ T6047] [ 73.871048][ T6047] Mem-Info: [ 74.041415][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 74.048467][ T5903] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 74.112993][ T6054] veth0_vlan: entered allmulticast mode [ 74.115872][ T6047] active_anon:5416 inactive_anon:0 isolated_anon:0 [ 74.115872][ T6047] active_file:1604 inactive_file:38543 isolated_file:0 [ 74.115872][ T6047] unevictable:768 dirty:1920 writeback:0 [ 74.115872][ T6047] slab_reclaimable:10757 slab_unreclaimable:99049 [ 74.115872][ T6047] mapped:31174 shmem:1452 pagetables:906 [ 74.115872][ T6047] sec_pagetables:0 bounce:0 [ 74.115872][ T6047] kernel_misc_reclaimable:0 [ 74.115872][ T6047] free:1324121 free_pcp:433 free_cma:0 [ 74.209021][ T5872] usb 2-1: unable to get BOS descriptor or descriptor too short [ 74.224636][ T6047] Node 0 active_anon:21964kB inactive_anon:0kB active_file:6416kB inactive_file:154100kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128796kB dirty:7672kB writeback:0kB shmem:4272kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11180kB pagetables:3624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 74.264095][ T5903] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 74.275216][ T5903] usb 4-1: Product: syz [ 74.279387][ T5903] usb 4-1: Manufacturer: syz [ 74.314942][ T6057] veth0_vlan: left promiscuous mode [ 74.320998][ T6057] veth0_vlan: entered promiscuous mode [ 74.341380][ T5903] usb 4-1: SerialNumber: syz [ 74.396029][ T6047] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 74.427458][ T5872] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 74.435073][ T5872] usb 2-1: can't read configurations, error -71 [ 74.463952][ T6047] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 74.522315][ T6047] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 74.528264][ T6047] Node 0 DMA32 free:1363148kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB active_anon:33644kB inactive_anon:0kB active_file:6572kB inactive_file:152536kB unevictable:1536kB writepending:7676kB present:3129332kB managed:2541552kB mlocked:0kB bounce:0kB free_pcp:2560kB local_pcp:2064kB free_cma:0kB [ 74.620008][ T6047] lowmem_reserve[]: 0 0 1 1 1 [ 74.631021][ T6047] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 74.715701][ T5903] usb 4-1: palm_os_3_probe - error -71 getting connection information [ 74.734550][ T5903] visor 4-1:1.0: probe with driver visor failed with error -71 [ 74.765535][ T5903] usb 4-1: USB disconnect, device number 2 [ 74.819721][ T6047] lowmem_reserve[]: 0 0 0 0 0 [ 74.831364][ T6047] Node 1 Normal free:3908076kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 74.891286][ T6047] lowmem_reserve[]: 0 0 0 0 0 [ 74.901389][ T6047] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 74.934298][ T6047] Node 0 DMA32: 141*4kB (UM) 74*8kB (U) 114*16kB (U) 10*32kB (U) 1*64kB (U) 2*128kB (UE) 1*256kB (E) 19*512kB (UME) 7*1024kB (M) 4*2048kB (UM) 325*4096kB (UM) = 1360164kB [ 74.983307][ T6047] Node 0 Normal: 3*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 75.005464][ T6047] Node 1 Normal: 207*4kB (UE) 58*8kB (UME) 51*16kB (UME) 207*32kB (UME) 99*64kB (UME) 27*128kB (UME) 14*256kB (UME) 8*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (UM) = 3908188kB [ 75.044493][ T6047] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 75.065185][ T6047] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 75.077516][ T6047] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 75.087191][ T6047] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 75.096585][ T6047] 41642 total pagecache pages [ 75.101339][ T6047] 0 pages in swap cache [ 75.105488][ T6047] Free swap = 124996kB [ 75.109731][ T6047] Total swap = 124996kB [ 75.133254][ T6047] 2097051 pages RAM [ 75.137086][ T6047] 0 pages HighMem/MovableOnly [ 75.146177][ T6047] 429621 pages reserved [ 75.150374][ T6047] 0 pages cma reserved [ 75.188478][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 75.188491][ T30] audit: type=1400 audit(1743737537.353:196): avc: denied { create } for pid=6065 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.251842][ T6067] netlink: 80 bytes leftover after parsing attributes in process `syz.2.35'. [ 75.265557][ T30] audit: type=1400 audit(1743737537.423:197): avc: denied { write } for pid=6065 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.333468][ T5829] Bluetooth: hci1: Malformed Event: 0x2f [ 75.353888][ T30] audit: type=1400 audit(1743737537.423:198): avc: denied { nlmsg_write } for pid=6065 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.841414][ T58] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.343306][ T6090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6090 comm=syz.1.43 [ 76.591339][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 76.599214][ T873] cfg80211: failed to load regulatory.db [ 76.635422][ T58] usb 5-1: unable to get BOS descriptor or descriptor too short [ 76.649544][ T58] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 76.661294][ T58] usb 5-1: config 0 has no interface number 0 [ 76.667911][ T58] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 76.701737][ T58] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 25479, setting to 1024 [ 76.863516][ T58] usb 5-1: config 0 interface 88 has no altsetting 0 [ 76.873172][ T58] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 76.899276][ T58] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 77.049914][ T30] audit: type=1400 audit(1743737539.163:199): avc: denied { create } for pid=6093 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.147808][ T58] usb 5-1: Product: syz [ 77.231323][ T58] usb 5-1: Manufacturer: վ潥晓쿇|嬏☪圵쾄虄旁响⠼　᳸W廉숻瀙⦕颖쀒㷗宮䂯鬳沁竿痽啣᩵贤卿䀓뽻ᕍ姆髧ꚋ趁鍅㷩竒膻徝᩽༫迠䠱澥饜蠀蒺ᘓᐽ卬乌钫씤瑀拊뻅턳ꙷ蔡ﮱ邽␈닢ꏸṡ玎ᮡ㬉졿紱褄￪쒂⇄ኲ [ 77.283929][ T30] audit: type=1400 audit(1743737539.173:200): avc: denied { setopt } for pid=6093 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.307123][ T58] usb 5-1: SerialNumber: Р [ 77.311890][ T5875] vhci_hcd: vhci_device speed not set [ 77.363653][ T30] audit: type=1400 audit(1743737539.183:201): avc: denied { create } for pid=6093 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.384288][ T10] vhci_hcd: vhci_device speed not set [ 77.390666][ T58] usb 5-1: config 0 descriptor?? [ 77.539524][ T30] audit: type=1400 audit(1743737539.203:202): avc: denied { write } for pid=6093 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.644180][ T58] input: վ潥晓쿇|嬏☪圵쾄虄旁响⠼　᳸W廉숻瀙⦕颖쀒㷗宮䂯鬳沁竿痽啣᩵贤卿䀓뽻ᕍ姆髧ꚋ as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input5 [ 77.763467][ T30] audit: type=1400 audit(1743737539.933:203): avc: denied { read } for pid=5183 comm="acpid" name="mouse1" dev="devtmpfs" ino=2743 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.796861][ T58] usb 5-1: USB disconnect, device number 2 [ 77.797006][ C0] usb_acecad 5-1:0.88: can't resubmit intr, dummy_hcd.4-1/input0, status -19 [ 77.865202][ T30] audit: type=1400 audit(1743737539.933:204): avc: denied { open } for pid=5183 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2743 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.928257][ T6095] infiniband syz1: set active [ 77.937308][ T30] audit: type=1400 audit(1743737539.933:205): avc: denied { ioctl } for pid=5183 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2743 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.963821][ T6095] infiniband syz1: added team_slave_0 [ 78.026594][ T6095] syz1: rxe_create_cq: returned err = -12 [ 78.038551][ T6100] nvme_fabrics: missing parameter 'transport=%s' [ 78.054684][ T6095] infiniband syz1: Couldn't create ib_mad CQ [ 78.088845][ T6095] infiniband syz1: Couldn't open port 1 [ 78.113688][ T6100] nvme_fabrics: missing parameter 'nqn=%s' [ 78.284437][ T6095] RDS/IB: syz1: added [ 78.288615][ T6095] smc: adding ib device syz1 with port count 1 [ 78.394520][ T6095] smc: ib device syz1 port 1 has pnetid [ 78.647406][ T6113] trusted_key: encrypted_key: insufficient parameters specified [ 79.796278][ T5829] Bluetooth: hci3: Malformed Event: 0x2f [ 79.832161][ T6123] nvme_fabrics: missing parameter 'transport=%s' [ 79.838489][ T6123] nvme_fabrics: missing parameter 'nqn=%s' [ 80.524958][ T5875] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 80.555659][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.55'. [ 80.564961][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 80.567417][ T30] audit: type=1400 audit(1743737542.723:208): avc: denied { create } for pid=6127 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 80.647761][ T30] audit: type=1400 audit(1743737542.723:209): avc: denied { write } for pid=6127 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 80.695693][ T30] audit: type=1400 audit(1743737542.733:210): avc: denied { create } for pid=6127 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.751498][ T5875] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 80.760226][ T5875] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 80.794545][ T5875] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 80.834372][ T5875] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 80.864358][ T6138] [U] 1WT`8H$09\ [ 80.887686][ T6138] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 80.891452][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 80.944137][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 80.944379][ T6138] [U] 4XZ^Y)MC. OȞPOW [ 80.971541][ T6138] [U] ä%Z [ 80.975614][ T6138] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 80.975899][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 80.983881][ T6138] [U] P>BЍ̖Z% [ 81.024195][ T6138] [U] I)=#F/UI~)YS=׊4FX&%$K Ӂ'.7*9|AU\PV|Ԋ [ 81.035171][ T6138] [U] ܣK [ 81.040114][ T6138] [U] OW.W ZG д$JYR7/1ZT7L[+ [ 81.041337][ T5875] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 81.047190][ T6138] [U] ^ [ 81.056366][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.059242][ T6138] [U] T!#Ӈŵ$BIN,<T[:D#8(E"6YˡEFL&1Y¯0DBB1ߦʶ84+N3=CI/6}AR- -OI9إMZ [ 81.085293][ T6138] [U] ,8OP9UGݗTXF])A3_ D"ȈXXZDݳ !WA 9@ق3X+ZAO]8XX{( ))27Y 3,!KW(CѱIE\AMлCU0*%ɍOHC|;XCK@VNQZ [ 81.091368][ T873] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 81.123865][ T6138] [U] ţԶDǂ`=ƁN<ʸ]Q [ 81.135579][ T6138] [U] KEZȒF9Ǩ{ [ 81.208163][ T5875] usb 1-1: config 0 descriptor?? [ 81.229297][ T5875] hub 1-1:0.0: bad descriptor, ignoring hub [ 81.249942][ T5875] hub 1-1:0.0: probe with driver hub failed with error -5 [ 81.313734][ T5875] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 81.344635][ T873] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 81.353365][ T873] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 81.381039][ T873] usb 3-1: config 4 has no interface number 0 [ 81.415659][ T873] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 81.481711][ T873] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 81.498699][ T30] audit: type=1400 audit(1743737543.663:211): avc: denied { unlink } for pid=6122 comm="syz.0.54" name="#1" dev="tmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.552377][ T873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.560379][ T873] usb 3-1: Product: syz [ 81.590485][ T873] usb 3-1: Manufacturer: syz [ 81.612872][ T873] usb 3-1: SerialNumber: syz [ 81.642762][ T30] audit: type=1400 audit(1743737543.663:212): avc: denied { mount } for pid=6122 comm="syz.0.54" name="/" dev="overlay" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.755083][ T6134] [U] ZI]?.|"%B)`ݾ6VO}'V߾I\M;S QSK3މD [ 82.128818][ T873] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 82.141409][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 82.158098][ T873] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 82.170884][ T873] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 82.192004][ T873] usb 3-1: media controller created [ 82.200230][ T873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.262359][ T873] DVB: Unable to find symbol dib7000p_attach() [ 82.268680][ T873] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 82.341340][ T873] rc_core: IR keymap rc-dib0700-rc5 not found [ 82.359942][ T873] Registered IR keymap rc-empty [ 82.377984][ T873] dvb-usb: could not initialize remote control. [ 82.384565][ T10] usb 2-1: device descriptor read/64, error -71 [ 82.427489][ T873] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 82.452920][ T873] usb 3-1: USB disconnect, device number 3 [ 82.539104][ T6154] MTD: Couldn't look up 'memory.events': -15 [ 82.716907][ T58] usb 1-1: USB disconnect, device number 2 [ 82.775020][ T30] audit: type=1400 audit(1743737544.703:213): avc: denied { mounton } for pid=6149 comm="syz.3.61" path="/13/file0" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.949410][ T873] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 83.160460][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 83.174064][ T30] audit: type=1400 audit(1743737545.163:214): avc: denied { accept } for pid=6156 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.439823][ T10] usb 2-1: device descriptor read/64, error -71 [ 83.613369][ T10] usb usb2-port1: attempt power cycle [ 83.972401][ T6167] trusted_key: encrypted_key: insufficient parameters specified [ 84.115598][ T6168] trusted_key: encrypted_key: insufficient parameters specified [ 84.758345][ T5829] Bluetooth: hci0: Malformed Event: 0x2f [ 84.880060][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'. [ 84.937335][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 84.962965][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 84.970604][ T10] usb 2-1: device descriptor read/8, error -32 [ 84.991314][ T6171] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 84.997857][ T6171] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 85.037787][ T6171] vhci_hcd vhci_hcd.0: Device attached [ 85.065830][ T6171] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 85.072433][ T6171] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.114829][ T6171] vhci_hcd vhci_hcd.0: Device attached [ 85.179317][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 85.222564][ T30] audit: type=1400 audit(1743737547.373:215): avc: denied { create } for pid=6183 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 85.341538][ T5875] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 85.345788][ T5872] vhci_hcd: vhci_device speed not set [ 85.452608][ T6188] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 85.467262][ T6171] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 85.473890][ T6171] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 85.481545][ T6171] vhci_hcd vhci_hcd.0: Device attached [ 85.532085][ T5872] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 85.555515][ T6171] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 85.562138][ T6171] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 85.572983][ T6184] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.617112][ T6184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.70'. [ 85.652192][ T6171] vhci_hcd vhci_hcd.0: Device attached [ 85.658849][ T30] audit: type=1400 audit(1743737547.823:216): avc: denied { read append } for pid=6183 comm="syz.1.70" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 85.773485][ T5875] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 85.783394][ T5875] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 85.791533][ T5875] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 85.812884][ T30] audit: type=1400 audit(1743737547.823:217): avc: denied { open } for pid=6183 comm="syz.1.70" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 85.819509][ T6188] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(22) [ 85.837521][ T6196] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 85.843282][ T6188] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 85.852976][ T30] audit: type=1400 audit(1743737547.823:218): avc: denied { create } for pid=6183 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.972979][ T6188] vhci_hcd vhci_hcd.0: Device attached [ 85.999021][ T5875] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 86.012643][ T6171] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 86.043611][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 86.075403][ T6188] vhci_hcd vhci_hcd.0: port 0 already used [ 86.081506][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 86.091558][ T6194] vhci_hcd: connection closed [ 86.092932][ T13] vhci_hcd: stop threads [ 86.102080][ T6190] vhci_hcd: connection closed [ 86.102207][ T6173] vhci_hcd: connection reset by peer [ 86.115849][ T13] vhci_hcd: release socket [ 86.123391][ T6192] vhci_hcd: connection closed [ 86.123503][ T6180] vhci_hcd: connection closed [ 86.143674][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 86.151894][ T13] vhci_hcd: disconnect device [ 86.171531][ T13] vhci_hcd: stop threads [ 86.175813][ T13] vhci_hcd: release socket [ 86.187665][ T13] vhci_hcd: disconnect device [ 86.199276][ T6200] kernel read not supported for file /!se (pid: 6200 comm: syz.2.71) [ 86.213604][ T13] vhci_hcd: stop threads [ 86.218621][ T30] audit: type=1800 audit(1743737548.383:219): pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.71" name="!se" dev="mqueue" ino=8107 res=0 errno=0 [ 86.226921][ T6200] 9pnet_fd: Insufficient options for proto=fd [ 86.245548][ T13] vhci_hcd: release socket [ 86.245756][ T5875] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 86.250019][ T13] vhci_hcd: disconnect device [ 86.269228][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.277610][ T13] vhci_hcd: stop threads [ 86.285230][ T5875] usb 4-1: config 0 descriptor?? [ 86.289621][ T13] vhci_hcd: release socket [ 86.299615][ T5875] hub 4-1:0.0: bad descriptor, ignoring hub [ 86.312600][ T5875] hub 4-1:0.0: probe with driver hub failed with error -5 [ 86.340886][ T5875] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 86.353245][ T6204] nvme_fabrics: unknown parameter or missing value ']eV#' in ctrl creation request [ 86.393263][ T13] vhci_hcd: disconnect device [ 86.419186][ T13] vhci_hcd: stop threads [ 86.430054][ T13] vhci_hcd: release socket [ 86.451332][ T13] vhci_hcd: disconnect device [ 86.531352][ T873] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 86.691382][ T873] usb 2-1: Using ep0 maxpacket: 8 [ 86.692787][ T5876] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 86.719241][ T873] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 86.738836][ T873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.756837][ T873] usb 2-1: Product: syz [ 86.771436][ T873] usb 2-1: Manufacturer: syz [ 86.776069][ T873] usb 2-1: SerialNumber: syz [ 86.799163][ T873] usb 2-1: config 0 descriptor?? [ 86.867853][ T5876] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 86.902236][ T6211] kernel read not supported for file /!se (pid: 6211 comm: syz.0.75) [ 86.941044][ T5876] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 86.988525][ T6215] 9pnet_fd: Insufficient options for proto=fd [ 86.996470][ T5876] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 87.020510][ T30] audit: type=1400 audit(1743737549.153:220): avc: denied { rename } for pid=5180 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.042724][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.151935][ T5876] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 87.239757][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 87.313236][ T30] audit: type=1400 audit(1743737549.153:221): avc: denied { unlink } for pid=5180 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.360861][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 87.512118][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 87.625590][ T30] audit: type=1400 audit(1743737549.153:222): avc: denied { create } for pid=5180 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.672497][ T873] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 87.731363][ T30] audit: type=1800 audit(1743737549.153:223): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.75" name="!se" dev="mqueue" ino=8141 res=0 errno=0 [ 88.378449][ T58] usb 4-1: USB disconnect, device number 3 [ 88.524050][ T6217] bridge_slave_0: left allmulticast mode [ 88.640302][ T6217] bridge_slave_0: left promiscuous mode [ 88.738064][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.745219][ T30] audit: type=1400 audit(1743737550.893:224): avc: denied { write } for pid=6216 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.768147][ T6220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.778673][ T6220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.798494][ T5876] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 88.808701][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.815303][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 88.817138][ T30] audit: type=1400 audit(1743737550.983:225): avc: denied { nlmsg_read } for pid=6221 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.847942][ T6217] bridge_slave_1: left allmulticast mode [ 88.853824][ T6217] bridge_slave_1: left promiscuous mode [ 88.859527][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.875355][ T6217] bond0: (slave bond_slave_0): Releasing backup interface [ 88.887799][ T6217] bond0: (slave bond_slave_1): Releasing backup interface [ 88.914627][ T6217] team0: Port device team_slave_0 removed [ 88.920514][ T5876] usb 3-1: config 0 descriptor?? [ 89.022610][ T873] usb write operation failed. (-71) [ 89.042462][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.80'. [ 89.043359][ T873] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 89.194893][ T873] dvbdev: DVB: registering new adapter (Terratec H7) [ 89.207057][ T873] usb 2-1: media controller created [ 89.207520][ T5876] hub 3-1:0.0: bad descriptor, ignoring hub [ 89.233725][ T873] usb read operation failed. (-71) [ 89.250127][ T6217] team0: Port device team_slave_1 removed [ 89.287461][ T6217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.291278][ T5876] hub 3-1:0.0: probe with driver hub failed with error -5 [ 89.296410][ T873] usb write operation failed. (-71) [ 89.313705][ T873] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 89.323699][ T5876] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 89.326418][ T6217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.379433][ T873] usb 2-1: USB disconnect, device number 9 [ 89.486375][ T6217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.529893][ T6217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.588467][ T12] Bluetooth: (null): Invalid header checksum [ 89.708971][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.84'. [ 89.731847][ T12] Bluetooth: (null): Invalid header checksum [ 89.759432][ T6236] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 89.765978][ T6236] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 89.774065][ T12] Bluetooth: (null): Invalid header checksum [ 89.954429][ T68] Bluetooth: (null): Invalid header checksum [ 90.119778][ T68] Bluetooth: (null): Invalid header checksum [ 90.144621][ T6236] vhci_hcd vhci_hcd.0: Device attached [ 90.150406][ T68] Bluetooth: (null): Invalid header checksum [ 90.157821][ T6242] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 90.164408][ T6242] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.172453][ T5876] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 90.183245][ T68] Bluetooth: (null): Invalid header checksum [ 90.225272][ T6242] vhci_hcd vhci_hcd.0: Device attached [ 90.237098][ T6236] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.254672][ T6236] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(14) [ 90.261287][ T6236] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.282726][ T6236] vhci_hcd vhci_hcd.0: Device attached [ 90.323865][ T6236] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 90.330498][ T6236] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 90.353458][ T6236] vhci_hcd vhci_hcd.0: Device attached [ 90.361373][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 90.372974][ T5876] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 90.386379][ T5829] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 90.388098][ T6236] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(21) [ 90.393096][ T5876] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 90.395570][ T6236] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 90.436815][ T5876] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 90.445159][ T6236] vhci_hcd vhci_hcd.0: Device attached [ 90.451267][ T6242] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.469113][ T6236] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 90.479540][ T5876] usb 2-1: Product: syz [ 90.494149][ T5876] usb 2-1: Manufacturer: syz [ 90.500012][ T6236] vhci_hcd vhci_hcd.0: port 0 already used [ 90.511397][ T5876] usb 2-1: SerialNumber: syz [ 90.550852][ T6257] vhci_hcd: connection closed [ 90.602377][ T12] vhci_hcd: stop threads [ 90.711842][ T873] usb 3-1: USB disconnect, device number 4 [ 90.714866][ T12] vhci_hcd: release socket [ 90.715007][ T12] vhci_hcd: disconnect device [ 90.761391][ T6253] vhci_hcd: connection closed [ 90.769950][ T6243] vhci_hcd: connection closed [ 90.826273][ T6238] vhci_hcd: connection reset by peer [ 90.832981][ T12] vhci_hcd: stop threads [ 90.833051][ T12] vhci_hcd: release socket [ 90.833201][ T12] vhci_hcd: disconnect device [ 90.833490][ T12] vhci_hcd: stop threads [ 90.833516][ T12] vhci_hcd: release socket [ 90.833614][ T12] vhci_hcd: disconnect device [ 90.834491][ T12] vhci_hcd: stop threads [ 90.834527][ T12] vhci_hcd: release socket [ 90.835173][ T12] vhci_hcd: disconnect device [ 90.856951][ T6249] vhci_hcd: connection closed [ 90.858133][ T1348] vhci_hcd: stop threads [ 90.917925][ T5872] vhci_hcd: vhci_device speed not set [ 90.990248][ T1348] vhci_hcd: release socket [ 90.990315][ T1348] vhci_hcd: disconnect device [ 91.033632][ T5876] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 91.033673][ T5876] visor 2-1:1.0: probe with driver visor failed with error -110 [ 91.136567][ T58] usb 2-1: USB disconnect, device number 10 [ 91.188659][ T6267] 9pnet_fd: Insufficient options for proto=fd [ 91.299383][ T6271] nvme_fabrics: unknown parameter or missing value ']eV#' in ctrl creation request [ 91.310480][ T6270] 9pnet_fd: Insufficient options for proto=fd [ 91.575827][ T6277] netlink: 'syz.2.89': attribute type 10 has an invalid length. [ 91.637202][ T6279] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 91.988158][ T6277] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.993241][ T6277] bond0: (slave team0): Enslaving as an active interface with an up link [ 92.333922][ T6286] netlink: 'syz.2.92': attribute type 10 has an invalid length. [ 92.409506][ T6286] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 94.051364][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 94.051381][ T30] audit: type=1400 audit(1743737555.763:230): avc: denied { ioctl } for pid=6291 comm="syz.4.95" path="socket:[9307]" dev="sockfs" ino=9307 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.160678][ T30] audit: type=1400 audit(1743737555.783:231): avc: denied { write } for pid=6291 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.190158][ T30] audit: type=1400 audit(1743737555.793:232): avc: denied { ioctl } for pid=6291 comm="syz.4.95" path="socket:[9305]" dev="sockfs" ino=9305 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.409617][ T6314] kernel read not supported for file /!se (pid: 6314 comm: syz.4.99) [ 95.511450][ T30] audit: type=1800 audit(1743737557.663:233): pid=6314 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.99" name="!se" dev="mqueue" ino=8786 res=0 errno=0 [ 95.516506][ T6318] 9pnet_fd: Insufficient options for proto=fd [ 95.913140][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 96.588011][ T30] audit: type=1400 audit(1743737558.073:234): avc: denied { setopt } for pid=6321 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 96.705521][ T6336] [U] 1WT`8H$09\ [ 96.710845][ T6336] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 96.928224][ T6336] [U] 4XZ^Y)MC. OȞPOW [ 96.934756][ T6336] [U] ä%Z [ 97.002199][ T6339] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 97.012316][ T6339] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 97.075519][ T6340] mmap: syz.4.103 (6340) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.315835][ T5874] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.323684][ T30] audit: type=1400 audit(1743737559.103:235): avc: denied { read } for pid=6303 comm="syz.2.98" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 97.381504][ T6336] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 97.394273][ T6336] [U] P>BЍ̖Z% [ 97.398929][ T6336] [U] I)=#F/UI~)YS=׊4FX&%$K Ӂ'.7*9|AU\PV|Ԋ [ 97.412807][ T30] audit: type=1400 audit(1743737559.183:236): avc: denied { firmware_load } for pid=6326 comm="syz.4.103" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 97.433138][ T6336] [U] ܣK [ 97.448135][ T6336] [U] OW.W ZG д$JYR7/1ZT7L[+ [ 97.456105][ T6336] [U] ^ [ 97.460684][ T6336] [U] T!#Ӈŵ$BIN,<T[:D#8(E"6YˡEFL&1Y¯0DBB1ߦʶ84+N3=CI/6}AR- -OI9إMZ [ 97.477128][ T6336] [U] ,8OP9UGݗTXF])A3_ D"ȈXXZDݳ !WA 9@ق3X+ZAO]8XX{( ))27Y 3,!KW(CѱIE\AMлCU0*%ɍOHC|;XCK@VNQZ [ 97.481432][ T30] audit: type=1400 audit(1743737559.273:237): avc: denied { create } for pid=6326 comm="syz.4.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.541450][ T6336] [U] ţԶDǂ`=ƁN<ʸ]Q [ 97.588924][ T6336] [U] KEZȒF9Ǩ{ [ 97.594953][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 97.658452][ T5874] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 97.691570][ T6331] [U] ZI]?.|"%B)`ݾ6VO}'V߾I\M;S QSK3މD [ 97.714475][ T5874] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 97.729669][ T5874] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 97.769964][ T30] audit: type=1400 audit(1743737559.503:238): avc: denied { open } for pid=6303 comm="syz.2.98" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 97.792839][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.802709][ T5874] usb 1-1: Product: syz [ 97.807306][ T5874] usb 1-1: Manufacturer: syz [ 97.823792][ T5874] usb 1-1: SerialNumber: syz [ 98.190961][ T5874] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 98.211387][ T5874] visor 1-1:1.0: probe with driver visor failed with error -110 [ 98.403256][ T9] usb 1-1: USB disconnect, device number 3 [ 98.427001][ T6356] nvme_fabrics: unknown parameter or missing value ']eV#' in ctrl creation request [ 99.121337][ T6361] netlink: 'syz.1.109': attribute type 10 has an invalid length. [ 99.193919][ T6361] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.277723][ T6361] bond0: (slave team0): Enslaving as an active interface with an up link [ 99.308807][ T68] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 99.508075][ T6357] syz1: rxe_newlink: already configured on team_slave_0 [ 100.207001][ T30] audit: type=1400 audit(1743737562.373:239): avc: denied { mount } for pid=6376 comm="syz.0.114" name="/" dev="ramfs" ino=8900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 100.359063][ T6380] netlink: 80 bytes leftover after parsing attributes in process `syz.1.115'. [ 100.421723][ T30] audit: type=1804 audit(1743737562.563:240): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.114" name="/newroot/24/file0/bus" dev="ramfs" ino=9397 res=1 errno=0 [ 100.554990][ T6382] netlink: 748 bytes leftover after parsing attributes in process `syz.4.117'. [ 100.603335][ T6384] 9pnet_fd: Insufficient options for proto=fd [ 100.610787][ T6382] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 100.805873][ T6393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.121'. [ 100.891330][ T5903] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 100.893977][ T30] audit: type=1400 audit(1743737563.043:241): avc: denied { connect } for pid=6394 comm="syz.3.122" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.004480][ T5875] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.016131][ T30] audit: type=1400 audit(1743737563.043:242): avc: denied { write } for pid=6394 comm="syz.3.122" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.046529][ T5903] usb 2-1: device descriptor read/64, error -71 [ 101.211382][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 101.219925][ T30] audit: type=1400 audit(1743737563.383:243): avc: denied { create } for pid=6400 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.239213][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.247681][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.259280][ T5875] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 101.273908][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.279070][ T6401] block nbd3: shutting down sockets [ 101.282311][ T30] audit: type=1400 audit(1743737563.383:244): avc: denied { setopt } for pid=6400 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.306327][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.314177][ T30] audit: type=1400 audit(1743737563.383:245): avc: denied { relabelfrom } for pid=6400 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 101.339780][ T5875] usb 5-1: config 0 descriptor?? [ 101.347114][ T5903] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 101.386188][ T30] audit: type=1400 audit(1743737563.383:246): avc: denied { relabelto } for pid=6400 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 101.405663][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.428214][ T30] audit: type=1400 audit(1743737563.413:247): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 101.486281][ T30] audit: type=1400 audit(1743737563.483:248): avc: denied { read } for pid=6400 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.511586][ T5903] usb 2-1: device descriptor read/64, error -71 [ 101.623469][ T5903] usb usb2-port1: attempt power cycle [ 101.882364][ T6390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.895289][ T6390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.925759][ T5875] usbhid 5-1:0.0: can't add hid device: -71 [ 101.931870][ T5875] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 101.946217][ T5875] usb 5-1: USB disconnect, device number 3 [ 101.979466][ T5903] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 102.041922][ T5903] usb 2-1: device descriptor read/8, error -71 [ 102.185082][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 102.671969][ T5903] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 102.702293][ T5903] usb 2-1: device descriptor read/8, error -71 [ 102.816136][ T5903] usb usb2-port1: unable to enumerate USB device [ 102.841330][ T873] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.992540][ T6422] nvme_fabrics: unknown parameter or missing value ']eV#Rt' in ctrl creation request [ 103.091286][ T873] usb 1-1: Using ep0 maxpacket: 8 [ 103.504293][ T873] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 103.513583][ T873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.522620][ T873] usb 1-1: Product: syz [ 103.526951][ T873] usb 1-1: Manufacturer: syz [ 103.531602][ T873] usb 1-1: SerialNumber: syz [ 103.544497][ T873] usb 1-1: config 0 descriptor?? [ 103.678540][ T6426] [U] 1WT`8H$09\ [ 103.684517][ T6426] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 103.692313][ T6426] [U] 4XZ^Y)MC. OȞPOW [ 103.698687][ T6426] [U] ä%Z [ 103.779795][ T6426] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 103.804917][ T873] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 103.827331][ T6426] [U] P>BЍ̖Z% [ 103.833323][ T6426] [U] I)=#F/UI~)YS=׊4FX&%$K Ӂ'.7*9|AU\PV|Ԋ [ 103.852157][ T6426] [U] ܣK [ 103.855636][ T6426] [U] OW.W ZG д$JYR7/1ZT7L[+ [ 103.865670][ T6426] [U] ^ [ 103.872671][ T6426] [U] T!#Ӈŵ$BIN,<T[:D#8(E"6YˡEFL&1Y¯0DBB1ߦʶ84+N3=CI/6}AR- -OI9إMZ [ 103.892233][ T6429] 9pnet_fd: Insufficient options for proto=fd [ 103.956783][ T6426] [U] ,8OP9UGݗTXF])A3_ D"ȈXXZDݳ !WA 9@ق3X+ZAO]8XX{( ))27Y 3,!KW(CѱIE\AMлCU0*%ɍOHC|;XCK@VNQZ [ 104.019677][ T6426] [U] ţԶDǂ`=ƁN<ʸ]Q [ 104.034253][ T6426] [U] KEZȒF9Ǩ{ [ 104.208212][ T6425] [U] ZI]?.|"%B)`ݾ6VO}'V߾I\M;S QSK3މD [ 104.456144][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.726514][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.868570][ T873] usb write operation failed. (-71) [ 104.878839][ T873] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 105.004306][ T873] dvbdev: DVB: registering new adapter (Terratec H7) [ 105.029040][ T873] usb 1-1: media controller created [ 105.050623][ T873] usb read operation failed. (-71) [ 105.067214][ T873] usb write operation failed. (-71) [ 105.092344][ T873] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 105.140035][ T873] usb 1-1: USB disconnect, device number 4 [ 105.241314][ T5903] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 105.241314][ T5876] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.292644][ T5872] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.371820][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.392632][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 105.413946][ T5876] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 105.437513][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 105.438940][ T5876] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 105.461913][ T5876] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 105.473174][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 105.479850][ T5876] usb 4-1: Product: syz [ 105.489649][ T5876] usb 4-1: Manufacturer: syz [ 105.496203][ T5872] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 105.509408][ T5876] usb 4-1: SerialNumber: syz [ 105.513259][ T5903] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 105.523346][ T5872] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 105.534235][ T5872] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 105.546227][ T5872] usb 3-1: Product: syz [ 105.561484][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 105.567373][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 105.572040][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 105.612533][ T5872] usb 3-1: Manufacturer: syz [ 105.617143][ T5872] usb 3-1: SerialNumber: syz [ 105.634505][ T9] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 105.654864][ T9] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 105.666086][ T9] usb 5-1: Product: syz [ 105.672852][ T9] usb 5-1: Manufacturer: syz [ 105.677546][ T9] usb 5-1: SerialNumber: syz [ 105.796904][ T5903] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 105.827145][ T5903] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 188 [ 105.895895][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 106.369280][ T5876] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 106.369338][ T5876] visor 4-1:1.0: probe with driver visor failed with error -110 [ 106.373323][ T5872] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 106.373364][ T5872] visor 3-1:1.0: probe with driver visor failed with error -110 [ 106.376434][ T9] usb 5-1: palm_os_3_probe - error -110 getting connection information [ 106.376487][ T9] visor 5-1:1.0: probe with driver visor failed with error -110 [ 106.413311][ T5903] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 106.675605][ T9] usb 3-1: USB disconnect, device number 5 [ 106.747204][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.757859][ T5903] usb 2-1: Product: syz [ 106.762146][ T5903] usb 2-1: Manufacturer: syz [ 106.766848][ T5903] usb 2-1: SerialNumber: syz [ 106.845131][ T5903] usb 2-1: config 0 descriptor?? [ 106.850120][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 106.850132][ T30] audit: type=1400 audit(1743737569.013:253): avc: denied { read } for pid=6457 comm="syz.0.142" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 106.883493][ T5874] usb 4-1: USB disconnect, device number 4 [ 106.902518][ T6446] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 106.909768][ T6446] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 106.923937][ T5903] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 106.931013][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 106.931060][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 106.990220][ T30] audit: type=1400 audit(1743737569.013:254): avc: denied { open } for pid=6457 comm="syz.0.142" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 107.033942][ T30] audit: type=1400 audit(1743737569.013:255): avc: denied { ioctl } for pid=6457 comm="syz.0.142" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 107.090494][ T30] audit: type=1400 audit(1743737569.253:256): avc: denied { create } for pid=6459 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 107.126297][ T5875] usb 2-1: USB disconnect, device number 15 [ 107.133047][ T5875] mcba_usb 2-1:0.0 can0: device disconnected [ 107.157342][ T30] audit: type=1400 audit(1743737569.283:257): avc: denied { search } for pid=5492 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.186534][ T30] audit: type=1400 audit(1743737569.283:258): avc: denied { read } for pid=5492 comm="dhcpcd" name="n100" dev="tmpfs" ino=2447 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.208164][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.278308][ T5872] usb 5-1: USB disconnect, device number 4 [ 107.316405][ T30] audit: type=1400 audit(1743737569.283:259): avc: denied { open } for pid=5492 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2447 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.339390][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.351529][ T5903] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 107.379373][ T30] audit: type=1400 audit(1743737569.283:260): avc: denied { getattr } for pid=5492 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2447 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.387206][ T6465] 9pnet_fd: Insufficient options for proto=fd [ 107.434235][ T30] audit: type=1400 audit(1743737569.293:261): avc: denied { create } for pid=6443 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 107.467871][ T30] audit: type=1400 audit(1743737569.593:262): avc: denied { read } for pid=6466 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.490861][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.497335][ T5903] usb 1-1: device descriptor read/64, error -71 [ 107.741367][ T5903] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 107.823149][ T6478] trusted_key: encrypted_key: insufficient parameters specified [ 108.321374][ T5903] usb 1-1: device descriptor read/64, error -71 [ 108.441589][ T5903] usb usb1-port1: attempt power cycle [ 108.821280][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 109.221648][ T5903] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 109.314633][ T5903] usb 1-1: device descriptor read/8, error -71 [ 109.581591][ T5903] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 109.590954][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.154'. [ 109.625375][ T5903] usb 1-1: device descriptor read/8, error -71 [ 109.663120][ T6502] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 109.663145][ T6502] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 109.663199][ T6502] vhci_hcd vhci_hcd.0: Device attached [ 109.667233][ T6502] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 109.667257][ T6502] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.667297][ T6502] vhci_hcd vhci_hcd.0: Device attached [ 109.668598][ T6502] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 109.694438][ T6502] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15) [ 109.694462][ T6502] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 109.694494][ T6502] vhci_hcd vhci_hcd.0: Device attached [ 109.720695][ T6502] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 109.720720][ T6502] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 109.720751][ T6502] vhci_hcd vhci_hcd.0: Device attached [ 109.739477][ T5903] usb usb1-port1: unable to enumerate USB device [ 109.740209][ T6502] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(21) [ 109.740231][ T6502] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 109.740263][ T6502] vhci_hcd vhci_hcd.0: Device attached [ 109.742454][ T6502] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 109.932546][ T9] vhci_hcd: vhci_device speed not set [ 109.936248][ T6515] vhci_hcd: connection closed [ 109.936426][ T6513] vhci_hcd: connection closed [ 109.937167][ T6510] vhci_hcd: connection closed [ 109.937427][ T36] vhci_hcd: stop threads [ 109.937441][ T36] vhci_hcd: release socket [ 109.937475][ T36] vhci_hcd: disconnect device [ 109.937548][ T6508] vhci_hcd: connection closed [ 109.937552][ T6506] vhci_hcd: connection closed [ 109.939622][ T36] vhci_hcd: stop threads [ 109.939633][ T36] vhci_hcd: release socket [ 109.939663][ T36] vhci_hcd: disconnect device [ 109.946818][ T36] vhci_hcd: stop threads [ 109.946830][ T36] vhci_hcd: release socket [ 109.946863][ T36] vhci_hcd: disconnect device [ 109.948000][ T36] vhci_hcd: stop threads [ 109.948009][ T36] vhci_hcd: release socket [ 109.948037][ T36] vhci_hcd: disconnect device [ 110.033091][ T9] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 110.033326][ T6507] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 110.034128][ T36] vhci_hcd: stop threads [ 110.034141][ T36] vhci_hcd: release socket [ 110.034175][ T36] vhci_hcd: disconnect device [ 110.163329][ T6528] trusted_key: encrypted_key: insufficient parameters specified [ 110.589081][ T6533] FAULT_INJECTION: forcing a failure. [ 110.589081][ T6533] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.589102][ T6533] CPU: 0 UID: 0 PID: 6533 Comm: syz.1.159 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 110.589114][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 110.589120][ T6533] Call Trace: [ 110.589123][ T6533] [ 110.589127][ T6533] dump_stack_lvl+0x16c/0x1f0 [ 110.589142][ T6533] should_fail_ex+0x512/0x640 [ 110.589155][ T6533] _copy_from_user+0x2e/0xd0 [ 110.589167][ T6533] do_sock_getsockopt+0x5f4/0x800 [ 110.589183][ T6533] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 110.589196][ T6533] ? __fget_files+0x204/0x3c0 [ 110.589212][ T6533] __sys_getsockopt+0x12f/0x260 [ 110.589225][ T6533] __x64_sys_getsockopt+0xbd/0x160 [ 110.589235][ T6533] ? syscall_trace_enter+0xee/0x260 [ 110.589246][ T6533] do_syscall_64+0xcd/0x260 [ 110.589260][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.589270][ T6533] RIP: 0033:0x7f0694f8d169 [ 110.589278][ T6533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.589287][ T6533] RSP: 002b:00007f0695e0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 110.589297][ T6533] RAX: ffffffffffffffda RBX: 00007f06951a5fa0 RCX: 00007f0694f8d169 [ 110.589303][ T6533] RDX: 0000000000000009 RSI: 0000000000000112 RDI: 0000000000000004 [ 110.589308][ T6533] RBP: 00007f0695e0b090 R08: 00002000000000c0 R09: 0000000000000000 [ 110.589314][ T6533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.589319][ T6533] R13: 0000000000000000 R14: 00007f06951a5fa0 R15: 00007ffc42cf5478 [ 110.589331][ T6533] [ 110.902903][ T6539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.158'. [ 110.916429][ T6539] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 110.916444][ T6539] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 110.916477][ T6539] vhci_hcd vhci_hcd.0: Device attached [ 110.919109][ T6539] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 110.919128][ T6539] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.919156][ T6539] vhci_hcd vhci_hcd.0: Device attached [ 110.922215][ T6539] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 110.923553][ T6539] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 110.923573][ T6539] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 110.923604][ T6539] vhci_hcd vhci_hcd.0: Device attached [ 110.961393][ T6539] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 110.961418][ T6539] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 110.961450][ T6539] vhci_hcd vhci_hcd.0: Device attached [ 110.975315][ T6539] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(21) [ 110.975336][ T6539] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 110.975366][ T6539] vhci_hcd vhci_hcd.0: Device attached [ 110.975853][ T6539] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 110.976210][ T6539] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.013931][ T6549] vhci_hcd: connection closed [ 111.014212][ T6547] vhci_hcd: connection closed [ 111.014997][ T36] vhci_hcd: stop threads [ 111.015013][ T36] vhci_hcd: release socket [ 111.015024][ T36] vhci_hcd: disconnect device [ 111.015176][ T36] vhci_hcd: stop threads [ 111.015184][ T36] vhci_hcd: release socket [ 111.015192][ T36] vhci_hcd: disconnect device [ 111.015232][ T6544] vhci_hcd: connection closed [ 111.015483][ T6540] vhci_hcd: connection closed [ 111.015702][ T36] vhci_hcd: stop threads [ 111.015711][ T36] vhci_hcd: release socket [ 111.015719][ T36] vhci_hcd: disconnect device [ 111.015869][ T36] vhci_hcd: stop threads [ 111.015877][ T36] vhci_hcd: release socket [ 111.015886][ T36] vhci_hcd: disconnect device [ 111.015933][ T6542] vhci_hcd: connection closed [ 111.016231][ T36] vhci_hcd: stop threads [ 111.016239][ T36] vhci_hcd: release socket [ 111.016247][ T36] vhci_hcd: disconnect device [ 111.088469][ T5874] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 111.226574][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.161'. [ 111.260064][ T6553] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 111.260086][ T6553] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 111.260851][ T6553] vhci_hcd vhci_hcd.0: Device attached [ 111.263496][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 111.264595][ T6553] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 111.264608][ T6553] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.264626][ T6553] vhci_hcd vhci_hcd.0: Device attached [ 111.265541][ T6553] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.267794][ T6553] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15) [ 111.267805][ T6553] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 111.267828][ T6553] vhci_hcd vhci_hcd.0: Device attached [ 111.268262][ T5874] usb 2-1: unable to get BOS descriptor or descriptor too short [ 111.270565][ T5874] usb 2-1: config index 0 descriptor too short (expected 34627, got 27) [ 111.270581][ T5874] usb 2-1: config 0 has too many interfaces: 115, using maximum allowed: 32 [ 111.270591][ T5874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.270600][ T5874] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 115 [ 111.274010][ T5874] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 111.274025][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 111.274035][ T5874] usb 2-1: Product: syz [ 111.274043][ T5874] usb 2-1: Manufacturer: վ潥晓쿇|嬏☪圵쾄虄旁响⠼　᳸W廉숻瀙⦕颖쀒㷗宮䂯鬳沁竿痽啣᩵贤卿䀓뽻ᕍ姆髧ꚋ趁鍅㷩竒膻徝᩽༫迠䠱澥饜蠀蒺ᘓᐽ卬乌钫씤瑀拊뻅턳ꙷ蔡ﮱ邽␈닢ꏸṡ玎ᮡ㬉졿紱褄￪쒂⇄ኲ [ 111.274059][ T5874] usb 2-1: SerialNumber: Р [ 111.275453][ T5874] usb 2-1: config 0 descriptor?? [ 111.277493][ T6553] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(19) [ 111.277507][ T6553] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 111.277534][ T6553] vhci_hcd vhci_hcd.0: Device attached [ 111.278851][ T6553] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(21) [ 111.278870][ T6553] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 111.278898][ T6553] vhci_hcd vhci_hcd.0: Device attached [ 111.279705][ T6553] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.280352][ T6553] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.298890][ T6553] vhci_hcd vhci_hcd.0: port 0 already used [ 111.323714][ T6554] vhci_hcd: connection closed [ 111.323726][ T6556] vhci_hcd: connection closed [ 111.323901][ T6558] vhci_hcd: connection closed [ 111.324043][ T6560] vhci_hcd: connection closed [ 111.324191][ T6562] vhci_hcd: connection closed [ 111.327498][ T36] vhci_hcd: stop threads [ 111.327514][ T36] vhci_hcd: release socket [ 111.327525][ T36] vhci_hcd: disconnect device [ 111.327601][ T36] vhci_hcd: stop threads [ 111.327607][ T36] vhci_hcd: release socket [ 111.327616][ T36] vhci_hcd: disconnect device [ 111.327845][ T36] vhci_hcd: stop threads [ 111.327853][ T36] vhci_hcd: release socket [ 111.327862][ T36] vhci_hcd: disconnect device [ 111.327911][ T36] vhci_hcd: stop threads [ 111.327917][ T36] vhci_hcd: release socket [ 111.327926][ T36] vhci_hcd: disconnect device [ 111.328076][ T36] vhci_hcd: stop threads [ 111.328083][ T36] vhci_hcd: release socket [ 111.328092][ T36] vhci_hcd: disconnect device [ 111.483020][ T5876] usb 2-1: USB disconnect, device number 16 [ 111.764167][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 111.871366][ T5903] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 112.249668][ T5903] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 112.272638][ T5903] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 112.296722][ T5903] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 112.471479][ T5903] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 112.512933][ T6583] netlink: 'syz.2.169': attribute type 10 has an invalid length. [ 112.522131][ T6583] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 112.537260][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 112.564538][ T5829] Bluetooth: hci4: Malformed Event: 0x2f [ 112.669133][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 112.753560][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 112.766792][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 112.855853][ T6593] netlink: 48 bytes leftover after parsing attributes in process `syz.3.172'. [ 112.900220][ T5903] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 112.925486][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.972864][ T5903] usb 1-1: config 0 descriptor?? [ 112.994477][ T5903] hub 1-1:0.0: bad descriptor, ignoring hub [ 113.025480][ T5903] hub 1-1:0.0: probe with driver hub failed with error -5 [ 113.177874][ T5903] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 113.184816][ T6603] FAULT_INJECTION: forcing a failure. [ 113.184816][ T6603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.246055][ T6604] trusted_key: encrypted_key: insufficient parameters specified [ 113.706448][ T6603] CPU: 0 UID: 0 PID: 6603 Comm: syz.3.177 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 113.706475][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.706485][ T6603] Call Trace: [ 113.706490][ T6603] [ 113.706497][ T6603] dump_stack_lvl+0x16c/0x1f0 [ 113.706523][ T6603] should_fail_ex+0x512/0x640 [ 113.706545][ T6603] _copy_from_iter+0x2a4/0x15b0 [ 113.706566][ T6603] ? __alloc_skb+0x200/0x380 [ 113.706585][ T6603] ? __pfx__copy_from_iter+0x10/0x10 [ 113.706605][ T6603] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 113.706627][ T6603] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 113.706657][ T6603] netlink_sendmsg+0x829/0xdd0 [ 113.706684][ T6603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.706714][ T6603] ____sys_sendmsg+0xa95/0xc70 [ 113.706739][ T6603] ? copy_msghdr_from_user+0x10a/0x160 [ 113.706758][ T6603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.706792][ T6603] ___sys_sendmsg+0x134/0x1d0 [ 113.706812][ T6603] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.706860][ T6603] __sys_sendmsg+0x16d/0x220 [ 113.706881][ T6603] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.706913][ T6603] ? rcu_is_watching+0x12/0xc0 [ 113.706942][ T6603] do_syscall_64+0xcd/0x260 [ 113.706964][ T6603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.706981][ T6603] RIP: 0033:0x7fe86cd8d169 [ 113.706993][ T6603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.707009][ T6603] RSP: 002b:00007fe86abf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.707026][ T6603] RAX: ffffffffffffffda RBX: 00007fe86cfa5fa0 RCX: 00007fe86cd8d169 [ 113.707036][ T6603] RDX: 0000000020000004 RSI: 0000200000000140 RDI: 0000000000000004 [ 113.707046][ T6603] RBP: 00007fe86abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.707055][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.707064][ T6603] R13: 0000000000000000 R14: 00007fe86cfa5fa0 R15: 00007fff1baff578 [ 113.707087][ T6603] [ 114.028812][ T6607] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 114.038022][ T6607] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 114.047344][ T6607] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 114.055339][ T6607] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 114.067263][ T6607] netlink: 'syz.2.178': attribute type 1 has an invalid length. [ 114.075228][ T6607] netlink: 17 bytes leftover after parsing attributes in process `syz.2.178'. [ 114.134704][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 114.188343][ T6611] kernel read not supported for file /!se (pid: 6611 comm: syz.1.179) [ 114.205425][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 114.205434][ T30] audit: type=1800 audit(1743737576.363:288): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.179" name="!se" dev="mqueue" ino=10555 res=0 errno=0 [ 114.298348][ T5829] Bluetooth: hci0: Malformed Event: 0x2f [ 114.434566][ T30] audit: type=1400 audit(1743737576.603:289): avc: denied { append } for pid=6618 comm="syz.2.184" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 114.593492][ T5872] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 114.664399][ T58] usb 1-1: USB disconnect, device number 9 [ 114.882026][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 114.905174][ T5872] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 114.938055][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.957273][ T5872] usb 2-1: Product: syz [ 114.963502][ T5872] usb 2-1: Manufacturer: syz [ 114.968091][ T5872] usb 2-1: SerialNumber: syz [ 114.997532][ T5872] usb 2-1: config 0 descriptor?? [ 115.086809][ T5903] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.129978][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'. [ 115.211151][ T9] vhci_hcd: vhci_device speed not set [ 115.237865][ T5872] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 115.281193][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'. [ 115.341306][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 115.355571][ T5903] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 115.386683][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 115.404546][ T5903] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 115.429533][ T5903] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 188 [ 115.458289][ T5903] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 115.468666][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.476970][ T5903] usb 4-1: Product: syz [ 115.481518][ T5903] usb 4-1: Manufacturer: syz [ 115.486129][ T5903] usb 4-1: SerialNumber: syz [ 115.493696][ T5903] usb 4-1: config 0 descriptor?? [ 115.501402][ T6625] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 115.508659][ T6625] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 115.674469][ C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 115.681274][ T5903] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 115.688389][ C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 115.794776][ T30] audit: type=1400 audit(1743737577.953:290): avc: denied { ioctl } for pid=6632 comm="syz.4.190" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10763 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 116.043514][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.060297][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.118071][ T5872] usb write operation failed. (-71) [ 116.141851][ T5872] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 116.184437][ T5872] dvbdev: DVB: registering new adapter (Terratec H7) [ 116.228821][ T5872] usb 2-1: media controller created [ 116.235638][ T5872] usb read operation failed. (-71) [ 116.247918][ T5872] usb write operation failed. (-71) [ 116.264898][ T5872] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 116.294545][ T5872] usb 2-1: USB disconnect, device number 17 [ 116.959940][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.197'. [ 117.006735][ T6675] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 117.013284][ T6675] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 117.033760][ T6675] vhci_hcd vhci_hcd.0: Device attached [ 117.064070][ T6673] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 117.070704][ T6673] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.094471][ T6673] vhci_hcd vhci_hcd.0: Device attached [ 117.159047][ T6675] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 117.216800][ T6673] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(13) [ 117.223436][ T6673] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 117.231416][ T9] vhci_hcd: vhci_device speed not set [ 117.244138][ T6673] vhci_hcd vhci_hcd.0: Device attached [ 117.261117][ T5492] mcba_usb 4-1:0.0 can0: bit-timing not yet defined [ 117.306324][ T9] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 117.362148][ T6676] vhci_hcd: connection reset by peer [ 117.362949][ T6679] vhci_hcd: connection closed [ 117.378908][ T6682] vhci_hcd: connection closed [ 117.398912][ T1136] vhci_hcd: stop threads [ 117.492776][ T5874] usb 4-1: USB disconnect, device number 5 [ 117.510311][ T5874] mcba_usb 4-1:0.0 can0: device disconnected [ 117.519580][ T1136] vhci_hcd: release socket [ 117.527003][ T1136] vhci_hcd: disconnect device [ 117.535700][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'. [ 117.582351][ T6689] FAULT_INJECTION: forcing a failure. [ 117.582351][ T6689] name failslab, interval 1, probability 0, space 0, times 0 [ 117.604921][ T1136] vhci_hcd: stop threads [ 117.618327][ T1136] vhci_hcd: release socket [ 117.625342][ T1136] vhci_hcd: disconnect device [ 117.631477][ T6689] CPU: 0 UID: 0 PID: 6689 Comm: syz.3.200 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 117.631493][ T6689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.631499][ T6689] Call Trace: [ 117.631503][ T6689] [ 117.631507][ T6689] dump_stack_lvl+0x16c/0x1f0 [ 117.631523][ T6689] should_fail_ex+0x512/0x640 [ 117.631533][ T6689] ? __kmalloc_noprof+0xbf/0x510 [ 117.631545][ T6689] ? sk_prot_alloc+0x1a8/0x2a0 [ 117.631558][ T6689] should_failslab+0xc2/0x120 [ 117.631569][ T6689] __kmalloc_noprof+0xd2/0x510 [ 117.631582][ T6689] sk_prot_alloc+0x1a8/0x2a0 [ 117.631596][ T6689] sk_alloc+0x36/0xc20 [ 117.631607][ T6689] bpf_prog_test_run_skb+0x330/0x2280 [ 117.631620][ T6689] ? __fget_files+0x204/0x3c0 [ 117.631632][ T6689] ? __fget_files+0x20e/0x3c0 [ 117.631641][ T6689] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 117.631654][ T6689] ? fput+0x70/0xf0 [ 117.631669][ T6689] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 117.631681][ T6689] __sys_bpf+0x1485/0x4d80 [ 117.631696][ T6689] ? __pfx___sys_bpf+0x10/0x10 [ 117.631709][ T6689] ? ksys_write+0x190/0x240 [ 117.631719][ T6689] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 117.631740][ T6689] ? fput+0x70/0xf0 [ 117.631750][ T6689] ? ksys_write+0x1b9/0x240 [ 117.631759][ T6689] ? __pfx_ksys_write+0x10/0x10 [ 117.631767][ T6689] ? rcu_is_watching+0x12/0xc0 [ 117.631781][ T6689] __x64_sys_bpf+0x78/0xc0 [ 117.631794][ T6689] ? lockdep_hardirqs_on+0x7c/0x110 [ 117.631806][ T6689] do_syscall_64+0xcd/0x260 [ 117.631819][ T6689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.631829][ T6689] RIP: 0033:0x7fe86cd8d169 [ 117.631838][ T6689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.631848][ T6689] RSP: 002b:00007fe86abf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 117.631857][ T6689] RAX: ffffffffffffffda RBX: 00007fe86cfa5fa0 RCX: 00007fe86cd8d169 [ 117.631863][ T6689] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 117.631869][ T6689] RBP: 00007fe86abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 117.631874][ T6689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.631880][ T6689] R13: 0000000000000000 R14: 00007fe86cfa5fa0 R15: 00007fff1baff578 [ 117.631892][ T6689] [ 117.974269][ T1136] vhci_hcd: stop threads [ 117.978538][ T1136] vhci_hcd: release socket [ 118.028406][ T1136] vhci_hcd: disconnect device [ 118.201999][ T30] audit: type=1400 audit(1743737580.363:291): avc: denied { create } for pid=6697 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.308718][ T30] audit: type=1400 audit(1743737580.373:292): avc: denied { setopt } for pid=6697 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.017632][ T30] audit: type=1400 audit(1743737581.183:293): avc: denied { name_bind } for pid=6729 comm="syz.2.211" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 119.080788][ T6732] netlink: 312 bytes leftover after parsing attributes in process `syz.0.210'. [ 119.114750][ T30] audit: type=1400 audit(1743737581.283:294): avc: denied { read } for pid=6728 comm="syz.0.210" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.193315][ T30] audit: type=1400 audit(1743737581.283:295): avc: denied { open } for pid=6728 comm="syz.0.210" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.452820][ T30] audit: type=1400 audit(1743737581.313:296): avc: denied { ioctl } for pid=6728 comm="syz.0.210" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.477901][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.552309][ T5933] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 119.723754][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.215'. [ 119.761679][ T6744] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 119.768224][ T6744] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 119.775782][ T6744] vhci_hcd vhci_hcd.0: Device attached [ 119.783287][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 119.801363][ T6744] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 119.807994][ T6744] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 119.814696][ T5933] usb 1-1: unable to get BOS descriptor or descriptor too short [ 119.821285][ T6744] vhci_hcd vhci_hcd.0: Device attached [ 119.836207][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 119.844004][ T6751] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 119.885086][ T30] audit: type=1400 audit(1743737582.053:297): avc: denied { search } for pid=5180 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.900682][ T5933] usb 1-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 119.931532][ T6744] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(13) [ 119.938160][ T6744] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 119.962848][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.971102][ T6744] vhci_hcd vhci_hcd.0: Device attached [ 119.976990][ T58] vhci_hcd: vhci_device speed not set [ 120.017071][ T5933] usb 1-1: Product: syz [ 120.027732][ T6753] vhci_hcd: connection closed [ 120.027976][ T1143] vhci_hcd: stop threads [ 120.030430][ T5933] usb 1-1: SerialNumber: syz [ 120.035217][ T6746] vhci_hcd: connection closed [ 120.042412][ T6749] vhci_hcd: connection closed [ 120.047475][ T1143] vhci_hcd: release socket [ 120.056886][ T58] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 120.063201][ T5933] usb 1-1: config 0 descriptor?? [ 120.070456][ T6747] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 120.084664][ T1143] vhci_hcd: disconnect device [ 120.091515][ T1143] vhci_hcd: stop threads [ 120.095771][ T1143] vhci_hcd: release socket [ 120.110346][ T1143] vhci_hcd: disconnect device [ 120.133582][ T1143] vhci_hcd: stop threads [ 120.143309][ T1143] vhci_hcd: release socket [ 120.152255][ T1143] vhci_hcd: disconnect device [ 120.354367][ T5933] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 120.411980][ T5933] usb 1-1: USB disconnect, device number 10 [ 121.086351][ T6769] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 121.505711][ T6773] trusted_key: encrypted_key: insufficient parameters specified [ 122.631660][ T9] vhci_hcd: vhci_device speed not set [ 122.729224][ T6782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'. [ 122.742270][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.228'. [ 122.848507][ T6784] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 122.855057][ T6784] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 122.890560][ T6784] vhci_hcd vhci_hcd.0: Device attached [ 122.896673][ T6793] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 122.904108][ T6793] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 122.905210][ T6793] vhci_hcd vhci_hcd.0: Device attached [ 122.923272][ T6784] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 122.950643][ T6784] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15) [ 122.957278][ T6784] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 122.979524][ T6799] FAULT_INJECTION: forcing a failure. [ 122.979524][ T6799] name failslab, interval 1, probability 0, space 0, times 0 [ 122.981321][ T6784] vhci_hcd vhci_hcd.0: Device attached [ 123.014162][ T5903] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 123.031370][ T6799] CPU: 0 UID: 0 PID: 6799 Comm: syz.1.231 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 123.031396][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.031405][ T6799] Call Trace: [ 123.031411][ T6799] [ 123.031417][ T6799] dump_stack_lvl+0x16c/0x1f0 [ 123.031442][ T6799] should_fail_ex+0x512/0x640 [ 123.031458][ T6799] ? __kmalloc_noprof+0xbf/0x510 [ 123.031476][ T6799] ? mon_bin_ioctl+0x470/0xcd0 [ 123.031494][ T6799] should_failslab+0xc2/0x120 [ 123.031512][ T6799] __kmalloc_noprof+0xd2/0x510 [ 123.031528][ T6799] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 123.031557][ T6799] mon_bin_ioctl+0x470/0xcd0 [ 123.031577][ T6799] ? hook_file_ioctl_common+0x145/0x410 [ 123.031594][ T6799] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 123.031642][ T6799] ? selinux_file_ioctl+0x180/0x270 [ 123.031664][ T6799] ? selinux_file_ioctl+0xb4/0x270 [ 123.031692][ T6799] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 123.031713][ T6799] __x64_sys_ioctl+0x190/0x200 [ 123.031738][ T6799] do_syscall_64+0xcd/0x260 [ 123.031760][ T6799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.031775][ T6799] RIP: 0033:0x7f0694f8d169 [ 123.031788][ T6799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.031803][ T6799] RSP: 002b:00007f0695e0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.031819][ T6799] RAX: ffffffffffffffda RBX: 00007f06951a5fa0 RCX: 00007f0694f8d169 [ 123.031829][ T6799] RDX: 0000000000047cdc RSI: 0000000000009204 RDI: 0000000000000003 [ 123.031838][ T6799] RBP: 00007f0695e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 123.031848][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.031857][ T6799] R13: 0000000000000000 R14: 00007f06951a5fa0 R15: 00007ffc42cf5478 [ 123.031879][ T6799] [ 123.061647][ T5875] vhci_hcd: vhci_device speed not set [ 123.091269][ T6796] vhci_hcd: connection closed [ 123.093361][ T6787] vhci_hcd: connection closed [ 123.097891][ T6794] vhci_hcd: connection closed [ 123.113550][ T1348] vhci_hcd: stop threads [ 123.152660][ T6804] evm: overlay not supported [ 123.167021][ T1348] vhci_hcd: release socket [ 123.174670][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.227458][ T6806] FAULT_INJECTION: forcing a failure. [ 123.227458][ T6806] name failslab, interval 1, probability 0, space 0, times 0 [ 123.236448][ T5875] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 123.253721][ T6806] CPU: 0 UID: 0 PID: 6806 Comm: syz.0.234 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 123.253743][ T6806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.253751][ T6806] Call Trace: [ 123.253757][ T6806] [ 123.253762][ T6806] dump_stack_lvl+0x16c/0x1f0 [ 123.253784][ T6806] should_fail_ex+0x512/0x640 [ 123.253799][ T6806] ? fs_reclaim_acquire+0xae/0x150 [ 123.253820][ T6806] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 123.253839][ T6806] should_failslab+0xc2/0x120 [ 123.253857][ T6806] __kmalloc_noprof+0xd2/0x510 [ 123.253877][ T6806] tomoyo_realpath_from_path+0xc2/0x6e0 [ 123.253903][ T6806] tomoyo_check_open_permission+0x2ab/0x3c0 [ 123.253922][ T6806] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 123.253960][ T6806] ? find_held_lock+0x2b/0x80 [ 123.253984][ T6806] tomoyo_file_open+0x6b/0x90 [ 123.253998][ T6806] security_file_open+0x84/0x1e0 [ 123.254019][ T6806] do_dentry_open+0x596/0x1c10 [ 123.254039][ T6806] vfs_open+0x82/0x3f0 [ 123.254058][ T6806] path_openat+0x1e5e/0x2d40 [ 123.254082][ T6806] ? __pfx_path_openat+0x10/0x10 [ 123.254101][ T6806] do_filp_open+0x20b/0x470 [ 123.254116][ T6806] ? __pfx_do_filp_open+0x10/0x10 [ 123.254145][ T6806] ? _raw_spin_unlock+0x28/0x50 [ 123.254159][ T6806] ? alloc_fd+0x471/0x7d0 [ 123.254179][ T6806] do_sys_openat2+0x11b/0x1d0 [ 123.254196][ T6806] ? __pfx_do_sys_openat2+0x10/0x10 [ 123.254214][ T6806] ? __fget_files+0x20e/0x3c0 [ 123.254232][ T6806] __x64_sys_open+0x153/0x1e0 [ 123.254249][ T6806] ? __pfx___x64_sys_open+0x10/0x10 [ 123.254271][ T6806] ? rcu_is_watching+0x12/0xc0 [ 123.254290][ T6806] do_syscall_64+0xcd/0x260 [ 123.254309][ T6806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.254323][ T6806] RIP: 0033:0x7f417f38d169 [ 123.254335][ T6806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.254348][ T6806] RSP: 002b:00007f41801be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 123.254362][ T6806] RAX: ffffffffffffffda RBX: 00007f417f5a6080 RCX: 00007f417f38d169 [ 123.254370][ T6806] RDX: 0000000000000000 RSI: 0000000400141042 RDI: 0000200000000080 [ 123.254379][ T6806] RBP: 00007f41801be090 R08: 0000000000000000 R09: 0000000000000000 [ 123.254387][ T6806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.254395][ T6806] R13: 0000000000000001 R14: 00007f417f5a6080 R15: 00007ffe83526528 [ 123.254414][ T6806] [ 123.254420][ T6806] ERROR: Out of memory at tomoyo_realpath_from_path. [ 123.287681][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 123.294058][ T6788] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 123.317488][ T1348] vhci_hcd: disconnect device [ 123.341541][ T5903] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 123.378865][ T1348] vhci_hcd: stop threads [ 123.414731][ T6808] 9pnet: Could not find request transport: fd0x0000000000000006 [ 123.420389][ T1348] vhci_hcd: release socket [ 123.444914][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.452618][ T1348] vhci_hcd: disconnect device [ 123.474526][ T5903] usb 3-1: Product: syz [ 123.503461][ T1348] vhci_hcd: stop threads [ 123.533462][ T5903] usb 3-1: Manufacturer: syz [ 123.560325][ T1348] vhci_hcd: release socket [ 123.581822][ T5903] usb 3-1: SerialNumber: syz [ 123.593106][ T1348] vhci_hcd: disconnect device [ 123.613849][ T5903] usb 3-1: config 0 descriptor?? [ 123.713551][ T6818] FAULT_INJECTION: forcing a failure. [ 123.713551][ T6818] name failslab, interval 1, probability 0, space 0, times 0 [ 123.743934][ T6818] CPU: 0 UID: 0 PID: 6818 Comm: syz.1.239 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 123.743961][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.743970][ T6818] Call Trace: [ 123.743976][ T6818] [ 123.743982][ T6818] dump_stack_lvl+0x16c/0x1f0 [ 123.744002][ T6818] should_fail_ex+0x512/0x640 [ 123.744019][ T6818] should_failslab+0xc2/0x120 [ 123.744035][ T6818] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 123.744049][ T6818] ? skb_clone+0x190/0x3f0 [ 123.744069][ T6818] skb_clone+0x190/0x3f0 [ 123.744087][ T6818] netlink_deliver_tap+0xabd/0xd30 [ 123.744106][ T6818] netlink_unicast+0x5df/0x7f0 [ 123.744125][ T6818] ? __pfx_netlink_unicast+0x10/0x10 [ 123.744145][ T6818] netlink_sendmsg+0x8d1/0xdd0 [ 123.744164][ T6818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.744186][ T6818] ____sys_sendmsg+0xa95/0xc70 [ 123.744205][ T6818] ? copy_msghdr_from_user+0x10a/0x160 [ 123.744221][ T6818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.744247][ T6818] ___sys_sendmsg+0x134/0x1d0 [ 123.744266][ T6818] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.744299][ T6818] ? map_id_range_up+0x370/0x3b0 [ 123.744320][ T6818] __sys_sendmsg+0x16d/0x220 [ 123.744335][ T6818] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.744351][ T6818] ? __pfx_bpf_trace_run2+0x10/0x10 [ 123.744368][ T6818] ? syscall_trace_enter+0x1cb/0x260 [ 123.744384][ T6818] ? rcu_is_watching+0x12/0xc0 [ 123.744401][ T6818] do_syscall_64+0xcd/0x260 [ 123.744418][ T6818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.744430][ T6818] RIP: 0033:0x7f0694f8d169 [ 123.744441][ T6818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.744453][ T6818] RSP: 002b:00007f0695e0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.744466][ T6818] RAX: ffffffffffffffda RBX: 00007f06951a5fa0 RCX: 00007f0694f8d169 [ 123.744475][ T6818] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 123.744484][ T6818] RBP: 00007f0695e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 123.744492][ T6818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.744499][ T6818] R13: 0000000000000000 R14: 00007f06951a5fa0 R15: 00007ffc42cf5478 [ 123.744517][ T6818] [ 124.080248][ T5903] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 124.115976][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 124.130332][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 124.176481][ T6823] vlan2: entered allmulticast mode [ 124.181628][ T6823] bridge_slave_0: entered allmulticast mode [ 124.283105][ T30] audit: type=1400 audit(1743737586.453:298): avc: denied { connect } for pid=6827 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.310669][ T30] audit: type=1400 audit(1743737586.473:299): avc: denied { bind } for pid=6827 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.331955][ T30] audit: type=1400 audit(1743737586.473:300): avc: denied { read } for pid=6827 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.374146][ T30] audit: type=1400 audit(1743737586.533:301): avc: denied { write } for pid=6827 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.394358][ T30] audit: type=1400 audit(1743737586.533:302): avc: denied { setopt } for pid=6827 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.415456][ T30] audit: type=1400 audit(1743737586.533:303): avc: denied { listen } for pid=6827 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.447928][ T30] audit: type=1400 audit(1743737586.613:304): avc: denied { read } for pid=6827 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.494955][ T30] audit: type=1400 audit(1743737586.613:305): avc: denied { accept } for pid=6827 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.702110][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.732200][ T6838] trusted_key: encrypted_key: insufficient parameters specified [ 124.844242][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.147965][ T5903] usb write operation failed. (-71) [ 125.158707][ T5903] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 125.199554][ T5903] dvbdev: DVB: registering new adapter (Terratec H7) [ 125.221337][ T58] vhci_hcd: vhci_device speed not set [ 125.230995][ T5903] usb 3-1: media controller created [ 125.308849][ T5903] usb read operation failed. (-71) [ 125.388503][ T5903] usb write operation failed. (-71) [ 125.396153][ T5903] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 125.407994][ T5903] usb 3-1: USB disconnect, device number 6 [ 125.493906][ T30] audit: type=1400 audit(1743737587.663:306): avc: denied { bind } for pid=6848 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.494180][ T30] audit: type=1400 audit(1743737587.663:307): avc: denied { name_bind } for pid=6848 comm="syz.3.250" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 125.494402][ T30] audit: type=1400 audit(1743737587.663:308): avc: denied { node_bind } for pid=6848 comm="syz.3.250" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 125.494936][ T30] audit: type=1400 audit(1743737587.663:309): avc: denied { write } for pid=6848 comm="syz.3.250" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.495906][ T30] audit: type=1400 audit(1743737587.663:310): avc: denied { name_connect } for pid=6848 comm="syz.3.250" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 126.130150][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'. [ 126.449660][ T30] audit: type=1400 audit(1743737588.513:311): avc: denied { setopt } for pid=6848 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.633378][ T5829] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 126.768436][ T6852] 9pnet: Could not find request transport: fd0x0000000000000006 [ 126.859264][ T6863] MTD: Couldn't look up 'memory.events': -15 [ 127.278545][ T30] audit: type=1400 audit(1743737589.443:312): avc: denied { ioctl } for pid=6864 comm="syz.2.254" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 127.280864][ T6865] syz.2.254 uses obsolete (PF_INET,SOCK_PACKET) [ 127.693563][ T6874] FAULT_INJECTION: forcing a failure. [ 127.693563][ T6874] name failslab, interval 1, probability 0, space 0, times 0 [ 127.706322][ T6874] CPU: 0 UID: 0 PID: 6874 Comm: syz.1.256 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 127.706344][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.706353][ T6874] Call Trace: [ 127.706358][ T6874] [ 127.706365][ T6874] dump_stack_lvl+0x16c/0x1f0 [ 127.706390][ T6874] should_fail_ex+0x512/0x640 [ 127.706407][ T6874] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 127.706434][ T6874] should_failslab+0xc2/0x120 [ 127.706453][ T6874] __kmalloc_cache_noprof+0x6a/0x3e0 [ 127.706476][ T6874] ? get_mm_exe_file+0x8a/0x1a0 [ 127.706498][ T6874] ? landlock_init_hierarchy_log+0xa7/0x870 [ 127.706523][ T6874] landlock_init_hierarchy_log+0xa7/0x870 [ 127.706546][ T6874] landlock_merge_ruleset+0x6e1/0x870 [ 127.706570][ T6874] ? prepare_creds+0x583/0x7d0 [ 127.706589][ T6874] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 127.706616][ T6874] do_syscall_64+0xcd/0x260 [ 127.706638][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.706655][ T6874] RIP: 0033:0x7f0694f8d169 [ 127.706668][ T6874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.706683][ T6874] RSP: 002b:00007f0695dc9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 127.706699][ T6874] RAX: ffffffffffffffda RBX: 00007f06951a6160 RCX: 00007f0694f8d169 [ 127.706710][ T6874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 127.706719][ T6874] RBP: 00007f0695dc9090 R08: 0000000000000000 R09: 0000000000000000 [ 127.706729][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.706738][ T6874] R13: 0000000000000000 R14: 00007f06951a6160 R15: 00007ffc42cf5478 [ 127.706761][ T6874] [ 127.707143][ T6874] ------------[ cut here ]------------ [ 127.884537][ T6874] WARNING: CPU: 0 PID: 6874 at security/landlock/domain.h:133 free_ruleset+0x226/0x270 [ 127.894490][ T6874] Modules linked in: [ 127.898363][ T6874] CPU: 0 UID: 0 PID: 6874 Comm: syz.1.256 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 127.910149][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.920473][ T6874] RIP: 0010:free_ruleset+0x226/0x270 [ 127.926062][ T6874] Code: 84 61 ff ff ff 48 89 eb e9 12 ff ff ff e8 32 ba 2a fd be 03 00 00 00 4c 89 f7 e8 75 ed 3e 00 e9 42 ff ff ff e8 1b ba 2a fd 90 <0f> 0b 90 eb af e8 c0 21 90 fd e9 4a fe ff ff 48 89 df e8 b3 21 90 [ 127.945675][ T6874] RSP: 0018:ffffc9000c097e38 EFLAGS: 00010293 [ 127.951724][ T6874] RAX: 0000000000000000 RBX: ffff888022776d80 RCX: ffffffff84917dcf [ 127.959666][ T6874] RDX: ffff888078a54880 RSI: ffffffff849086b5 RDI: 0000000000000005 [ 127.967625][ T6874] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 127.975595][ T6874] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880798cc500 [ 127.983561][ T6874] R13: dffffc0000000000 R14: ffff888022776da0 R15: fffffffffffffff4 [ 127.991956][ T6874] FS: 00007f0695dc96c0(0000) GS:ffff8881249b8000(0000) knlGS:0000000000000000 [ 128.000868][ T6874] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.007743][ T6874] CR2: 00007f0695dc8f98 CR3: 000000002973e000 CR4: 00000000003526f0 [ 128.015710][ T6874] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.023675][ T6874] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.031638][ T6874] Call Trace: [ 128.034892][ T6874] [ 128.037800][ T6874] landlock_put_ruleset+0xa5/0xb0 [ 128.042843][ T6874] landlock_merge_ruleset+0x218/0x870 [ 128.048210][ T6874] ? prepare_creds+0x583/0x7d0 [ 128.052986][ T6874] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 128.059129][ T6874] do_syscall_64+0xcd/0x260 [ 128.063645][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.069512][ T6874] RIP: 0033:0x7f0694f8d169 [ 128.073927][ T6874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.094054][ T6874] RSP: 002b:00007f0695dc9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 128.102746][ T6874] RAX: ffffffffffffffda RBX: 00007f06951a6160 RCX: 00007f0694f8d169 [ 128.110708][ T6874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 128.118669][ T6874] RBP: 00007f0695dc9090 R08: 0000000000000000 R09: 0000000000000000 [ 128.126645][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.134608][ T6874] R13: 0000000000000000 R14: 00007f06951a6160 R15: 00007ffc42cf5478 [ 128.142621][ T6874] [ 128.145622][ T6874] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.152881][ T6874] CPU: 0 UID: 0 PID: 6874 Comm: syz.1.256 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 128.164396][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.174422][ T6874] Call Trace: [ 128.177688][ T6874] [ 128.180593][ T6874] dump_stack_lvl+0x3d/0x1f0 [ 128.185181][ T6874] panic+0x71c/0x800 [ 128.189074][ T6874] ? __pfx_panic+0x10/0x10 [ 128.193473][ T6874] ? show_trace_log_lvl+0x29b/0x3e0 [ 128.198658][ T6874] ? check_panic_on_warn+0x1f/0xb0 [ 128.203761][ T6874] ? free_ruleset+0x226/0x270 [ 128.208438][ T6874] check_panic_on_warn+0xab/0xb0 [ 128.213359][ T6874] __warn+0xf6/0x3c0 [ 128.217230][ T6874] ? free_ruleset+0x226/0x270 [ 128.221887][ T6874] report_bug+0x3c3/0x580 [ 128.226192][ T6874] ? free_ruleset+0x226/0x270 [ 128.230844][ T6874] handle_bug+0x184/0x210 [ 128.235148][ T6874] exc_invalid_op+0x17/0x50 [ 128.239629][ T6874] asm_exc_invalid_op+0x1a/0x20 [ 128.244462][ T6874] RIP: 0010:free_ruleset+0x226/0x270 [ 128.249723][ T6874] Code: 84 61 ff ff ff 48 89 eb e9 12 ff ff ff e8 32 ba 2a fd be 03 00 00 00 4c 89 f7 e8 75 ed 3e 00 e9 42 ff ff ff e8 1b ba 2a fd 90 <0f> 0b 90 eb af e8 c0 21 90 fd e9 4a fe ff ff 48 89 df e8 b3 21 90 [ 128.269303][ T6874] RSP: 0018:ffffc9000c097e38 EFLAGS: 00010293 [ 128.275341][ T6874] RAX: 0000000000000000 RBX: ffff888022776d80 RCX: ffffffff84917dcf [ 128.283284][ T6874] RDX: ffff888078a54880 RSI: ffffffff849086b5 RDI: 0000000000000005 [ 128.291232][ T6874] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 128.299205][ T6874] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880798cc500 [ 128.307160][ T6874] R13: dffffc0000000000 R14: ffff888022776da0 R15: fffffffffffffff4 [ 128.315118][ T6874] ? landlock_log_drop_domain+0x5f/0x1e0 [ 128.320735][ T6874] ? free_ruleset+0x225/0x270 [ 128.325394][ T6874] ? free_ruleset+0x225/0x270 [ 128.330057][ T6874] landlock_put_ruleset+0xa5/0xb0 [ 128.335066][ T6874] landlock_merge_ruleset+0x218/0x870 [ 128.340418][ T6874] ? prepare_creds+0x583/0x7d0 [ 128.345157][ T6874] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 128.351287][ T6874] do_syscall_64+0xcd/0x260 [ 128.355764][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.361637][ T6874] RIP: 0033:0x7f0694f8d169 [ 128.366023][ T6874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.385615][ T6874] RSP: 002b:00007f0695dc9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 128.394000][ T6874] RAX: ffffffffffffffda RBX: 00007f06951a6160 RCX: 00007f0694f8d169 [ 128.401946][ T6874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 128.409889][ T6874] RBP: 00007f0695dc9090 R08: 0000000000000000 R09: 0000000000000000 [ 128.417833][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.425773][ T6874] R13: 0000000000000000 R14: 00007f06951a6160 R15: 00007ffc42cf5478 [ 128.433726][ T6874] [ 128.436907][ T6874] Kernel Offset: disabled [ 128.441205][ T6874] Rebooting in 86400 seconds..