last executing test programs: 4m16.403181562s ago: executing program 4 (id=155): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) tkill(0x0, 0x4000012) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x800, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 4m14.961869533s ago: executing program 4 (id=163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x3) readv(r3, &(0x7f0000001640)=[{&(0x7f0000000400)=""/219, 0xdb}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x210}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_submit(r2, 0x5f, &(0x7f0000000900)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)='P', 0x1}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x122800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) alarm(0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x72f8b755, &(0x7f0000000080)=0x1) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) io_destroy(r2) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r6, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000100)={0xf0f002, 0x6}) 4m12.355326929s ago: executing program 4 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000500)={0x0, 0x51, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x2404c001}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r3}, 0x10) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x1, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x800004) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x442100, 0x1b9) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', &(0x7f0000000300), 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="09de4bbbb3b2a79ea96dbc5c0ef86faeaee0a868260e6c787fbcc066732c023403e3d3dcca96ff95b9509acec5c9b432c75bbea55222d06d", @ANYRES16=r2, @ANYRES8=r8]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6, @ANYRES8=r8, @ANYRES32=r9, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r7, @ANYRESOCT=r0, @ANYRES32=r10, @ANYRES32=r7, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="09000000000000ca9b6000010000000100f24d000000000000000000fb7d1d52e60b1b976538d167b6c17a8c6f53f559d37da451eec980338c93b73295c490eca21077f7d7ef657b7fdfe25641f28d7119a89a6144fb739224718cb213631b397d7c69785a0ebffbaf9b91a6c452809a7fc84ba76d3ff9c7fd7a2e90f7b9aa46fdc7eb1200302a33dcd130a304791054a0b8eb649bd00e58d914a771957ae2077f496626d0240f466a9ebc6cee2523ba11cec798bf0acfa25fcff06274ac870d957cb91b25949cebf17ed88a62033e86602ffcd25c12572d33e90d2a135bb4727414233d7ac0fa2ef31b4c2b9368084308e0e0373db698a4d17a2c26800233fa6c4661927108d87750545c2011ca06184be3fd2065217db885f9ea237b4b0e6bd37c1915cfbb978c", @ANYRES32=r7, @ANYRES32, @ANYRES32=r0, @ANYRES32], 0x70, 0x40841}}], 0x1, 0x8004) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r12, 0x4004743d, 0x110e22fff6) membarrier(0x40, 0x0) write$binfmt_elf64(r10, &(0x7f0000000500)=ANY=[], 0x78) splice(r9, 0x0, r11, 0x0, 0x39000, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4m7.112696051s ago: executing program 4 (id=192): openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fanotify_init(0x0, 0x80000) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000900)=0x400, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffe23dfb9c6ac70800450000300000000000019078ac1e0001ac1414aa04009078030000004500000000000020a94f71730000000000ffffffffac1414bb72b32e06243091eaa9262bfba63bfb28da4f72235caadf5beae8654b6945892eee05e7f88b6b4ca4f6c1dc48d7f9f48a8d8da3113fcb4be563af2600a54906bceff4567c6024b494cb73eee5d83f40bf3c1912cfb9d9f7880a09fefaa98df9cef31ad5b6fba9e780f2bd7e050e7c32a4743c0a298a7be363f342c32a16d178e0239366a5abc134219a626fdf41920f02f59cbceac5055601fc78e7da62a2e3bb9bb1e5645d63888cdad363a0a3c969856bbb54"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/223, 0xdf}}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000240)={0x8, 0x0, [0x38001, 0x7, 0xb, 0x4], 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x1, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{0x0, 0xfffffffc}, {}, {}, {}, {0x6, 0x800}, {}, {}, {0x0, 0x41}], 0x0, 0x4}}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4008) r4 = socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xc8, 0x0, 0xc000000) syz_emit_ethernet(0x5e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800283afffe0000000000000000000000000000aaff02"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f36ee024809988ac57031c20de267fb61845768d979b828107f913ce31b800b949589b3ce5162787b0bbc7a26c871ae46e35ed58494fbac2ecc20c30231196bb38", @ANYRES8=r3, @ANYRESHEX=r1, @ANYRES64=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) writev(r8, &(0x7f0000000440)=[{&(0x7f0000000140)="13146000000370", 0x7}], 0x1) writev(0xffffffffffffffff, 0x0, 0x0) 4m5.283057935s ago: executing program 4 (id=196): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414bb000000000000000000000000ac1e000100ff010000000000ffff6b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000020004fe000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040007"], 0x154}}, 0x0) 4m5.025118228s ago: executing program 4 (id=197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa900, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x18cb, 0x2) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = syz_io_uring_setup(0x5f5, &(0x7f00000000c0)={0x0, 0x0, 0x80}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x32315241, 0x0, @discrete={0xfffffe01, 0x6}}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xec) 3m49.606001746s ago: executing program 32 (id=197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa900, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x18cb, 0x2) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = syz_io_uring_setup(0x5f5, &(0x7f00000000c0)={0x0, 0x0, 0x80}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x32315241, 0x0, @discrete={0xfffffe01, 0x6}}) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xec) 6.813990659s ago: executing program 1 (id=1045): syz_clone(0x2a809000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x80, 0x7f, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x46, 0x18, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xe, 0x0, 0x5}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xff, 0x6, 0x1, 0x8, 0x1}, 0x2e, &(0x7f00000000c0)={0x5, 0xf, 0x2e, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0xe, 0x9, 0x80, 0x1000, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "086d05205ca890e9771c05acee4c7af7"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x80, 0x4, 0x9}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1801}}, {0x4b, &(0x7f0000000240)=@string={0x4b, 0x3, "285fe5fd27d4c67b206ed09dd97ab65b6eda60c2e0ebbd3ef1a59d5c8ce8dde5ac4da2bb2f320dab802b8af21f2c9d54f4a60094b9ce3eae0b53e65b65c4cb633627705a845f7dd424"}}, {0x59, &(0x7f00000002c0)=@string={0x59, 0x3, "64b38a970f454ea93f01c74ba6be863681b390b4161b87645daec7aa8b81e7fb1c1963fb9681f28b746e0e76353f7b869623dd2400aa98792411f0525d2200e1307649c24a234aaf516db053a0fb095f6992465e151f35"}}, {0x69, &(0x7f0000000340)=ANY=[@ANYBLOB="690318f4a9e2191198a8624da443cf424d02472092965099ff125e4d2a1c84ecec37be5edc227d26544535d0bd185e8c1731bfe760e1f80ea88a5efdffeb747b8e2c307dcc1df080c7e2d431e14d8536606924542ea974f1150cc4750249eaa92059809c88d37faf96"]}, {0x6b, &(0x7f00000003c0)=@string={0x6b, 0x3, "b536ec5057f268332eb8bc9ec3ef242ef44fc32c31c215c122467d9eacb800f31b19f96cb204a7ae5766281f82cc9f22a1838fcba2cc9cf6b17abaf8c94ec750d063465449a61b593e7f885d3df53462d8fa416fe54e040898ba1489ae7977faee62ed96fc36082972"}}]}) 4.08165541s ago: executing program 3 (id=1053): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf255500001f080001005c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4044840) 3.980744824s ago: executing program 3 (id=1054): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="0402000015000a0827bd7000fedbdf25fe8000000000000000000000000000aa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="bb6b6e0002000000f000010077703531322d67656e6572696300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040050000b0225e7042283d16037d4b0711a0a2579e8f5a6dc46153396a27f8def112410293ed70e67dd411ef235f97c40f33100df5d52b04cbb073573ba04bcb194fa795542a22076f5dd79e3918cc6da168e4550737261597e5edc289640357e0851a85a1322d99fa0204a07ecd82f9f56919804c0dde436f8617416e728a537a40d1c6e0a817baeb1da102a886eb4db5953d98d1d25420c42eebd37ce423e950b625b4f2058aad58c4000500ac141444000000000000000000000000000004d23300000002000000000000000000000000000000000000000135000003010000f6ffffff050000000b00000000000000000000000000ffff64010100000004d6ff0000000a000000fe8000000000000000000000000000aa003500000400000001000000bbd6000003000000e0000002000000000000000000000000000004d3320000000a000000ffffffff000000000000000000000000053500000003020006000000010000000700000000000014031d26843d9bbec19fe88ad671bcf07e8bae28d49353cbc829246d184da6a80e8c3b4cd55a106adff7093c07164f4137d846f7cd2ba78a356e43b9659140efdea6a87e608c2d961fa3c43a102972c35b043077dbac46fac3ca5dbb"], 0x204}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getresuid(&(0x7f0000000000), 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 3.90981812s ago: executing program 1 (id=1055): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="84040000", @ANYRES16=r1, @ANYBLOB="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"], 0x484}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f0032"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 3.459000237s ago: executing program 3 (id=1056): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="ec00000004000000000080000000000000000000", @ANYRES32=r2, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRESDEC=r1], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000100"/26], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x400) r7 = dup(r5) inotify_rm_watch(r7, r6) 2.903313748s ago: executing program 1 (id=1057): syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x4, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0x8, 0x2a}}]}}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) creat(0x0, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000002100)) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4028af11, &(0x7f00000001c0)) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r3) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000001980)=0x1) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r5, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="18000004000000000100000001000000d7ed8e165b3c3271b00dd737348200a637297a359a301b7940fe159c05031e8984b559546dca6cd333116dc1e96649b88da237cffd8b7374edf9318a4258865c68387bb01a6c8d533d8afcafe0e0cf63b6aba0e4e361f5dcfdbe697139e7ae370001e6796488687f395ac6a22499750a8c0369065c5dcd1d0c84a9ac868ad744c1da748e7670e22888e271a8d0284d78fbd3e991a35ea0b483d8c2d91c9c5897ff736816cd30fd2d707e131fe59a642750b8ac568484c03027e9a6e997", @ANYRES32=r7, @ANYRES32=r7], 0x18}}], 0x1, 0x0) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) dup2(r8, r6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000200000808000a000000000006000200013f000008001700", @ANYRES32, @ANYBLOB='\b\x00\t'], 0x3c}}, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x84, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x2, 0x2, 0xfffffff9, 0xfffffff8, 0x6, 0x3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7, 0xffffffff, 0x4, 0xa, 0x401}}]}}}]}, 0x84}}, 0x44080) getdents(r0, &(0x7f0000000300)=""/109, 0x6d) 2.866601567s ago: executing program 3 (id=1058): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="ec00000004000000000080000000000000000000", @ANYRES32=r2, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRESDEC=r1], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000100"/26], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x400) r7 = dup(r5) inotify_rm_watch(r7, r6) 2.46888115s ago: executing program 0 (id=1059): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_tgsigqueueinfo(0x0, 0x0, 0x12, &(0x7f00000000c0)={0x3, 0x0, 0x8}) syz_open_dev$sg(0x0, 0x8, 0x20500) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r4, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x7, [0x1, 0x10, 0x2, 0x7ff, 0x7ff, 0x7fff, 0xa, 0x0, 0x8, 0x7, 0x8, 0x9, 0x2, 0x3, 0x3, 0x2, 0x3, 0x3559, 0x5, 0x40, 0x7ff, 0x757f, 0x4, 0xaf1, 0x8c, 0x7, 0x0, 0x8, 0xc, 0x100, 0x7, 0x5, 0x7, 0x3, 0x8, 0xd510, 0x9, 0x7, 0x5, 0x2, 0x8000, 0x9, 0x7, 0xc05, 0x4, 0x97d, 0xcf, 0x7fff], 0x1}}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @private}, 0x4, 0x0, 0x4}}, 0x26) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000070000008fbca1bb00000000000000000000000000000000050013"], 0x30}}, 0x0) writev(r7, &(0x7f0000000940)=[{&(0x7f0000000640)='R', 0x1}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ipv6_route\x00') preadv(r10, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/7, 0x7}], 0x1, 0xffffffbf, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000180)=r1) r11 = socket(0x2a, 0x2, 0xfffffffc) getsockopt$sock_buf(r11, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) 2.384637765s ago: executing program 3 (id=1060): socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x24, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452"}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlimit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x1dc, 0x0, 0xa, 0x301, 0x0, 0x0, {0x465aca46a1ecb069, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xfd, 0x6, "90ae9cab411ee5853dc98ea347cc40472fec00c03c6b08d95e44710b2e5668d462b5962408c28495a574c9832351c228f9f5590c72e97d1832fa1f4c68f8d37260874d9ed9306eac24be1ee647d78c6bd7ad7d33688bc917186cf6a0d1da8f2b9212a369c80ea1dab037e7e0e9968a59de1f8a2f1436132037a3148341ec04dcf70561852bcef7bf21170af665ec9baa0e2a3fcef671780de55efd09ae4309657c3b59f286945f5aa4a3a0c61c058b30321d32bd59fa6a14381d6c0736c13645d366df572e7328b8c59b613cc2c0c176e4bc0014b06dd92a2c8578323035aef2e36025de9781258dbbd79e30a8293ebc2ae55bcfc99e3ac8ea"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x70, 0x6, "8f6d71331d1e586d70b5d531138ebe1973565abb2436f5766fc194df65c5fb1cf2b6cd6359c6295ac274d0d7c7dae697b4f1e82f5f6c2263d66439c9d90156865a135d0de5031cb19a465e86270d269177d64e6f81a5d0720fdddd0bb9ee843e8cafae547d8e4a3a3452fb4b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x144, 0x9, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @nat={{0x8}, @void}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x146}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_USERDATA={0xdf, 0xd, 0x1, 0x0, "a908b96fd562c1b8a51b0753c93d3835b8abca34ffb05388e4495b79634d0876df9a45275344334ab5ac489bce632a1cd2ae1b7a81f08af74b47b38a71790fd316100528628e93717d51a8a1a0f3dc11a5429db546131e4a510cf510deb86ab47e75faf42d6d7377432a661784a7612e0bb1ac378108bbc6670b626d2e7147b4353b14d5fca786c8a85f4d1039434527921e543d9e3a52ea0e029af62e9320ae55bbca3b9a316d444d3393328733a0d8790270c2fd81ed5394e2ec25aeeda81faa96a363bd02d114abf3be8cd7c52bfc9076d4cc61285c40dc41e2"}]}, @NFT_MSG_DELRULE={0xc4, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x90, 0x7, 0x1, 0x0, "4853c31bd1c0297050d201f394d0d16a7f9d2bd57772267e4533d9426f696b679dad94248eea0a09d61750017eb0a01d566f0cae13fde8f07532fcacc9179e32d804a9557a846477f4d0afd7c51011404a7d13b60e8dae7f6b4f5286774161edd10b277a313ca3be7caae610ccf97398e8514fe992a96db99927ab630c262a27a36305e56281f0c1ced73e06"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14}}, 0x48c}}, 0x4048010) 1.957140256s ago: executing program 3 (id=1061): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000010c0)=ANY=[@ANYRES32=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x11, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061111800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = syz_io_uring_setup(0x24fa, &(0x7f00000001c0)={0x0, 0x9140, 0x10100}, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64011102}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000000)={r8, 0xd04}, 0x8) write$UHID_CREATE2(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB=' '], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x104eb4, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r9, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r10, 0x4) 1.855547172s ago: executing program 0 (id=1063): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000008a40)='|', 0x1}, {&(0x7f0000000040)="9d", 0x1}], 0x2}, 0x0) 1.745090697s ago: executing program 5 (id=1064): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x800) 1.636431801s ago: executing program 0 (id=1066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680), 0x4924924924925c6, 0x0) 1.517318429s ago: executing program 5 (id=1067): eventfd(0x7ff) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/147, 0x93}], 0x1, 0x0, 0x6) 1.516869814s ago: executing program 0 (id=1068): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='reno\x00', 0x5) shutdown(r0, 0x1) 1.403827311s ago: executing program 0 (id=1070): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000000, 0x0) 1.34352025s ago: executing program 5 (id=1071): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54", 0xf) 1.202409611s ago: executing program 2 (id=1073): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 1.148412208s ago: executing program 5 (id=1074): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x400000) unshare(0x22020600) shutdown(r0, 0x0) 972.26381ms ago: executing program 2 (id=1075): socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe}}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000000c0)=0x66, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61155000000000006113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x3, 0x4}, {0x3, 0x2}}}}, 0x11) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x8, 0x0, &(0x7f00007d0000)) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x149a82, 0xc) write$cgroup_int(r8, &(0x7f0000000040)=0x4, 0x12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0) 971.74326ms ago: executing program 5 (id=1076): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xe, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x1c, 0xc0, 0x3, 0x1, [{@multicast1, 0x5}, {@remote}, {@private=0xa010100, 0xa}]}, @noop, @noop, @lsrr={0x83, 0x3, 0xdc}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1ed842, 0x77) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143041, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 927.431902ms ago: executing program 0 (id=1077): capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r1 = syz_clone(0x2000, &(0x7f0000000100)="e7e3aef30ce68e6a42159b2ba85dfc95609ad6c3cfb7803c8b", 0x19, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)="61a8d913b2e20e8109484b18133e0a22") capget(&(0x7f00000003c0)={0x20080522, r1}, &(0x7f0000000400)={0xd6, 0x7, 0x8, 0x7, 0x0, 0xc0}) r2 = epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x1002, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6673633d8f"]) syz_usbip_server_init(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x1f, 0x0, &(0x7f00000002c0)) syz_usbip_server_init(0x3) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$alg(r6, 0x0, 0x0) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xe, 0x0, 0xf, 0xa, 0x0, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x7ff}) syz_usbip_server_init(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x10000001}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 500.731122ms ago: executing program 2 (id=1078): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0xb000000d}) 458.081323ms ago: executing program 1 (id=1079): r0 = socket(0x840000000002, 0x3, 0x9) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) connect$unix(r0, &(0x7f0000000900)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 8.105761ms ago: executing program 1 (id=1080): r0 = syz_io_uring_setup(0x4df6, &(0x7f0000000140)={0x0, 0xd5a8, 0x80, 0x3, 0x353}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 7.951085ms ago: executing program 2 (id=1081): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000480)=0x47a, 0x4) 7.737544ms ago: executing program 1 (id=1082): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0xc, 0xc0, 0x3, 0x1, [{@remote}]}, @noop, @noop, @lsrr={0x83, 0x3, 0xdc}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.594894ms ago: executing program 2 (id=1083): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000f0ffffffb60500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.147721ms ago: executing program 5 (id=1084): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) 0s ago: executing program 2 (id=1085): close(0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) getpid() syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = fsopen(&(0x7f00000003c0)='fusectl\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_pressure(r3, 0x0, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000040)={'full', 0x20, 0x100003, 0x20, 0x100002}, 0x2f) creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000700)='9', 0x1}]) kernel console output (not intermixed with test programs): op_caches: 2 [ 235.538138][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.575'. [ 235.700558][ T29] audit: type=1400 audit(1740989586.051:615): avc: denied { shutdown } for pid=8239 comm="syz.5.578" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 236.301629][ T29] audit: type=1400 audit(1740989586.651:616): avc: denied { getopt } for pid=8239 comm="syz.5.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 236.301931][ T8240] netlink: 'syz.5.578': attribute type 1 has an invalid length. [ 236.861392][ T7164] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 237.033805][ T29] audit: type=1400 audit(1740989587.381:617): avc: denied { read write } for pid=8254 comm="syz.2.582" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 237.071573][ T29] audit: type=1400 audit(1740989587.381:618): avc: denied { open } for pid=8254 comm="syz.2.582" path="/128/file0/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 237.094557][ T7164] usb 4-1: Using ep0 maxpacket: 16 [ 237.100791][ T8255] netlink: 'syz.2.582': attribute type 9 has an invalid length. [ 237.122715][ T7164] usb 4-1: config 9 has no interfaces? [ 237.137111][ T8255] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.582'. [ 237.154238][ T7164] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 237.220199][ T7164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.231332][ T7164] usb 4-1: Product: syz [ 237.240355][ T7164] usb 4-1: Manufacturer: syz [ 237.244957][ T7164] usb 4-1: SerialNumber: syz [ 237.271888][ T7164] r8152-cfgselector 4-1: Unknown version 0x0000 [ 237.784722][ T8249] netlink: 96 bytes leftover after parsing attributes in process `syz.3.580'. [ 237.869131][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'. [ 237.882920][ T8280] netlink: 96 bytes leftover after parsing attributes in process `syz.5.587'. [ 237.891880][ T29] audit: type=1400 audit(1740989588.231:619): avc: denied { ioctl } for pid=8279 comm="syz.5.587" path="socket:[19559]" dev="sockfs" ino=19559 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 237.956544][ T29] audit: type=1400 audit(1740989588.301:620): avc: denied { write } for pid=8277 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 239.130301][ T29] audit: type=1400 audit(1740989589.071:621): avc: denied { read } for pid=8285 comm="syz.5.589" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 239.197647][ T29] audit: type=1400 audit(1740989589.071:622): avc: denied { open } for pid=8285 comm="syz.5.589" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 239.235856][ T29] audit: type=1400 audit(1740989589.081:623): avc: denied { ioctl } for pid=8285 comm="syz.5.589" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 239.260560][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.421395][ T5869] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 239.790258][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 239.796724][ T5869] usb 2-1: config 0 has an invalid interface number: 243 but max is 0 [ 239.809967][ T7164] r8152-cfgselector 4-1: USB disconnect, device number 17 [ 239.819943][ T5869] usb 2-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 239.861503][ T5869] usb 2-1: config 0 has no interface number 0 [ 239.885497][ T5869] usb 2-1: config 0 interface 243 altsetting 62 has 0 endpoint descriptors, different from the interface descriptor's value: 25 [ 239.908449][ T5869] usb 2-1: config 0 interface 243 has no altsetting 0 [ 239.953011][ T5869] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 239.964130][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.077328][ T29] audit: type=1400 audit(1740989590.421:624): avc: denied { name_bind } for pid=8302 comm="syz.3.598" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 240.128451][ T5869] usb 2-1: Product: syz [ 240.133755][ T5869] usb 2-1: Manufacturer: syz [ 240.138436][ T5869] usb 2-1: SerialNumber: syz [ 240.151465][ T5869] usb 2-1: config 0 descriptor?? [ 240.734261][ T8314] virtio-fs: tag not found [ 240.793370][ T8292] fuse: Bad value for 'fd' [ 241.184393][ T5869] quatech2 2-1:0.243: Quatech 2nd gen USB to Serial Driver converter detected [ 242.027328][ T5869] usb 2-1: qt2_attach - failed to power on unit: -71 [ 242.034344][ T29] audit: type=1400 audit(1740989591.571:625): avc: denied { connect } for pid=8313 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 242.076877][ T5869] quatech2 2-1:0.243: probe with driver quatech2 failed with error -71 [ 242.103711][ T5869] usb 2-1: USB disconnect, device number 17 [ 242.112742][ T29] audit: type=1400 audit(1740989592.371:626): avc: denied { bind } for pid=8313 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 242.343574][ T8321] overlay: Unknown parameter 'subj_user' [ 242.443454][ T8329] netlink: 52 bytes leftover after parsing attributes in process `syz.5.603'. [ 242.629013][ T5872] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 242.800474][ T1202] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 242.900157][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 242.922581][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 242.965845][ T1202] usb 3-1: config 0 has an invalid interface number: 175 but max is 0 [ 242.979889][ T5872] usb 4-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 243.008384][ T1202] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.019994][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.035898][ T1202] usb 3-1: config 0 has no interface number 0 [ 243.048480][ T1202] usb 3-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 243.108947][ T1202] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 243.130931][ T1202] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 243.158288][ T5872] usb 4-1: Product: syz [ 243.165986][ T5872] usb 4-1: Manufacturer: syz [ 243.173333][ T5872] usb 4-1: SerialNumber: syz [ 243.180780][ T1202] usb 3-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 243.248076][ T5872] usb 4-1: config 0 descriptor?? [ 243.259546][ T1202] usb 3-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 243.287583][ T5872] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 243.338417][ T1202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.375415][ T1202] usb 3-1: Product: syz [ 243.393289][ T1202] usb 3-1: Manufacturer: syz [ 243.410391][ T1202] usb 3-1: SerialNumber: syz [ 243.422121][ T1202] usb 3-1: config 0 descriptor?? [ 244.055288][ T1202] symbolserial 3-1:0.175: symbol converter detected [ 244.070641][ T1202] usb 3-1: symbol converter now attached to ttyUSB0 [ 244.089804][ T5869] usb 4-1: USB disconnect, device number 18 [ 244.439012][ T8323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.061769][ T8323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.098753][ T8323] netlink: 144 bytes leftover after parsing attributes in process `syz.2.600'. [ 245.839327][ T29] audit: type=1400 audit(1740989595.751:627): avc: denied { mounton } for pid=8344 comm="syz.1.609" path="/125/file0" dev="tmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 245.933981][ T5824] usb 3-1: USB disconnect, device number 16 [ 245.941889][ T5824] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 245.963442][ T5824] symbolserial 3-1:0.175: device disconnected [ 246.272698][ T8358] virtio-fs: tag not found [ 246.713996][ T8360] trusted_key: encrypted_key: insufficient parameters specified [ 247.801460][ T29] audit: type=1400 audit(1740989598.081:628): avc: denied { setopt } for pid=8362 comm="syz.3.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 247.935299][ T8369] xt_CT: No such helper "snmp" [ 247.986624][ T8373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.614'. [ 248.004295][ T8372] delete_channel: no stack [ 248.638107][ T29] audit: type=1400 audit(1740989598.961:629): avc: denied { create } for pid=8371 comm="syz.0.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 249.050198][ T5869] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 249.241324][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 249.491495][ T5869] usb 3-1: no configurations [ 249.506522][ T5869] usb 3-1: can't read configurations, error -22 [ 249.543521][ T29] audit: type=1400 audit(1740989599.881:630): avc: denied { write } for pid=8403 comm="syz.5.624" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 249.720538][ T5869] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 250.379506][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 250.489660][ T5869] usb 3-1: no configurations [ 250.505330][ T5869] usb 3-1: can't read configurations, error -22 [ 250.519896][ T5869] usb usb3-port1: attempt power cycle [ 250.614086][ T8410] Driver unsupported XDP return value 0 on prog (id 150) dev N/A, expect packet loss! [ 250.900680][ T5869] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 250.932641][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 250.938499][ T5869] usb 3-1: no configurations [ 250.943401][ T5869] usb 3-1: can't read configurations, error -22 [ 251.090463][ T5869] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 251.110781][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 251.117857][ T5869] usb 3-1: no configurations [ 251.122722][ T5869] usb 3-1: can't read configurations, error -22 [ 251.291398][ T5869] usb usb3-port1: unable to enumerate USB device [ 251.611151][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.629'. [ 251.633116][ T29] audit: type=1400 audit(1740989601.981:631): avc: denied { map } for pid=8418 comm="syz.1.630" path="socket:[18967]" dev="sockfs" ino=18967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 251.663201][ T29] audit: type=1400 audit(1740989601.981:632): avc: denied { read accept } for pid=8418 comm="syz.1.630" path="socket:[18967]" dev="sockfs" ino=18967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 251.688601][ T8419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.630'. [ 251.788827][ T29] audit: type=1400 audit(1740989602.131:633): avc: denied { ioctl } for pid=8421 comm="syz.1.632" path="mnt:[4026533122]" dev="nsfs" ino=4026533122 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 253.233142][ T29] audit: type=1400 audit(1740989603.581:634): avc: denied { module_load } for pid=8438 comm="syz.1.637" path="/132/bus" dev="tmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 253.258515][ T8440] Invalid ELF header magic: != ELF [ 253.473590][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 253.725321][ T29] audit: type=1400 audit(1740989603.981:635): avc: denied { getopt } for pid=8441 comm="syz.0.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 254.205349][ T8452] xt_hashlimit: size too large, truncated to 1048576 [ 255.402428][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.408782][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.887767][ T1202] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 257.111800][ T8469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.270751][ T1202] usb 3-1: Using ep0 maxpacket: 32 [ 257.279750][ T1202] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 257.390704][ T8484] netlink: 'syz.5.648': attribute type 9 has an invalid length. [ 257.490320][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 257.753726][ T1202] usb 3-1: config 0 has no interface number 0 [ 257.762475][ T1202] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.764073][ T29] audit: type=1400 audit(1740989607.711:636): avc: denied { map } for pid=8476 comm="syz.5.648" path="socket:[19944]" dev="sockfs" ino=19944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 257.773542][ T1202] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.807163][ T1202] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 257.816320][ T1202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.865579][ T1202] usb 3-1: config 0 descriptor?? [ 258.669127][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 258.678203][ T8497] netlink: 'syz.1.655': attribute type 3 has an invalid length. [ 258.693913][ T29] audit: type=1400 audit(1740989609.041:637): avc: denied { getopt } for pid=8496 comm="syz.1.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 259.319871][ T29] audit: type=1400 audit(1740989609.071:638): avc: denied { listen } for pid=8466 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 259.466478][ T29] audit: type=1400 audit(1740989609.071:639): avc: denied { accept } for pid=8466 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 259.494977][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.656'. [ 260.045685][ T1202] uclogic 0003:28BD:0094.0008: failed retrieving string descriptor #100: -71 [ 260.077616][ T1202] uclogic 0003:28BD:0094.0008: failed retrieving pen parameters: -71 [ 260.110257][ T1202] uclogic 0003:28BD:0094.0008: pen probing failed: -71 [ 260.112113][ T29] audit: type=1400 audit(1740989609.081:640): avc: denied { name_connect } for pid=8496 comm="syz.1.655" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 260.142621][ T29] audit: type=1400 audit(1740989609.191:641): avc: denied { accept } for pid=8496 comm="syz.1.655" lport=33949 faddr=::ffff:172.20.255.187 fport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 260.151587][ T1202] uclogic 0003:28BD:0094.0008: failed probing parameters: -71 [ 260.199674][ T29] audit: type=1400 audit(1740989609.191:642): avc: denied { write } for pid=8496 comm="syz.1.655" lport=33949 faddr=::ffff:172.20.255.187 fport=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 260.251258][ T1202] uclogic 0003:28BD:0094.0008: probe with driver uclogic failed with error -71 [ 260.327739][ T1202] usb 3-1: USB disconnect, device number 21 [ 260.482294][ T29] audit: type=1400 audit(1740989609.191:643): avc: denied { setopt } for pid=8496 comm="syz.1.655" lport=33949 faddr=::ffff:172.20.255.187 fport=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 261.173667][ T8527] virtio-fs: tag not found [ 264.022174][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.670'. [ 264.089411][ T8554] : entered promiscuous mode [ 264.110234][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.670'. [ 264.136991][ T29] audit: type=1400 audit(1740989614.481:644): avc: denied { create } for pid=8549 comm="syz.3.670" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 264.169810][ T8558] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8558 comm=syz.3.670 [ 264.214048][ T29] audit: type=1400 audit(1740989614.511:645): avc: denied { setattr } for pid=8549 comm="syz.3.670" name="file0" dev="tmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 264.369990][ T29] audit: type=1400 audit(1740989614.711:646): avc: denied { relabelfrom } for pid=8565 comm="syz.5.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 264.526905][ T1202] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 264.641496][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.673'. [ 265.128419][ T29] audit: type=1400 audit(1740989614.741:647): avc: denied { relabelto } for pid=8565 comm="syz.5.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 265.147889][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.210804][ T8566] netlink: 'syz.5.675': attribute type 1 has an invalid length. [ 265.218506][ T8566] netlink: 'syz.5.675': attribute type 4 has an invalid length. [ 265.230581][ T8566] netlink: 15334 bytes leftover after parsing attributes in process `syz.5.675'. [ 265.311473][ T1202] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.352687][ T1202] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.384559][ T1202] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 265.396502][ T1202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.479228][ T1202] usb 4-1: config 0 descriptor?? [ 266.923000][ T1202] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 266.999383][ T1202] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 267.264177][ T1202] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE [ 267.935400][ T1202] cp2112 0003:10C4:EA90.0009: error setting SMBus config [ 268.008319][ T1202] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -71 [ 268.043818][ T1202] usb 4-1: USB disconnect, device number 19 [ 268.184392][ T8602] netlink: 68 bytes leftover after parsing attributes in process `syz.5.685'. [ 268.277899][ T29] audit: type=1400 audit(1740989618.621:648): avc: denied { append } for pid=8605 comm="syz.5.687" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 268.300539][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.794640][ T29] audit: type=1400 audit(1740989619.141:649): avc: denied { unlink } for pid=5834 comm="syz-executor" name="file0" dev="tmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 268.817135][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.200547][ T1202] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 269.393051][ T1202] usb 4-1: Using ep0 maxpacket: 8 [ 269.408440][ T1202] usb 4-1: config 2 interface 0 has no altsetting 0 [ 269.425735][ T1202] usb 4-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 269.434934][ T1202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.447228][ T1202] usb 4-1: Product: syz [ 269.452812][ T1202] usb 4-1: Manufacturer: syz [ 269.458002][ T1202] usb 4-1: SerialNumber: syz [ 270.180806][ T8614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.189315][ T8614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.390417][ T5951] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 271.267009][ T1202] usb 4-1: USB disconnect, device number 20 [ 271.338903][ T29] audit: type=1400 audit(1740989621.681:650): avc: denied { connect } for pid=8639 comm="syz.0.697" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 271.410167][ T5951] usb 6-1: Using ep0 maxpacket: 32 [ 271.708638][ T5951] usb 6-1: config 1 has an invalid interface descriptor of length 5, skipping [ 271.754039][ T5951] usb 6-1: config 1 has an invalid descriptor of length 194, skipping remainder of the config [ 271.790139][ T5951] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.807281][ T5951] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 271.816811][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.830133][ T5951] usb 6-1: Product: syz [ 271.834316][ T5951] usb 6-1: Manufacturer: ᐇ [ 271.853566][ T5951] usb 6-1: SerialNumber: syz [ 272.040282][ T5872] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 272.102729][ T5951] usb 6-1: 0:2 : does not exist [ 272.171548][ T5951] usb 6-1: USB disconnect, device number 13 [ 272.230175][ T5872] usb 1-1: device descriptor read/64, error -71 [ 272.391829][ T7756] udevd[7756]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.500229][ T5872] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 272.650217][ T5872] usb 1-1: device descriptor read/64, error -71 [ 272.770613][ T5872] usb usb1-port1: attempt power cycle [ 272.809595][ T29] audit: type=1400 audit(1740989623.151:651): avc: denied { read } for pid=8657 comm="syz.5.702" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 272.866363][ T8658] fuse: Unknown parameter '0x0000000000000005' [ 272.992594][ T29] audit: type=1400 audit(1740989623.191:652): avc: denied { open } for pid=8657 comm="syz.5.702" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 273.035571][ T29] audit: type=1400 audit(1740989623.201:653): avc: denied { ioctl } for pid=8657 comm="syz.5.702" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 273.880191][ T5872] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 273.912356][ T5872] usb 1-1: device descriptor read/8, error -71 [ 274.022455][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.704'. [ 274.023893][ T29] audit: type=1400 audit(1740989624.371:654): avc: denied { ioctl } for pid=8668 comm="syz.5.704" path="socket:[20670]" dev="sockfs" ino=20670 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 274.248414][ T5872] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 274.277604][ T5872] usb 1-1: device descriptor read/8, error -71 [ 274.381185][ T8679] virtio-fs: tag not found [ 274.881620][ T5872] usb usb1-port1: unable to enumerate USB device [ 276.616803][ T8705] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 276.629744][ T29] audit: type=1400 audit(1740989626.961:655): avc: denied { setopt } for pid=8704 comm="syz.1.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 276.678147][ T8707] netfs: Couldn't get user pages (rc=-14) [ 276.706015][ T8707] netfs: Zero-sized read [R=1] [ 276.729609][ T29] audit: type=1400 audit(1740989627.001:656): avc: denied { mount } for pid=8706 comm="syz.3.716" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 276.754318][ T29] audit: type=1400 audit(1740989627.011:657): avc: denied { read write } for pid=8706 comm="syz.3.716" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 276.782233][ T29] audit: type=1400 audit(1740989627.011:658): avc: denied { open } for pid=8706 comm="syz.3.716" path="/140/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 276.804605][ T29] audit: type=1400 audit(1740989627.131:659): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 276.831659][ T8711] FAULT_INJECTION: forcing a failure. [ 276.831659][ T8711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.845069][ T8711] CPU: 0 UID: 0 PID: 8711 Comm: syz.2.717 Not tainted 6.14.0-rc5-syzkaller #0 [ 276.845088][ T8711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.845099][ T8711] Call Trace: [ 276.845104][ T8711] [ 276.845111][ T8711] dump_stack_lvl+0x16c/0x1f0 [ 276.845138][ T8711] should_fail_ex+0x50a/0x650 [ 276.845165][ T8711] _copy_from_user+0x2e/0xd0 [ 276.845183][ T8711] do_sock_getsockopt+0x5f6/0x800 [ 276.845198][ T8711] ? trace_lock_acquire+0x110/0x1f0 [ 276.845218][ T8711] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 276.845234][ T8711] ? lock_acquire+0x2f/0xb0 [ 276.845256][ T8711] ? __fget_files+0x40/0x3a0 [ 276.845276][ T8711] ? __fget_files+0x206/0x3a0 [ 276.845297][ T8711] __sys_getsockopt+0x12f/0x260 [ 276.845322][ T8711] __x64_sys_getsockopt+0xbd/0x160 [ 276.845343][ T8711] ? do_syscall_64+0x91/0x250 [ 276.845363][ T8711] ? lockdep_hardirqs_on+0x7c/0x110 [ 276.845383][ T8711] do_syscall_64+0xcd/0x250 [ 276.845405][ T8711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.845428][ T8711] RIP: 0033:0x7f899e18d169 [ 276.845449][ T8711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.845463][ T8711] RSP: 002b:00007f899f085038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 276.845478][ T8711] RAX: ffffffffffffffda RBX: 00007f899e3a5fa0 RCX: 00007f899e18d169 [ 276.845488][ T8711] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003 [ 276.845498][ T8711] RBP: 00007f899f085090 R08: 0000400000000040 R09: 0000000000000000 [ 276.845507][ T8711] R10: 0000400000002280 R11: 0000000000000246 R12: 0000000000000001 [ 276.845516][ T8711] R13: 0000000000000000 R14: 00007f899e3a5fa0 R15: 00007fff43813508 [ 276.845537][ T8711] [ 277.265233][ T8699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.707203][ T29] audit: type=1400 audit(1740989628.051:660): avc: denied { listen } for pid=8723 comm="syz.1.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 278.110827][ T1202] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 278.274983][ T1202] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 278.551328][ T1202] usb 4-1: config 0 has no interface number 0 [ 278.626892][ T1202] usb 4-1: config 0 interface 9 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.647083][ T1202] usb 4-1: config 0 interface 9 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.659944][ T1202] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 278.669176][ T1202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.683032][ T1202] usb 4-1: config 0 descriptor?? [ 278.757153][ T29] audit: type=1400 audit(1740989629.081:661): avc: denied { getopt } for pid=8742 comm="syz.2.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 278.830219][ T8743] tipc: Enabling of bearer rejected, failed to enable media [ 278.857605][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'. [ 278.871430][ T29] audit: type=1400 audit(1740989629.211:662): avc: denied { read } for pid=8751 comm="syz.5.731" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 278.902736][ T29] audit: type=1400 audit(1740989629.211:663): avc: denied { open } for pid=8751 comm="syz.5.731" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 278.934749][ T29] audit: type=1400 audit(1740989629.251:664): avc: denied { ioctl } for pid=8751 comm="syz.5.731" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 279.111756][ T8748] trusted_key: encrypted_key: insufficient parameters specified [ 279.121981][ T8759] sp0: Synchronizing with TNC [ 279.257917][ T1202] uclogic 0003:256C:006D.000A: interface is invalid, ignoring [ 279.281577][ T8742] [U] [ 280.743369][ T1202] usb 4-1: USB disconnect, device number 21 [ 280.896268][ T8774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.432555][ T8791] tipc: Started in network mode [ 281.437566][ T8791] tipc: Node identity 7f000001, cluster identity 4711 [ 281.447751][ T8791] tipc: Enabled bearer , priority 10 [ 282.210139][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 282.210153][ T29] audit: type=1400 audit(1740989632.551:668): avc: denied { ioctl } for pid=8794 comm="syz.3.742" path="socket:[21722]" dev="sockfs" ino=21722 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 282.492501][ T8798] fuse: Bad value for 'fd' [ 282.937554][ T5951] tipc: Node number set to 2130706433 [ 283.990688][ T29] audit: type=1400 audit(1740989634.271:669): avc: denied { watch } for pid=8809 comm="syz.5.746" path="/101" dev="tmpfs" ino=535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 284.491529][ T8824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8824 comm=syz.0.750 [ 284.640162][ T29] audit: type=1400 audit(1740989634.971:670): avc: denied { read } for pid=8817 comm="syz.2.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 284.790164][ T5872] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 285.672218][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 285.699689][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.776284][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.832939][ T5872] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.884744][ T5872] usb 6-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 285.915095][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.948194][ T5872] usb 6-1: config 0 descriptor?? [ 286.165391][ T8856] netlink: 'syz.3.760': attribute type 9 has an invalid length. [ 286.304230][ T8856] bond_slave_1: entered promiscuous mode [ 286.313244][ T8856] macvlan0: entered promiscuous mode [ 286.318698][ T8856] bond0: entered promiscuous mode [ 286.324453][ T8856] bond_slave_0: entered promiscuous mode [ 286.331253][ T8856] macvlan0: entered allmulticast mode [ 286.336887][ T8856] bond0: entered allmulticast mode [ 286.342414][ T8856] bond_slave_0: entered allmulticast mode [ 286.348340][ T8856] bond_slave_1: entered allmulticast mode [ 286.356951][ T8856] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 287.206385][ T8866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8866 comm=syz.3.763 [ 287.374477][ T29] audit: type=1400 audit(1740989637.721:671): avc: denied { mounton } for pid=8867 comm="syz.2.764" path="/159/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 287.586816][ T29] audit: type=1400 audit(1740989637.811:672): avc: denied { mount } for pid=8869 comm="syz.3.765" name="/" dev="autofs" ino=21075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 287.629554][ T29] audit: type=1400 audit(1740989637.811:673): avc: denied { read } for pid=8869 comm="syz.3.765" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 287.657643][ T5872] usbhid 6-1:0.0: can't add hid device: -71 [ 287.872649][ T5872] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 287.896625][ T29] audit: type=1400 audit(1740989637.811:674): avc: denied { open } for pid=8869 comm="syz.3.765" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 287.929960][ T5872] usb 6-1: USB disconnect, device number 14 [ 287.949683][ T29] audit: type=1400 audit(1740989637.821:675): avc: denied { ioctl } for pid=8869 comm="syz.3.765" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 287.993529][ T29] audit: type=1400 audit(1740989638.181:676): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 288.180538][ T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 288.386791][ T8881] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 288.491824][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 288.511364][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 288.559308][ T5872] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 288.567199][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 288.585906][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.602575][ T8883] tipc: Trying to set illegal importance in message [ 288.634703][ T8875] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 288.644022][ T8] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 288.675559][ T29] audit: type=1400 audit(1740989639.011:677): avc: denied { setopt } for pid=8882 comm="syz.2.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 288.720348][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 288.735656][ T29] audit: type=1400 audit(1740989639.011:678): avc: denied { read } for pid=8882 comm="syz.2.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 288.758946][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.806613][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.853189][ T5872] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 288.867455][ T5872] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 288.881740][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.911354][ T5872] usb 6-1: config 0 descriptor?? [ 288.924198][ T1202] usb 4-1: USB disconnect, device number 22 [ 289.135384][ T29] audit: type=1400 audit(1740989639.481:679): avc: denied { setopt } for pid=8874 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 289.362533][ T5872] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 289.375098][ T5872] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 289.385463][ T5872] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 289.394557][ T5872] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 289.409254][ T5872] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 289.431413][ T5872] input: HID 0955:7214 Haptics as /devices/virtual/input/input14 [ 289.452129][ T29] audit: type=1400 audit(1740989639.761:680): avc: denied { write } for pid=8888 comm="syz.1.771" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 289.641585][ T5872] shield 0003:0955:7214.000B: Registered Thunderstrike controller [ 289.653923][ T5872] shield 0003:0955:7214.000B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 290.136654][ T7164] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 290.152380][ T5951] usb 6-1: USB disconnect, device number 15 [ 290.179733][ T7164] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 290.210444][ T7164] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 290.438335][ T8910] FAULT_INJECTION: forcing a failure. [ 290.438335][ T8910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.451748][ T8910] CPU: 1 UID: 0 PID: 8910 Comm: syz.1.777 Not tainted 6.14.0-rc5-syzkaller #0 [ 290.451768][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 290.451777][ T8910] Call Trace: [ 290.451782][ T8910] [ 290.451788][ T8910] dump_stack_lvl+0x16c/0x1f0 [ 290.451811][ T8910] should_fail_ex+0x50a/0x650 [ 290.451830][ T8910] _copy_to_user+0x32/0xd0 [ 290.451843][ T8910] simple_read_from_buffer+0xd0/0x160 [ 290.451860][ T8910] proc_fail_nth_read+0x198/0x270 [ 290.451875][ T8910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.451891][ T8910] ? rw_verify_area+0xcf/0x680 [ 290.451906][ T8910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.451921][ T8910] vfs_read+0x1df/0xbf0 [ 290.451938][ T8910] ? __fget_files+0x1fc/0x3a0 [ 290.451948][ T8910] ? __pfx___mutex_lock+0x10/0x10 [ 290.451962][ T8910] ? __pfx_vfs_read+0x10/0x10 [ 290.451982][ T8910] ? __fget_files+0x206/0x3a0 [ 290.451996][ T8910] ksys_read+0x12b/0x250 [ 290.452012][ T8910] ? __pfx_ksys_read+0x10/0x10 [ 290.452033][ T8910] do_syscall_64+0xcd/0x250 [ 290.452047][ T8910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.452063][ T8910] RIP: 0033:0x7f07b5f8bb7c [ 290.452073][ T8910] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 290.452083][ T8910] RSP: 002b:00007f07b6de0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.452094][ T8910] RAX: ffffffffffffffda RBX: 00007f07b61a6080 RCX: 00007f07b5f8bb7c [ 290.452100][ T8910] RDX: 000000000000000f RSI: 00007f07b6de00a0 RDI: 0000000000000003 [ 290.452107][ T8910] RBP: 00007f07b6de0090 R08: 0000000000000000 R09: 0000000000000000 [ 290.452112][ T8910] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 290.452119][ T8910] R13: 0000000000000000 R14: 00007f07b61a6080 R15: 00007ffd5a907538 [ 290.452131][ T8910] [ 290.990633][ T7164] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 291.300920][ T7164] usb 3-1: device descriptor read/64, error -71 [ 291.671874][ T7164] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 291.810356][ T7164] usb 3-1: device descriptor read/64, error -71 [ 292.263567][ T7164] usb usb3-port1: attempt power cycle [ 292.421480][ T8931] netlink: set zone limit has 8 unknown bytes [ 292.914329][ T8934] netlink: 'syz.5.785': attribute type 5 has an invalid length. [ 293.060353][ T7164] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 293.521731][ T8] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 293.700266][ T7164] usb 3-1: device not accepting address 24, error -71 [ 293.790577][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 294.042304][ T8] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 294.052507][ T8] usb 1-1: config 0 has no interface number 0 [ 294.058566][ T8] usb 1-1: config 0 interface 12 has no altsetting 0 [ 294.091992][ T8948] x_tables: duplicate underflow at hook 2 [ 294.148403][ T8] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 294.204580][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.229519][ T8] usb 1-1: Product: syz [ 294.240537][ T8] usb 1-1: Manufacturer: syz [ 294.265613][ T8] usb 1-1: SerialNumber: syz [ 294.286187][ T8] usb 1-1: config 0 descriptor?? [ 294.719402][ T8] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 294.740002][ T8] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 295.208701][ T8] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 295.217161][ T8] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 295.328204][ T8] usb 1-1: USB disconnect, device number 31 [ 295.667886][ T8968] kvm: kvm [8962]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x0 [ 295.898868][ T8967] netlink: 68 bytes leftover after parsing attributes in process `syz.3.796'. [ 296.119874][ T8978] FAULT_INJECTION: forcing a failure. [ 296.119874][ T8978] name failslab, interval 1, probability 0, space 0, times 0 [ 296.132688][ T8978] CPU: 1 UID: 0 PID: 8978 Comm: syz.5.798 Not tainted 6.14.0-rc5-syzkaller #0 [ 296.132709][ T8978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 296.132720][ T8978] Call Trace: [ 296.132725][ T8978] [ 296.132731][ T8978] dump_stack_lvl+0x16c/0x1f0 [ 296.132757][ T8978] should_fail_ex+0x50a/0x650 [ 296.132783][ T8978] ? fs_reclaim_acquire+0xae/0x150 [ 296.132809][ T8978] ? nexthop_alloc+0x3c/0x1d0 [ 296.132834][ T8978] should_failslab+0xc2/0x120 [ 296.132854][ T8978] __kmalloc_cache_noprof+0x68/0x410 [ 296.132881][ T8978] ? finish_task_switch.isra.0+0x220/0xcc0 [ 296.132912][ T8978] nexthop_alloc+0x3c/0x1d0 [ 296.132937][ T8978] rtm_new_nexthop+0x10d0/0x5d70 [ 296.132963][ T8978] ? mark_held_locks+0x9f/0xe0 [ 296.132988][ T8978] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 296.133007][ T8978] ? __pfx___schedule+0x10/0x10 [ 296.133039][ T8978] ? preempt_schedule_thunk+0x1a/0x30 [ 296.133063][ T8978] ? preempt_schedule_common+0x44/0xc0 [ 296.133084][ T8978] ? preempt_schedule_thunk+0x1a/0x30 [ 296.133111][ T8978] ? __mutex_lock+0x347/0xb10 [ 296.133133][ T8978] ? rtnetlink_rcv_msg+0x372/0xea0 [ 296.133155][ T8978] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 296.133173][ T8978] ? __pfx___mutex_lock+0x10/0x10 [ 296.133193][ T8978] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 296.133213][ T8978] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 296.133244][ T8978] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 296.133262][ T8978] rtnetlink_rcv_msg+0x3c7/0xea0 [ 296.133287][ T8978] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.133322][ T8978] netlink_rcv_skb+0x16b/0x440 [ 296.133344][ T8978] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.133369][ T8978] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.133410][ T8978] ? rcu_is_watching+0x12/0xc0 [ 296.133434][ T8978] netlink_unicast+0x53c/0x7f0 [ 296.133459][ T8978] ? __pfx_netlink_unicast+0x10/0x10 [ 296.133489][ T8978] netlink_sendmsg+0x8b8/0xd70 [ 296.133515][ T8978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.133546][ T8978] ____sys_sendmsg+0xaaf/0xc90 [ 296.133564][ T8978] ? copy_msghdr_from_user+0x10b/0x160 [ 296.133587][ T8978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.133617][ T8978] ___sys_sendmsg+0x135/0x1e0 [ 296.133643][ T8978] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.133677][ T8978] ? __pfx_lock_release+0x10/0x10 [ 296.133699][ T8978] ? trace_lock_acquire+0x14e/0x1f0 [ 296.133727][ T8978] ? __fget_files+0x206/0x3a0 [ 296.133751][ T8978] __sys_sendmsg+0x16e/0x220 [ 296.133774][ T8978] ? __pfx___sys_sendmsg+0x10/0x10 [ 296.133814][ T8978] do_syscall_64+0xcd/0x250 [ 296.133838][ T8978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.133861][ T8978] RIP: 0033:0x7ff65eb8d169 [ 296.133874][ T8978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.133890][ T8978] RSP: 002b:00007ff65fa67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.133907][ T8978] RAX: ffffffffffffffda RBX: 00007ff65eda6160 RCX: 00007ff65eb8d169 [ 296.133918][ T8978] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000007 [ 296.133928][ T8978] RBP: 00007ff65fa67090 R08: 0000000000000000 R09: 0000000000000000 [ 296.133938][ T8978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.133948][ T8978] R13: 0000000000000000 R14: 00007ff65eda6160 R15: 00007ffdd11adcd8 [ 296.133972][ T8978] [ 296.504321][ T8980] capability: warning: `syz.0.799' uses deprecated v2 capabilities in a way that may be insecure [ 296.553423][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 296.581592][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 296.581606][ T29] audit: type=1400 audit(1740989646.931:683): avc: denied { cmd } for pid=8981 comm="syz.3.800" path="socket:[22564]" dev="sockfs" ino=22564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 296.887669][ T8990] virtio-fs: tag not found [ 297.185652][ T8988] fuse: Unknown parameter 'use0xffffffffffffffff' [ 297.218289][ T8989] fuse: Unknown parameter 'use0xffffffffffffffff' [ 297.847134][ T9001] netlink: 36 bytes leftover after parsing attributes in process `syz.1.806'. [ 298.449751][ T29] audit: type=1400 audit(1740989648.791:684): avc: denied { read write } for pid=9009 comm="syz.3.809" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 298.496215][ T29] audit: type=1400 audit(1740989648.791:685): avc: denied { open } for pid=9009 comm="syz.3.809" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 298.520469][ T29] audit: type=1400 audit(1740989648.861:686): avc: denied { ioctl } for pid=9009 comm="syz.3.809" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 298.694547][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.871835][ T29] audit: type=1400 audit(1740989649.141:687): avc: denied { accept } for pid=9015 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 299.090786][ T7164] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 299.164350][ T29] audit: type=1400 audit(1740989649.501:688): avc: denied { connect } for pid=9018 comm="syz.2.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 299.187513][ T5872] IPVS: starting estimator thread 0... [ 299.260150][ T7164] usb 6-1: Using ep0 maxpacket: 32 [ 299.526418][ T7164] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 299.541256][ T7164] usb 6-1: config 0 has no interface number 0 [ 299.554880][ T7164] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 299.571009][ T7164] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.579303][ T7164] usb 6-1: Product: syz [ 299.583704][ T9023] IPVS: using max 56 ests per chain, 134400 per kthread [ 299.590887][ T7164] usb 6-1: Manufacturer: syz [ 299.638024][ T9028] FAULT_INJECTION: forcing a failure. [ 299.638024][ T9028] name failslab, interval 1, probability 0, space 0, times 0 [ 299.651126][ T9028] CPU: 0 UID: 0 PID: 9028 Comm: syz.0.813 Not tainted 6.14.0-rc5-syzkaller #0 [ 299.651140][ T9028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 299.651147][ T9028] Call Trace: [ 299.651150][ T9028] [ 299.651154][ T9028] dump_stack_lvl+0x16c/0x1f0 [ 299.651172][ T9028] should_fail_ex+0x50a/0x650 [ 299.651191][ T9028] ? __hw_addr_add_ex+0x3c8/0x7c0 [ 299.651208][ T9028] should_failslab+0xc2/0x120 [ 299.651220][ T9028] __kmalloc_cache_noprof+0x68/0x410 [ 299.651237][ T9028] ? stack_depot_init+0x39/0x120 [ 299.651255][ T9028] __hw_addr_add_ex+0x3c8/0x7c0 [ 299.651274][ T9028] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 299.651290][ T9028] ? __mutex_unlock_slowpath+0x121/0x6a0 [ 299.651308][ T9028] dev_addr_init+0x162/0x250 [ 299.651319][ T9028] ? __pfx_dev_addr_init+0x10/0x10 [ 299.651339][ T9028] ? __pfx_caifdev_setup+0x10/0x10 [ 299.651357][ T9028] ? __pfx_caifdev_setup+0x10/0x10 [ 299.651372][ T9028] alloc_netdev_mqs+0x3ef/0x15d0 [ 299.651391][ T9028] ldisc_open+0x153/0x980 [ 299.651407][ T9028] ? tty_set_ldisc+0x2a5/0x720 [ 299.651419][ T9028] ? __pfx_ldisc_open+0x10/0x10 [ 299.651438][ T9028] ? down_write+0x14e/0x200 [ 299.651453][ T9028] ? __pfx_ldisc_open+0x10/0x10 [ 299.651470][ T9028] tty_ldisc_open+0x9c/0x120 [ 299.651481][ T9028] tty_set_ldisc+0x318/0x720 [ 299.651494][ T9028] tty_ioctl+0xbd0/0x15d0 [ 299.651507][ T9028] ? __pfx_tty_ioctl+0x10/0x10 [ 299.651520][ T9028] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 299.651540][ T9028] ? __pfx_lock_release+0x10/0x10 [ 299.651561][ T9028] ? selinux_file_ioctl+0x180/0x270 [ 299.651577][ T9028] ? selinux_file_ioctl+0xb4/0x270 [ 299.651594][ T9028] ? __pfx_tty_ioctl+0x10/0x10 [ 299.651607][ T9028] __x64_sys_ioctl+0x190/0x200 [ 299.651624][ T9028] do_syscall_64+0xcd/0x250 [ 299.651638][ T9028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.651653][ T9028] RIP: 0033:0x7f1edcd8d169 [ 299.651663][ T9028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.651673][ T9028] RSP: 002b:00007f1edabf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.651684][ T9028] RAX: ffffffffffffffda RBX: 00007f1edcfa5fa0 RCX: 00007f1edcd8d169 [ 299.651690][ T9028] RDX: 0000400000000240 RSI: 0000000000005423 RDI: 0000000000000006 [ 299.651696][ T9028] RBP: 00007f1edabf6090 R08: 0000000000000000 R09: 0000000000000000 [ 299.651702][ T9028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.651708][ T9028] R13: 0000000000000000 R14: 00007f1edcfa5fa0 R15: 00007ffe8728cbe8 [ 299.651722][ T9028] [ 299.904310][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.061363][ T7164] usb 6-1: SerialNumber: syz [ 300.081827][ T7164] usb 6-1: config 0 descriptor?? [ 300.090589][ T7164] smsc95xx v2.0.0 [ 300.163015][ T9033] virtio-fs: tag not found [ 300.779524][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 301.297501][ T29] audit: type=1400 audit(1740989651.641:689): avc: denied { bind } for pid=9046 comm="syz.3.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 301.339563][ T29] audit: type=1400 audit(1740989651.671:690): avc: denied { bind } for pid=9046 comm="syz.3.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 301.794893][ T9071] netlink: 60 bytes leftover after parsing attributes in process `syz.5.810'. [ 301.805681][ T9070] netlink: 60 bytes leftover after parsing attributes in process `syz.5.810'. [ 302.082309][ T29] audit: type=1400 audit(1740989652.191:691): avc: denied { write } for pid=9013 comm="syz.5.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 302.510324][ T864] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 302.550300][ T8] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 302.646403][ T9051] syz.3.819 (9051): drop_caches: 2 [ 302.692664][ T864] usb 3-1: Using ep0 maxpacket: 8 [ 302.705427][ T864] usb 3-1: unable to get BOS descriptor or descriptor too short [ 302.717267][ T864] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 302.725263][ T9096] sp0: Synchronizing with TNC [ 302.731681][ T5872] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 302.742176][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.745592][ T864] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 302.759365][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 302.769919][ T864] usb 3-1: config 1 interface 0 has no altsetting 0 [ 302.773955][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.781508][ T864] usb 3-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 302.801208][ T29] audit: type=1400 audit(1740989653.141:692): avc: denied { create } for pid=9095 comm="syz.3.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 302.829071][ T864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.838310][ T864] usb 3-1: Product: syz [ 302.842704][ T864] usb 3-1: Manufacturer: syz [ 302.847442][ T864] usb 3-1: SerialNumber: syz [ 302.847953][ T9096] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 9096 comm: syz.3.827) [ 302.864756][ T29] audit: type=1800 audit(1740989653.221:693): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.827" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=22729 res=0 errno=0 [ 302.875005][ T8] usb 1-1: config 0 descriptor?? [ 302.892303][ T9076] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 302.921288][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 302.926746][ T8] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 302.930182][ T5872] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 302.934254][ T8] usb 1-1: No valid video chain found. [ 302.953988][ T5872] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.967671][ T5872] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 302.978773][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.998749][ T5872] usbtmc 2-1:16.0: bulk endpoints not found [ 303.939244][ T7164] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 304.010177][ T7164] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 304.019911][ T7164] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 304.044441][ T7164] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 304.059572][ T7164] usb 6-1: USB disconnect, device number 16 [ 305.184799][ T7164] usb 1-1: USB disconnect, device number 32 [ 305.323844][ T29] audit: type=1400 audit(1740989655.671:694): avc: denied { create } for pid=9118 comm="syz.5.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 305.401441][ T29] audit: type=1400 audit(1740989655.751:695): avc: denied { setopt } for pid=9118 comm="syz.5.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 305.427462][ T29] audit: type=1400 audit(1740989655.751:696): avc: denied { ioctl } for pid=9118 comm="syz.5.834" path="socket:[22239]" dev="sockfs" ino=22239 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 305.454400][ T29] audit: type=1400 audit(1740989655.751:697): avc: denied { read } for pid=9118 comm="syz.5.834" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 305.489923][ T29] audit: type=1400 audit(1740989655.751:698): avc: denied { open } for pid=9118 comm="syz.5.834" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 305.816848][ T864] appletouch 3-1:1.0: Failed to read mode from device. [ 305.841310][ T864] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 306.463030][ T864] usb 3-1: USB disconnect, device number 26 [ 306.507116][ T7164] usb 2-1: USB disconnect, device number 18 [ 306.786737][ T9135] trusted_key: encrypted_key: insufficient parameters specified [ 306.868366][ T7164] libceph: connect (1)[c::]:6789 error -101 [ 306.886205][ T7164] libceph: mon0 (1)[c::]:6789 connect error [ 306.902027][ T7164] libceph: connect (1)[c::]:6789 error -101 [ 306.908186][ T7164] libceph: mon0 (1)[c::]:6789 connect error [ 306.955449][ T9138] ceph: No mds server is up or the cluster is laggy [ 307.476200][ T29] audit: type=1400 audit(1740989657.791:699): avc: denied { execute } for pid=9150 comm="syz.2.840" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=22271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 309.955612][ T29] audit: type=1400 audit(1740989660.301:700): avc: denied { bind } for pid=9170 comm="syz.0.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 309.999251][ T29] audit: type=1400 audit(1740989660.301:701): avc: denied { create } for pid=9181 comm="syz.2.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 310.032204][ T29] audit: type=1400 audit(1740989660.301:702): avc: denied { write } for pid=9181 comm="syz.2.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 310.153672][ T9180] geneve2: entered promiscuous mode [ 310.171107][ T9180] geneve2: entered allmulticast mode [ 310.680333][ T864] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 310.881772][ T864] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.929785][ T864] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.949667][ T9206] netlink: 32 bytes leftover after parsing attributes in process `syz.5.852'. [ 310.949860][ T864] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 310.968546][ T864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 311.000294][ T864] usb 2-1: SerialNumber: syz [ 311.119798][ T9206] netlink: 36 bytes leftover after parsing attributes in process `syz.5.852'. [ 311.197649][ T29] audit: type=1400 audit(1740989661.541:703): avc: denied { ioctl } for pid=9205 comm="syz.5.852" path="socket:[22969]" dev="sockfs" ino=22969 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 311.198710][ T9206] XFS (nullb0): Invalid superblock magic number [ 311.315170][ T29] audit: type=1400 audit(1740989661.541:704): avc: denied { setattr } for pid=9205 comm="syz.5.852" name="TIPC" dev="sockfs" ino=22969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 311.452931][ T29] audit: type=1400 audit(1740989661.761:705): avc: denied { getopt } for pid=9223 comm="syz.2.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 311.590232][ T5869] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 311.710038][ T9238] FAULT_INJECTION: forcing a failure. [ 311.710038][ T9238] name failslab, interval 1, probability 0, space 0, times 0 [ 311.791695][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 311.849662][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.850268][ T9238] CPU: 1 UID: 0 PID: 9238 Comm: syz.5.857 Not tainted 6.14.0-rc5-syzkaller #0 [ 311.850287][ T9238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 311.850296][ T9238] Call Trace: [ 311.850301][ T9238] [ 311.850307][ T9238] dump_stack_lvl+0x16c/0x1f0 [ 311.850330][ T9238] should_fail_ex+0x50a/0x650 [ 311.850355][ T9238] ? fs_reclaim_acquire+0xae/0x150 [ 311.850378][ T9238] should_failslab+0xc2/0x120 [ 311.850395][ T9238] __kmalloc_cache_node_noprof+0x6e/0x420 [ 311.850409][ T9238] ? lockdep_hardirqs_on+0x7c/0x110 [ 311.850427][ T9238] ? __get_vm_area_node+0x101/0x2f0 [ 311.850451][ T9238] __get_vm_area_node+0x101/0x2f0 [ 311.850472][ T9238] ? __vmalloc_node_range_noprof+0x111/0x1530 [ 311.850496][ T9238] __vmalloc_node_range_noprof+0x26a/0x1530 [ 311.850519][ T9238] ? vhost_task_create+0x1d3/0x2e0 [ 311.850540][ T9238] ? mod_objcg_state+0x2e3/0x8d0 [ 311.850565][ T9238] ? vhost_task_create+0x1d3/0x2e0 [ 311.850588][ T9238] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 311.850611][ T9238] ? rcu_is_watching+0x12/0xc0 [ 311.850627][ T9238] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 311.850646][ T9238] ? kmem_cache_alloc_node_noprof+0x272/0x3c0 [ 311.850660][ T9238] ? preempt_schedule_thunk+0x1a/0x30 [ 311.850679][ T9238] ? copy_process+0x4be/0x8c50 [ 311.850694][ T9238] ? vhost_task_create+0x1d3/0x2e0 [ 311.850712][ T9238] copy_process+0x2ef2/0x8c50 [ 311.850726][ T9238] ? vhost_task_create+0x1d3/0x2e0 [ 311.850742][ T9238] ? kasan_save_stack+0x33/0x60 [ 311.850755][ T9238] ? kasan_save_track+0x14/0x30 [ 311.850768][ T9238] ? __kasan_kmalloc+0xaa/0xb0 [ 311.850780][ T9238] ? vhost_task_create+0xe6/0x2e0 [ 311.850796][ T9238] ? kvm_mmu_post_init_vm+0x1b7/0x370 [ 311.850814][ T9238] ? kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 311.850831][ T9238] ? kvm_vcpu_ioctl+0x5ea/0x16b0 [ 311.850847][ T9238] ? __x64_sys_ioctl+0x190/0x200 [ 311.850865][ T9238] ? do_syscall_64+0xcd/0x250 [ 311.850882][ T9238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.850913][ T9238] ? __pfx_copy_process+0x10/0x10 [ 311.850945][ T9238] ? lockdep_init_map_type+0x16d/0x7d0 [ 311.850969][ T9238] ? __raw_spin_lock_init+0x3a/0x110 [ 311.850984][ T9238] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 311.851006][ T9238] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 311.851031][ T9238] vhost_task_create+0x1d3/0x2e0 [ 311.851049][ T9238] ? __pfx_vhost_task_create+0x10/0x10 [ 311.851067][ T9238] ? kvm_mmu_post_init_vm+0xb4/0x370 [ 311.851090][ T9238] ? __pfx_vhost_task_fn+0x10/0x10 [ 311.851118][ T9238] kvm_mmu_post_init_vm+0x1b7/0x370 [ 311.851138][ T9238] kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 311.851161][ T9238] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 311.851181][ T9238] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 311.851204][ T9238] ? irqentry_exit+0x3b/0x90 [ 311.851219][ T9238] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 311.851241][ T9238] ? lockdep_hardirqs_on+0x7c/0x110 [ 311.851259][ T9238] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 311.851289][ T9238] ? ioctl_has_perm.constprop.0.isra.0+0x2f/0x450 [ 311.851316][ T9238] ? selinux_file_ioctl+0x180/0x270 [ 311.851337][ T9238] ? selinux_file_ioctl+0xb4/0x270 [ 311.851359][ T9238] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 311.851377][ T9238] __x64_sys_ioctl+0x190/0x200 [ 311.851399][ T9238] do_syscall_64+0xcd/0x250 [ 311.851418][ T9238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.851437][ T9238] RIP: 0033:0x7ff65eb8d169 [ 311.851449][ T9238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.851463][ T9238] RSP: 002b:00007ff65fa88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.851478][ T9238] RAX: ffffffffffffffda RBX: 00007ff65eda6080 RCX: 00007ff65eb8d169 [ 311.851488][ T9238] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 311.851496][ T9238] RBP: 00007ff65fa88090 R08: 0000000000000000 R09: 0000000000000000 [ 311.851505][ T9238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.851513][ T9238] R13: 0000000000000001 R14: 00007ff65eda6080 R15: 00007ffdd11adcd8 [ 311.851533][ T9238] [ 311.851871][ T9238] syz.5.857: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 312.491228][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 312.505928][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 312.506626][ T9238] CPU: 1 UID: 0 PID: 9238 Comm: syz.5.857 Not tainted 6.14.0-rc5-syzkaller #0 [ 312.506647][ T9238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 312.506655][ T9238] Call Trace: [ 312.506660][ T9238] [ 312.506666][ T9238] dump_stack_lvl+0x16c/0x1f0 [ 312.506690][ T9238] warn_alloc+0x24d/0x3a0 [ 312.506707][ T9238] ? __pfx_warn_alloc+0x10/0x10 [ 312.506722][ T9238] ? rcu_is_watching+0x12/0xc0 [ 312.506739][ T9238] ? __kmalloc_cache_node_noprof+0x2ad/0x420 [ 312.506754][ T9238] ? lockdep_hardirqs_on+0x7c/0x110 [ 312.506774][ T9238] ? __kasan_kmalloc+0x8a/0xb0 [ 312.506789][ T9238] ? __get_vm_area_node+0x1dc/0x2f0 [ 312.506815][ T9238] __vmalloc_node_range_noprof+0xd24/0x1530 [ 312.506840][ T9238] ? mod_objcg_state+0x2e3/0x8d0 [ 312.506865][ T9238] ? vhost_task_create+0x1d3/0x2e0 [ 312.506889][ T9238] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 312.506912][ T9238] ? rcu_is_watching+0x12/0xc0 [ 312.506927][ T9238] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 312.506946][ T9238] ? kmem_cache_alloc_node_noprof+0x272/0x3c0 [ 312.506968][ T9238] ? preempt_schedule_thunk+0x1a/0x30 [ 312.506987][ T9238] ? copy_process+0x4be/0x8c50 [ 312.507001][ T9238] ? vhost_task_create+0x1d3/0x2e0 [ 312.507019][ T9238] copy_process+0x2ef2/0x8c50 [ 312.507032][ T9238] ? vhost_task_create+0x1d3/0x2e0 [ 312.507049][ T9238] ? kasan_save_stack+0x33/0x60 [ 312.507061][ T9238] ? kasan_save_track+0x14/0x30 [ 312.507074][ T9238] ? __kasan_kmalloc+0xaa/0xb0 [ 312.507086][ T9238] ? vhost_task_create+0xe6/0x2e0 [ 312.507102][ T9238] ? kvm_mmu_post_init_vm+0x1b7/0x370 [ 312.507120][ T9238] ? kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 312.507137][ T9238] ? kvm_vcpu_ioctl+0x5ea/0x16b0 [ 312.507152][ T9238] ? __x64_sys_ioctl+0x190/0x200 [ 312.507171][ T9238] ? do_syscall_64+0xcd/0x250 [ 312.507187][ T9238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.507219][ T9238] ? __pfx_copy_process+0x10/0x10 [ 312.507246][ T9238] ? lockdep_init_map_type+0x16d/0x7d0 [ 312.507266][ T9238] ? __raw_spin_lock_init+0x3a/0x110 [ 312.507282][ T9238] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 312.507303][ T9238] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 312.507329][ T9238] vhost_task_create+0x1d3/0x2e0 [ 312.507347][ T9238] ? __pfx_vhost_task_create+0x10/0x10 [ 312.507366][ T9238] ? kvm_mmu_post_init_vm+0xb4/0x370 [ 312.507389][ T9238] ? __pfx_vhost_task_fn+0x10/0x10 [ 312.507418][ T9238] kvm_mmu_post_init_vm+0x1b7/0x370 [ 312.507438][ T9238] kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 312.507461][ T9238] kvm_vcpu_ioctl+0x5ea/0x16b0 [ 312.507481][ T9238] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 312.507504][ T9238] ? irqentry_exit+0x3b/0x90 [ 312.507520][ T9238] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 312.507543][ T9238] ? lockdep_hardirqs_on+0x7c/0x110 [ 312.507561][ T9238] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 312.507591][ T9238] ? ioctl_has_perm.constprop.0.isra.0+0x2f/0x450 [ 312.507618][ T9238] ? selinux_file_ioctl+0x180/0x270 [ 312.507639][ T9238] ? selinux_file_ioctl+0xb4/0x270 [ 312.507661][ T9238] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 312.507679][ T9238] __x64_sys_ioctl+0x190/0x200 [ 312.507700][ T9238] do_syscall_64+0xcd/0x250 [ 312.507720][ T9238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.507739][ T9238] RIP: 0033:0x7ff65eb8d169 [ 312.507752][ T9238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.507765][ T9238] RSP: 002b:00007ff65fa88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.507779][ T9238] RAX: ffffffffffffffda RBX: 00007ff65eda6080 RCX: 00007ff65eb8d169 [ 312.507789][ T9238] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 312.507797][ T9238] RBP: 00007ff65fa88090 R08: 0000000000000000 R09: 0000000000000000 [ 312.507806][ T9238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.507814][ T9238] R13: 0000000000000001 R14: 00007ff65eda6080 R15: 00007ffdd11adcd8 [ 312.507835][ T9238] [ 312.507857][ T9238] Mem-Info: [ 312.530107][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 312.970840][ T864] usb 2-1: 0:2 : does not exist [ 312.995025][ T9238] active_anon:12275 inactive_anon:0 isolated_anon:0 [ 312.995025][ T9238] active_file:13976 inactive_file:38686 isolated_file:0 [ 312.995025][ T9238] unevictable:768 dirty:227 writeback:0 [ 312.995025][ T9238] slab_reclaimable:9983 slab_unreclaimable:100093 [ 312.995025][ T9238] mapped:32354 shmem:7385 pagetables:1162 [ 312.995025][ T9238] sec_pagetables:0 bounce:0 [ 312.995025][ T9238] kernel_misc_reclaimable:0 [ 312.995025][ T9238] free:1312498 free_pcp:4983 free_cma:0 [ 313.072698][ T864] usb 2-1: USB disconnect, device number 19 [ 313.115222][ T9238] Node 0 active_anon:46400kB inactive_anon:0kB active_file:55904kB inactive_file:154668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130416kB dirty:908kB writeback:0kB shmem:25404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11376kB pagetables:4748kB sec_pagetables:0kB all_unreclaimable? no [ 313.250380][ T9238] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 313.386960][ T9238] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 313.403085][ T9233] io-wq is not configured for unbound workers [ 313.591866][ T7756] udevd[7756]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.600128][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 313.630271][ T9238] lowmem_reserve[]: 0 2487 2487 0 0 [ 313.635544][ T9238] Node 0 DMA32 free:1320892kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:48600kB inactive_anon:0kB active_file:55904kB inactive_file:154580kB unevictable:1536kB writepending:928kB present:3129332kB managed:2547384kB mlocked:0kB bounce:0kB free_pcp:2484kB local_pcp:1280kB free_cma:0kB [ 313.712810][ T9238] lowmem_reserve[]: 0 0 0 0 0 [ 313.723898][ T5869] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 313.750133][ T9238] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 313.755700][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 313.833107][ T5869] usb 4-1: Product: syz [ 313.841748][ T5869] usb 4-1: Manufacturer: syz [ 313.849785][ T9238] lowmem_reserve[]: 0 0 0 0 0 [ 313.850729][ T5869] usb 4-1: SerialNumber: syz [ 313.891882][ T9238] Node 1 Normal free:3903488kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:7560kB local_pcp:996kB free_cma:0kB [ 313.925887][ T5869] usb 4-1: config 0 descriptor?? [ 313.956158][ T9238] lowmem_reserve[]: 0 0 0 0 0 [ 313.993792][ T9238] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 314.046237][ T9238] Node 0 DMA32: 440*4kB (UME) 882*8kB (UME) 801*16kB (UME) 408*32kB (ME) 233*64kB (UME) 21*128kB (UME) 11*256kB (ME) 32*512kB (UME) 21*1024kB (UM) 14*2048kB (UME) 290*4096kB (M) = 1309504kB [ 314.075921][ T9238] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 314.087741][ T9238] Node 1 Normal: 103*4kB (UME) 59*8kB (UME) 48*16kB (UME) 202*32kB (UME) 94*64kB (UME) 30*128kB (UME) 14*256kB (UE) 8*512kB (UME) 5*1024kB (UME) 5*2048kB (UME) 943*4096kB (M) = 3903540kB [ 314.126732][ T9238] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.167471][ T5869] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 314.188091][ T5869] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 314.189444][ T9238] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 314.231003][ T9238] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 314.286014][ T9238] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 314.307996][ T9238] 56972 total pagecache pages [ 314.328243][ T9238] 0 pages in swap cache [ 314.334205][ T9238] Free swap = 124760kB [ 314.338373][ T9238] Total swap = 124996kB [ 314.347136][ T9273] FAULT_INJECTION: forcing a failure. [ 314.347136][ T9273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.347855][ T9238] 2097051 pages RAM [ 314.367541][ T9238] 0 pages HighMem/MovableOnly [ 314.373312][ T9238] 428547 pages reserved [ 314.374083][ T9273] CPU: 0 UID: 0 PID: 9273 Comm: syz.1.864 Not tainted 6.14.0-rc5-syzkaller #0 [ 314.374101][ T9273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 314.374109][ T9273] Call Trace: [ 314.374114][ T9273] [ 314.374120][ T9273] dump_stack_lvl+0x16c/0x1f0 [ 314.374143][ T9273] should_fail_ex+0x50a/0x650 [ 314.374168][ T9273] _copy_from_iter+0x2a1/0x1560 [ 314.374187][ T9273] ? trace_lock_acquire+0x14e/0x1f0 [ 314.374208][ T9273] ? __pfx__copy_from_iter+0x10/0x10 [ 314.374221][ T9273] ? __virt_addr_valid+0x1a4/0x590 [ 314.374239][ T9273] ? __virt_addr_valid+0x5e/0x590 [ 314.374254][ T9273] ? __phys_addr_symbol+0x30/0x80 [ 314.374268][ T9273] ? __check_object_size+0x488/0x710 [ 314.374289][ T9273] skb_copy_datagram_from_iter+0x124/0x710 [ 314.374308][ T9273] ? hlock_class+0x4e/0x130 [ 314.374323][ T9273] ? __lock_acquire+0xcc5/0x3c40 [ 314.374343][ T9273] ? iov_iter_advance+0x7d/0x6c0 [ 314.374360][ T9273] tun_get_user+0x199c/0x3e50 [ 314.374393][ T9273] ? __pfx_tun_get_user+0x10/0x10 [ 314.374413][ T9273] ? find_held_lock+0x2d/0x110 [ 314.374434][ T9273] ? __pfx_lock_release+0x10/0x10 [ 314.374464][ T9273] tun_chr_write_iter+0xdc/0x210 [ 314.374488][ T9273] vfs_write+0x5ae/0x1150 [ 314.374510][ T9273] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 314.374535][ T9273] ? __pfx_vfs_write+0x10/0x10 [ 314.374558][ T9273] ? __fget_files+0x40/0x3a0 [ 314.374583][ T9273] ksys_write+0x12b/0x250 [ 314.374604][ T9273] ? __pfx_ksys_write+0x10/0x10 [ 314.374632][ T9273] do_syscall_64+0xcd/0x250 [ 314.374652][ T9273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.374671][ T9273] RIP: 0033:0x7f07b5f8d169 [ 314.374683][ T9273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.374697][ T9273] RSP: 002b:00007f07b6e01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 314.374712][ T9273] RAX: ffffffffffffffda RBX: 00007f07b61a5fa0 RCX: 00007f07b5f8d169 [ 314.374722][ T9273] RDX: 0000000000000042 RSI: 0000400000000280 RDI: 0000000000000003 [ 314.374730][ T9273] RBP: 00007f07b6e01090 R08: 0000000000000000 R09: 0000000000000000 [ 314.374738][ T9273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.374747][ T9273] R13: 0000000000000000 R14: 00007f07b61a5fa0 R15: 00007ffd5a907538 [ 314.374765][ T9273] [ 314.390967][ T5869] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 314.400797][ T9238] 0 pages cma reserved [ 314.557818][ T5869] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 314.625116][ T9278] input: syz1 as /devices/virtual/input/input16 [ 314.647296][ T5869] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 314.721354][ T25] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 314.737349][ T5869] usb 4-1: USB disconnect, device number 23 [ 314.987399][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.997644][ T25] usb 3-1: config 0 has no interfaces? [ 315.009547][ T25] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 315.021537][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.049345][ T25] usb 3-1: config 0 descriptor?? [ 315.197838][ T9296] trusted_key: encrypted_key: insufficient parameters specified [ 315.439745][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.482008][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.489826][ T29] audit: type=1400 audit(1740989665.781:706): avc: denied { bind } for pid=9268 comm="syz.2.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 315.572943][ T5869] usb 3-1: USB disconnect, device number 27 [ 316.042928][ T9314] netlink: 68 bytes leftover after parsing attributes in process `syz.1.871'. [ 316.838170][ T29] audit: type=1400 audit(1740989667.181:707): avc: denied { watch_sb watch_reads } for pid=9323 comm="syz.2.873" path="/182/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 316.970884][ T5869] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 317.034931][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.042787][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.130246][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 317.142792][ T5869] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 317.187722][ T5869] usb 2-1: config 0 has no interface number 0 [ 317.199456][ T5869] usb 2-1: config 0 interface 12 has no altsetting 0 [ 317.216663][ T5869] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 317.239231][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.268357][ T5869] usb 2-1: Product: syz [ 317.278937][ T5869] usb 2-1: Manufacturer: syz [ 317.291779][ T5869] usb 2-1: SerialNumber: syz [ 317.304349][ T5869] usb 2-1: config 0 descriptor?? [ 317.847147][ T5869] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 317.854722][ T5869] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 317.870118][ T5869] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 317.877731][ T5869] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 318.163303][ T5869] usb 2-1: USB disconnect, device number 20 [ 318.565693][ T9351] FAULT_INJECTION: forcing a failure. [ 318.565693][ T9351] name failslab, interval 1, probability 0, space 0, times 0 [ 318.578832][ T9351] CPU: 0 UID: 0 PID: 9351 Comm: syz.5.882 Not tainted 6.14.0-rc5-syzkaller #0 [ 318.578852][ T9351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 318.578862][ T9351] Call Trace: [ 318.578868][ T9351] [ 318.578874][ T9351] dump_stack_lvl+0x16c/0x1f0 [ 318.578901][ T9351] should_fail_ex+0x50a/0x650 [ 318.578930][ T9351] should_failslab+0xc2/0x120 [ 318.578949][ T9351] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 318.578967][ T9351] ? skb_clone+0x190/0x3f0 [ 318.578996][ T9351] skb_clone+0x190/0x3f0 [ 318.579020][ T9351] netlink_deliver_tap+0xabd/0xd30 [ 318.579047][ T9351] netlink_unicast+0x5e1/0x7f0 [ 318.579079][ T9351] ? __pfx_netlink_unicast+0x10/0x10 [ 318.579109][ T9351] netlink_sendmsg+0x8b8/0xd70 [ 318.579135][ T9351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.579166][ T9351] ____sys_sendmsg+0xaaf/0xc90 [ 318.579184][ T9351] ? copy_msghdr_from_user+0x10b/0x160 [ 318.579208][ T9351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.579238][ T9351] ___sys_sendmsg+0x135/0x1e0 [ 318.579263][ T9351] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.579296][ T9351] ? __pfx_lock_release+0x10/0x10 [ 318.579319][ T9351] ? trace_lock_acquire+0x14e/0x1f0 [ 318.579348][ T9351] ? __fget_files+0x206/0x3a0 [ 318.579372][ T9351] __sys_sendmsg+0x16e/0x220 [ 318.579395][ T9351] ? __pfx___sys_sendmsg+0x10/0x10 [ 318.579435][ T9351] do_syscall_64+0xcd/0x250 [ 318.579459][ T9351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.579482][ T9351] RIP: 0033:0x7ff65eb8d169 [ 318.579496][ T9351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.579511][ T9351] RSP: 002b:00007ff65faa9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.579528][ T9351] RAX: ffffffffffffffda RBX: 00007ff65eda5fa0 RCX: 00007ff65eb8d169 [ 318.579539][ T9351] RDX: 0000000000000000 RSI: 0000400000006040 RDI: 0000000000000004 [ 318.579550][ T9351] RBP: 00007ff65faa9090 R08: 0000000000000000 R09: 0000000000000000 [ 318.579560][ T9351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.579569][ T9351] R13: 0000000000000000 R14: 00007ff65eda5fa0 R15: 00007ffdd11adcd8 [ 318.579593][ T9351] [ 319.699154][ T8] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 319.805944][ T9368] virtio-fs: tag not found [ 320.089874][ T9369] overlayfs: workdir and upperdir must be separate subtrees [ 320.150192][ T5951] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 320.380987][ T5951] usb 4-1: device descriptor read/64, error -71 [ 320.395399][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 320.417087][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 320.436974][ T8] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 320.454842][ T8] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 320.484558][ T8] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 320.499463][ T8] usb 6-1: config 128 has no interface number 0 [ 320.506347][ T8] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 320.528834][ T8] usb 6-1: config 128 interface 127 has no altsetting 0 [ 320.542651][ T8] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 320.562192][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.588734][ T8] usb 6-1: Product: syz [ 320.597045][ T8] usb 6-1: Manufacturer: syz [ 320.613951][ T8] usb 6-1: SerialNumber: syz [ 320.740157][ T5951] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 320.740334][ T9375] trusted_key: encrypted_key: insufficient parameters specified [ 320.880221][ T5951] usb 4-1: device descriptor read/64, error -71 [ 320.888756][ T8] usb 6-1: USB disconnect, device number 17 [ 321.000508][ T5951] usb usb4-port1: attempt power cycle [ 321.016898][ T9382] evm: overlay not supported [ 321.101529][ T7756] udevd[7756]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.196230][ T29] audit: type=1400 audit(1740989671.541:708): avc: denied { write } for pid=9385 comm="syz.0.894" path="socket:[23216]" dev="sockfs" ino=23216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 321.219498][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.350206][ T5951] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 321.465385][ T5951] usb 4-1: device descriptor read/8, error -71 [ 321.846833][ T5951] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 321.882457][ T29] audit: type=1400 audit(1740989672.231:709): avc: denied { ioctl } for pid=9396 comm="syz.5.898" path="socket:[23243]" dev="sockfs" ino=23243 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 321.907489][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.727543][ T5951] usb 4-1: device descriptor read/8, error -71 [ 322.948045][ T5951] usb usb4-port1: unable to enumerate USB device [ 323.773273][ T9410] input: syz1 as /devices/virtual/input/input17 [ 323.867443][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'. [ 323.976040][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.902'. [ 324.098692][ T9420] ksmbd: Unknown IPC event: 1, ignore. [ 324.619272][ T9410] netlink: 'syz.3.902': attribute type 1 has an invalid length. [ 324.629086][ T9410] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.902'. [ 324.959789][ T9422] FAULT_INJECTION: forcing a failure. [ 324.959789][ T9422] name failslab, interval 1, probability 0, space 0, times 0 [ 324.974281][ T9422] CPU: 0 UID: 0 PID: 9422 Comm: syz.5.906 Not tainted 6.14.0-rc5-syzkaller #0 [ 324.974300][ T9422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 324.974307][ T9422] Call Trace: [ 324.974310][ T9422] [ 324.974314][ T9422] dump_stack_lvl+0x16c/0x1f0 [ 324.974331][ T9422] should_fail_ex+0x50a/0x650 [ 324.974348][ T9422] ? fs_reclaim_acquire+0xae/0x150 [ 324.974365][ T9422] should_failslab+0xc2/0x120 [ 324.974378][ T9422] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 324.974390][ T9422] ? security_file_alloc+0x34/0x2b0 [ 324.974409][ T9422] security_file_alloc+0x34/0x2b0 [ 324.974425][ T9422] init_file+0x93/0x4c0 [ 324.974438][ T9422] alloc_empty_file+0x91/0x1e0 [ 324.974451][ T9422] alloc_file_pseudo+0x13b/0x230 [ 324.974466][ T9422] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 324.974483][ T9422] sock_alloc_file+0x50/0x210 [ 324.974500][ T9422] do_accept+0x23e/0x530 [ 324.974513][ T9422] ? do_raw_spin_lock+0x12d/0x2c0 [ 324.974523][ T9422] ? __pfx_do_accept+0x10/0x10 [ 324.974543][ T9422] __sys_accept4+0xfe/0x1b0 [ 324.974555][ T9422] ? __pfx___sys_accept4+0x10/0x10 [ 324.974567][ T9422] ? ksys_write+0x1ba/0x250 [ 324.974583][ T9422] ? __pfx_ksys_write+0x10/0x10 [ 324.974602][ T9422] __x64_sys_accept+0x74/0xb0 [ 324.974614][ T9422] ? lockdep_hardirqs_on+0x7c/0x110 [ 324.974627][ T9422] do_syscall_64+0xcd/0x250 [ 324.974641][ T9422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.974657][ T9422] RIP: 0033:0x7ff65eb8d169 [ 324.974666][ T9422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.974676][ T9422] RSP: 002b:00007ff65faa9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 324.974686][ T9422] RAX: ffffffffffffffda RBX: 00007ff65eda5fa0 RCX: 00007ff65eb8d169 [ 324.974692][ T9422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 324.974698][ T9422] RBP: 00007ff65faa9090 R08: 0000000000000000 R09: 0000000000000000 [ 324.974704][ T9422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.974715][ T9422] R13: 0000000000000000 R14: 00007ff65eda5fa0 R15: 00007ffdd11adcd8 [ 324.974727][ T9422] [ 325.267590][ T9428] trusted_key: encrypted_key: insufficient parameters specified [ 325.280134][ T5824] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 325.500681][ T5824] usb 4-1: Using ep0 maxpacket: 8 [ 325.507020][ T5824] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 325.517452][ T5824] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.531479][ T5824] usb 4-1: config 0 has no interface number 0 [ 325.537566][ T5824] usb 4-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=75.a5 [ 325.589563][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.656793][ T5824] usb 4-1: config 0 descriptor?? [ 325.689607][ T5824] imon 4-1:0.128: unable to register, err -19 [ 325.760135][ T8] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 325.889489][ T5824] usb 4-1: USB disconnect, device number 28 [ 325.936259][ T8] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 325.955083][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.976901][ T8] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 325.996517][ T8] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 326.027927][ T8] usb 6-1: Manufacturer: syz [ 326.039548][ T8] usb 6-1: config 0 descriptor?? [ 326.076689][ T8] igorplugusb 6-1:0.0: endpoint incorrect [ 326.296614][ T9430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.321689][ T9430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.341700][ T8] usb 6-1: USB disconnect, device number 18 [ 326.420351][ T29] audit: type=1400 audit(1740989676.761:710): avc: denied { setopt } for pid=9436 comm="syz.1.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 326.589956][ T29] audit: type=1400 audit(1740989676.931:711): avc: denied { mount } for pid=9441 comm="syz.2.913" name="/" dev="pstore" ino=2958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 326.649535][ T29] audit: type=1400 audit(1740989676.991:712): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 326.669499][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.681196][ T5824] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 326.729792][ T29] audit: type=1400 audit(1740989677.061:713): avc: denied { read } for pid=9445 comm="syz.1.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 326.848498][ T5824] usb 1-1: Using ep0 maxpacket: 16 [ 326.858596][ T5824] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 326.880684][ T5824] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.891422][ T5824] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.911673][ T5824] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 326.921557][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.929556][ T5824] usb 1-1: Product: syz [ 326.933830][ T5824] usb 1-1: Manufacturer: syz [ 326.938420][ T5824] usb 1-1: SerialNumber: syz [ 327.050266][ T5869] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 327.094828][ T8] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 327.148913][ T5824] usb 1-1: 0:2 : does not exist [ 327.150154][ T25] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 327.169473][ T5824] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 327.201691][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 327.212223][ T5824] usb 1-1: USB disconnect, device number 33 [ 327.219092][ T5869] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 327.231226][ T5869] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 327.309314][ T29] audit: type=1400 audit(1740989677.651:714): avc: denied { getopt } for pid=9458 comm="syz.0.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 327.355705][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 327.447194][ T25] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 327.448336][ T5869] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 327.459667][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.482990][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 327.486744][ T25] usb 6-1: Product: syz [ 327.507682][ T8] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 327.550381][ T25] usb 6-1: Manufacturer: syz [ 327.551564][ T7756] udevd[7756]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.557381][ T25] usb 6-1: SerialNumber: syz [ 327.571547][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.590647][ T5869] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.610154][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.616560][ T25] usb 6-1: config 0 descriptor?? [ 327.681876][ T8] usb 4-1: config 0 descriptor?? [ 327.683896][ T25] gspca_main: sq930x-2.14.0 probing 2770:930c [ 327.758013][ T5869] usb 2-1: Product: syz [ 327.773127][ T9450] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 327.786077][ T5869] usb 2-1: Manufacturer: syz [ 327.794218][ T5869] usb 2-1: SerialNumber: syz [ 327.986008][ T29] audit: type=1400 audit(1740989678.331:715): avc: denied { read write } for pid=9453 comm="syz.5.918" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 328.008428][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.367646][ T29] audit: type=1400 audit(1740989678.371:716): avc: denied { open } for pid=9453 comm="syz.5.918" path="/133/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 328.390490][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.505417][ T29] audit: type=1400 audit(1740989678.661:717): avc: denied { mount } for pid=9453 comm="syz.5.918" name="/" dev="hugetlbfs" ino=23526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 328.528203][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.550335][ T8] elan 0003:04F3:0755.000C: unknown main item tag 0x0 [ 328.558380][ T8] elan 0003:04F3:0755.000C: item fetching failed at offset 3/5 [ 328.569445][ T8] elan 0003:04F3:0755.000C: Hid Parse failed [ 328.582243][ T8] elan 0003:04F3:0755.000C: probe with driver elan failed with error -22 [ 328.593464][ T9463] netlink: 76 bytes leftover after parsing attributes in process `syz.2.920'. [ 328.624742][ T29] audit: type=1400 audit(1740989678.671:718): avc: denied { create } for pid=9453 comm="syz.5.918" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 328.737459][ T5869] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 328.790182][ T5869] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 328.846378][ T5869] usb 2-1: USB disconnect, device number 21 [ 328.920710][ T8] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 329.080190][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 329.081428][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.091447][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.143988][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 329.172123][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 329.187238][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 329.199106][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 329.216913][ T8] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 329.227590][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 329.236327][ T8] usb 1-1: Product: syz [ 329.241305][ T8] usb 1-1: Manufacturer: syz [ 329.245961][ T8] usb 1-1: SerialNumber: syz [ 329.300316][ T8] usb 1-1: config 0 descriptor?? [ 329.332669][ T5869] usb 4-1: USB disconnect, device number 29 [ 329.430434][ T25] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 329.587546][ T8] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 329.629551][ T8] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 329.650230][ T25] gspca_sq930x: Sensor ov9630 not yet treated [ 329.667515][ T25] sq930x 6-1:0.0: probe with driver sq930x failed with error -22 [ 329.679991][ T29] audit: type=1400 audit(1740989680.031:719): avc: denied { read } for pid=9480 comm="syz.3.925" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 329.773905][ T25] usb 6-1: USB disconnect, device number 19 [ 329.895303][ T8] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 330.103051][ T8] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 330.122209][ T8] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 330.164401][ T8] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 331.145578][ T8] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 331.154524][ T8] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 331.291118][ T5824] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 331.558163][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 331.558201][ T29] audit: type=1400 audit(1740989681.901:723): avc: denied { bind } for pid=9505 comm="syz.1.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 331.694527][ T29] audit: type=1400 audit(1740989681.941:724): avc: denied { listen } for pid=9505 comm="syz.1.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 331.695356][ T5824] usb 6-1: device descriptor read/64, error -71 [ 331.772443][ T29] audit: type=1400 audit(1740989681.951:725): avc: denied { setopt } for pid=9505 comm="syz.1.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 331.791659][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.800853][ T29] audit: type=1400 audit(1740989682.081:726): avc: denied { connect } for pid=9512 comm="syz.2.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 331.845622][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.932'. [ 331.867337][ T29] audit: type=1400 audit(1740989682.081:727): avc: denied { shutdown } for pid=9512 comm="syz.2.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 331.928059][ T29] audit: type=1400 audit(1740989682.191:728): avc: denied { mount } for pid=9505 comm="syz.1.932" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 331.974761][ T8] usb 1-1: USB disconnect, device number 34 [ 332.005270][ T29] audit: type=1400 audit(1740989682.191:729): avc: denied { accept } for pid=9505 comm="syz.1.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 332.025208][ T5824] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 332.039240][ T29] audit: type=1400 audit(1740989682.241:730): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 332.130170][ T5951] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 332.160199][ T5824] usb 6-1: device descriptor read/64, error -71 [ 332.270824][ T5824] usb usb6-port1: attempt power cycle [ 332.291660][ T5951] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 332.299791][ T5951] usb 4-1: config 0 has no interface number 0 [ 332.305922][ T5951] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 332.319417][ T5951] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 332.328988][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.337301][ T5951] usb 4-1: Product: syz [ 332.341673][ T5951] usb 4-1: Manufacturer: syz [ 332.346397][ T5951] usb 4-1: SerialNumber: syz [ 332.363127][ T5951] usb 4-1: config 0 descriptor?? [ 332.369415][ T9518] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 332.381837][ T5951] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 332.630543][ T5824] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 332.679705][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 332.695513][ T5824] usb 6-1: device descriptor read/8, error -71 [ 332.718318][ T5951] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 332.757796][ T5951] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 333.041498][ T9535] bond0: entered promiscuous mode [ 333.047710][ T9535] bond_slave_0: entered promiscuous mode [ 333.054846][ T9535] bond_slave_1: entered promiscuous mode [ 333.290170][ T5824] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 333.328198][ T9533] capability: warning: `syz.0.940' uses 32-bit capabilities (legacy support in use) [ 333.378942][ T5824] usb 6-1: device descriptor read/8, error -71 [ 333.504709][ T1202] usb 4-1: USB disconnect, device number 30 [ 333.514583][ T1202] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 333.580139][ T5824] usb usb6-port1: unable to enumerate USB device [ 333.875820][ T1202] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 333.888405][ T1202] quatech2 4-1:0.51: device disconnected [ 335.385779][ T9557] dummy0: entered promiscuous mode [ 335.410539][ T9557] macsec2: entered promiscuous mode [ 335.427171][ T29] audit: type=1400 audit(1740989685.761:731): avc: denied { write } for pid=9559 comm="syz.0.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 335.436936][ T9557] macsec2: entered allmulticast mode [ 335.560729][ T9557] dummy0: entered allmulticast mode [ 335.608543][ T9557] dummy0: left allmulticast mode [ 335.628022][ T9557] dummy0: left promiscuous mode [ 335.648122][ T9567] FAULT_INJECTION: forcing a failure. [ 335.648122][ T9567] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 335.669810][ T9567] CPU: 0 UID: 0 PID: 9567 Comm: syz.0.951 Not tainted 6.14.0-rc5-syzkaller #0 [ 335.669833][ T9567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.669843][ T9567] Call Trace: [ 335.669849][ T9567] [ 335.669855][ T9567] dump_stack_lvl+0x16c/0x1f0 [ 335.669883][ T9567] should_fail_ex+0x50a/0x650 [ 335.669908][ T9567] ? __pfx___might_resched+0x10/0x10 [ 335.669938][ T9567] should_fail_alloc_page+0xe7/0x130 [ 335.669960][ T9567] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 335.669986][ T9567] ? __pfx_mark_lock+0x10/0x10 [ 335.670011][ T9567] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 335.670033][ T9567] ? __pfx_mark_lock+0x10/0x10 [ 335.670057][ T9567] ? hlock_class+0x4e/0x130 [ 335.670073][ T9567] ? mark_lock+0xb5/0xc60 [ 335.670095][ T9567] ? hlock_class+0x4e/0x130 [ 335.670114][ T9567] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 335.670143][ T9567] ? __pfx___lock_acquire+0x10/0x10 [ 335.670169][ T9567] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 335.670197][ T9567] ? policy_nodemask+0xea/0x4e0 [ 335.670218][ T9567] alloc_pages_mpol+0x1fc/0x540 [ 335.670238][ T9567] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 335.670255][ T9567] ? __pfx_lock_release+0x10/0x10 [ 335.670275][ T9567] ? do_raw_spin_lock+0x12d/0x2c0 [ 335.670291][ T9567] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 335.670309][ T9567] alloc_pages_noprof+0x131/0x390 [ 335.670328][ T9567] __pmd_alloc+0x3f/0x870 [ 335.670352][ T9567] __handle_mm_fault+0x9fb/0x2c60 [ 335.670376][ T9567] ? __pfx___handle_mm_fault+0x10/0x10 [ 335.670391][ T9567] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 335.670429][ T9567] ? find_vma+0xc0/0x140 [ 335.670450][ T9567] ? __pfx_find_vma+0x10/0x10 [ 335.670476][ T9567] handle_mm_fault+0x3fa/0xaa0 [ 335.670498][ T9567] do_user_addr_fault+0x7a3/0x13f0 [ 335.670524][ T9567] exc_page_fault+0x5c/0xc0 [ 335.670539][ T9567] asm_exc_page_fault+0x26/0x30 [ 335.670563][ T9567] RIP: 0010:__get_user_8+0x18/0x30 [ 335.670576][ T9567] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 335.670589][ T9567] RSP: 0018:ffffc90003bdfe38 EFLAGS: 00050287 [ 335.670604][ T9567] RAX: 0000400000002000 RBX: 0000400000002000 RCX: ffffc90003bdfda0 [ 335.670616][ T9567] RDX: 00007ffffffff000 RSI: ffffffff823f9638 RDI: ffffffff8bd359e0 [ 335.670626][ T9567] RBP: ffffc90003bdff18 R08: 0000000000000000 R09: fffffbfff20c4b22 [ 335.670636][ T9567] R10: ffffffff90625917 R11: 0000000000000000 R12: 1ffff9200077bfca [ 335.670646][ T9567] R13: ffffc90003bdfe90 R14: 0000000000000000 R15: 0000000000000000 [ 335.670663][ T9567] ? __x64_sys_utime+0x108/0x2c0 [ 335.670684][ T9567] __x64_sys_utime+0x110/0x2c0 [ 335.670702][ T9567] ? __pfx___x64_sys_utime+0x10/0x10 [ 335.670722][ T9567] ? ksys_write+0x1ba/0x250 [ 335.670754][ T9567] do_syscall_64+0xcd/0x250 [ 335.670775][ T9567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.670795][ T9567] RIP: 0033:0x7f1edcd8d169 [ 335.670807][ T9567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.670821][ T9567] RSP: 002b:00007f1edabf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 335.670836][ T9567] RAX: ffffffffffffffda RBX: 00007f1edcfa5fa0 RCX: 00007f1edcd8d169 [ 335.670846][ T9567] RDX: 0000000000000000 RSI: 0000400000002000 RDI: 0000000000000000 [ 335.670855][ T9567] RBP: 00007f1edabf6090 R08: 0000000000000000 R09: 0000000000000000 [ 335.670863][ T9567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.670873][ T9567] R13: 0000000000000000 R14: 00007f1edcfa5fa0 R15: 00007ffe8728cbe8 [ 335.670896][ T9567] [ 337.140748][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 337.153617][ T29] audit: type=1400 audit(1740989687.491:732): avc: denied { write } for pid=9587 comm="syz.1.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 337.198668][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 337.218633][ T29] audit: type=1400 audit(1740989687.541:733): avc: denied { ioctl } for pid=9587 comm="syz.1.960" path="socket:[24797]" dev="sockfs" ino=24797 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 337.290134][ T9592] netlink: 'syz.0.959': attribute type 10 has an invalid length. [ 337.292816][ T29] audit: type=1400 audit(1740989687.581:734): avc: denied { ioctl } for pid=9589 comm="syz.0.959" path="socket:[24247]" dev="sockfs" ino=24247 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 337.368393][ T9592] syz_tun: entered promiscuous mode [ 337.504309][ T9592] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 337.599839][ T9602] trusted_key: encrypted_key: insufficient parameters specified [ 337.610500][ T9605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.253845][ T9613] trusted_key: encrypted_key: insufficient parameters specified [ 340.198811][ T9645] syzkaller1: entered promiscuous mode [ 340.249154][ T9645] syzkaller1: entered allmulticast mode [ 340.470252][ T864] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 340.818063][ T864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.925943][ T864] usb 6-1: config 0 has no interfaces? [ 340.990217][ T864] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 341.153305][ T864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.392846][ T864] usb 6-1: config 0 descriptor?? [ 344.456179][ T29] audit: type=1400 audit(1740989694.541:735): avc: denied { read write } for pid=9703 comm="syz.1.991" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 344.489066][ T5872] usb 6-1: USB disconnect, device number 24 [ 344.542453][ T29] audit: type=1400 audit(1740989694.551:736): avc: denied { open } for pid=9703 comm="syz.1.991" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 345.069734][ T29] audit: type=1400 audit(1740989695.411:737): avc: denied { write } for pid=9700 comm="syz.3.990" name="mouse0" dev="devtmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 345.100139][ T864] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 345.252703][ T864] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 345.288618][ T864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 345.317996][ T864] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 345.339389][ T864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.373199][ T864] usb 1-1: config 0 descriptor?? [ 345.604072][ T864] ath6kl: Failed to submit usb control message: -71 [ 345.615946][ T864] ath6kl: unable to send the bmi data to the device: -71 [ 345.647420][ T864] ath6kl: Unable to send get target info: -71 [ 345.658973][ T864] ath6kl: Failed to init ath6kl core: -71 [ 345.669268][ T864] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 345.785932][ T864] usb 1-1: USB disconnect, device number 35 [ 345.808800][ T29] audit: type=1400 audit(1740989696.151:738): avc: denied { write } for pid=9710 comm="syz.5.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 345.893096][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1003'. [ 346.458580][ T29] audit: type=1400 audit(1740989696.801:739): avc: denied { accept } for pid=9750 comm="syz.2.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 346.850308][ T29] audit: type=1400 audit(1740989697.041:740): avc: denied { write } for pid=9750 comm="syz.2.1005" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 346.970726][ T29] audit: type=1400 audit(1740989697.041:741): avc: denied { open } for pid=9750 comm="syz.2.1005" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 347.020604][ T29] audit: type=1400 audit(1740989697.051:742): avc: denied { ioctl } for pid=9750 comm="syz.2.1005" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x54a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 347.175791][ T29] audit: type=1400 audit(1740989697.251:743): avc: denied { bind } for pid=9754 comm="syz.0.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 347.277941][ T9762] virtio-fs: tag not found [ 348.402411][ T29] audit: type=1400 audit(1740989698.741:744): avc: denied { write } for pid=9781 comm="syz.5.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 350.212979][ T5869] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 350.309024][ T9792] netlink: 'syz.5.1016': attribute type 10 has an invalid length. [ 350.359218][ T9831] netlink: 'syz.5.1016': attribute type 10 has an invalid length. [ 350.390282][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 350.398804][ T5869] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 350.409393][ T5869] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 350.424138][ T5869] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 350.540287][ T5869] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 350.551156][ T5869] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 350.561811][ T5869] usb 3-1: config 1 interface 0 has no altsetting 0 [ 350.573905][ T5869] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 350.584081][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.610546][ T5869] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 350.690140][ T864] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 350.813473][ T5869] scsi host1: usb-storage 3-1:1.0 [ 350.848068][ T864] usb 6-1: unable to get BOS descriptor or descriptor too short [ 350.859639][ T864] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 350.883737][ T864] usb 6-1: can't read configurations, error -71 [ 351.105653][ T9828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.114851][ T9828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.147489][ T5824] usb 3-1: USB disconnect, device number 28 [ 351.451628][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 351.451645][ T29] audit: type=1400 audit(1740989701.691:747): avc: denied { listen } for pid=9857 comm="syz.3.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 351.744670][ T9866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.931141][ T9871] bpf: Bad value for 'uid' [ 351.990797][ T29] audit: type=1400 audit(1740989702.311:748): avc: denied { bind } for pid=9869 comm="syz.2.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 352.062895][ T29] audit: type=1400 audit(1740989702.311:749): avc: denied { listen } for pid=9869 comm="syz.2.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 352.212430][ T29] audit: type=1400 audit(1740989702.341:750): avc: denied { write } for pid=9869 comm="syz.2.1036" path="socket:[25313]" dev="sockfs" ino=25313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 352.254812][ T29] audit: type=1400 audit(1740989702.341:751): avc: denied { accept } for pid=9869 comm="syz.2.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 352.330952][ T29] audit: type=1400 audit(1740989702.341:752): avc: denied { read } for pid=9869 comm="syz.2.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 353.513104][ T29] audit: type=1400 audit(1740989703.861:753): avc: denied { append } for pid=9889 comm="syz.1.1041" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 353.650519][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1042'. [ 353.661271][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1042'. [ 355.130328][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1049'. [ 355.149571][ T9909] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1049'. [ 355.824896][ T5951] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 356.054208][ T9920] netlink: 'syz.2.1050': attribute type 10 has an invalid length. [ 356.060795][ T5951] usb 2-1: config 0 has no interfaces? [ 356.067629][ T5951] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.077031][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.096464][ T9920] veth0_macvtap: left promiscuous mode [ 356.101586][ T5951] usb 2-1: config 0 descriptor?? [ 356.128229][ T9920] batman_adv: batadv0: Adding interface: macvtap0 [ 356.136937][ T9920] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.166991][ T9920] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 356.240242][ T5869] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 356.357559][ T29] audit: type=1804 audit(1740989706.701:754): pid=9902 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1045" name="/" dev="pidfs" ino=9905 res=1 errno=0 [ 356.364143][ T5951] usb 2-1: USB disconnect, device number 22 [ 356.379926][ T5824] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 356.450264][ T5869] usb 6-1: Using ep0 maxpacket: 8 [ 356.457205][ T5869] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 356.479666][ T5869] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 356.501067][ T5869] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.516317][ T5869] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 356.533460][ T5869] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 356.548807][ T5869] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 356.562857][ T5869] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 356.577623][ T5869] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.595598][ T5824] usb 3-1: Using ep0 maxpacket: 8 [ 356.601569][ T5869] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 356.618394][ T5869] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 356.636504][ T5824] usb 3-1: unable to get BOS descriptor or descriptor too short [ 356.668620][ T5869] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 356.679626][ T5869] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 356.693173][ T5824] usb 3-1: config 9 has an invalid interface number: 112 but max is 0 [ 356.702989][ T5824] usb 3-1: config 9 has no interface number 0 [ 356.709263][ T5824] usb 3-1: config 9 interface 112 has no altsetting 0 [ 356.803938][ T9928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1052'. [ 356.820147][ T29] audit: type=1400 audit(1740989707.141:755): avc: denied { getopt } for pid=9925 comm="syz.3.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 357.159515][ T5869] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 357.171659][ T5869] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 357.187966][ T5824] usb 3-1: language id specifier not provided by device, defaulting to English [ 357.202655][ T5869] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 357.238121][ T5824] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 8.d3 [ 357.275310][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.285965][ T5869] usb 6-1: string descriptor 0 read error: -22 [ 357.294527][ T5869] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 357.304105][ T5824] usb 3-1: Product: syz [ 357.308389][ T5824] usb 3-1: Manufacturer: ﺜ读ᶽ랪忁嫌뤻╡鞦￯識住쫆㢧屰ᱍᰋ [ 357.318170][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.326250][ T5824] usb 3-1: SerialNumber: syz [ 357.334303][ T5869] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 357.361369][ T5824] r8152-cfgselector 3-1: Unknown version 0x0000 [ 357.456100][ T9930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1053'. [ 357.540696][ T5869] usb 6-1: USB disconnect, device number 27 [ 358.018154][ T9936] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1055'. [ 359.022659][ T5824] r8152 3-1:9.112: Expected endpoints are not found [ 359.043637][ T5824] r8152-cfgselector 3-1: USB disconnect, device number 29 [ 359.104909][ T1202] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 359.176169][ T9946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1059'. [ 359.447258][ T29] audit: type=1400 audit(1740989709.651:756): avc: denied { getopt } for pid=9945 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 359.532719][ T1202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 359.548809][ T1202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.563964][ T1202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 359.575690][ T1202] usb 2-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 359.628870][ T1202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.665306][ T1202] usb 2-1: config 0 descriptor?? [ 359.729030][ T9941] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 360.010288][ T5872] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 360.106693][ T1202] usb 2-1: string descriptor 0 read error: -71 [ 360.135820][ T1202] usbhid 2-1:0.0: can't add hid device: -22 [ 360.164681][ T1202] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 360.184803][ T5872] usb 4-1: device descriptor read/64, error -71 [ 360.213051][ T1202] usb 2-1: USB disconnect, device number 23 [ 360.440271][ T5872] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 360.590295][ T5872] usb 4-1: device descriptor read/64, error -71 [ 360.615135][ T29] audit: type=1400 audit(1740989710.961:757): avc: denied { setopt } for pid=9983 comm="syz.2.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 360.711072][ T5872] usb usb4-port1: attempt power cycle [ 361.064878][ T9990] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 361.071674][ T9990] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 361.088110][ T5872] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 361.090665][ T29] audit: type=1400 audit(1740989711.431:758): avc: denied { block_suspend } for pid=9992 comm="syz.2.1078" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 361.103719][ T9990] vhci_hcd vhci_hcd.0: Device attached [ 361.157855][ T5872] usb 4-1: device descriptor read/8, error -71 [ 361.180779][ T9998] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 361.187422][ T9998] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 361.254220][ T9998] vhci_hcd vhci_hcd.0: Device attached [ 361.259856][ T9990] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 361.266474][ T9990] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 361.274414][ T5951] vhci_hcd: vhci_device speed not set [ 361.284288][ T9990] vhci_hcd vhci_hcd.0: Device attached [ 361.297106][ T9998] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 361.332406][ T9990] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(16) [ 361.339046][ T9990] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 361.350956][ T5951] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 361.390868][ T9990] vhci_hcd vhci_hcd.0: Device attached [ 361.410195][ T5872] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 361.426968][ T9998] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(19) [ 361.433614][ T9998] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 361.472667][ T5872] usb 4-1: device descriptor read/8, error -71 [ 361.473212][ T9998] vhci_hcd vhci_hcd.0: Device attached [ 361.526226][ T9990] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(18) [ 361.532866][ T9990] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 466.580014][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 466.586987][ C0] rcu: (detected by 0, t=10502 jiffies, g=32157, q=266 ncpus=2) [ 466.594695][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294983806-4294973304), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 466.608046][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g32157 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 466.619229][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 466.629187][ C0] rcu: RCU grace-period kthread stack dump: [ 466.635061][ C0] task:rcu_preempt state:R running task stack:27552 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 466.648560][ C0] Call Trace: [ 466.651839][ C0] [ 466.654776][ C0] __schedule+0xf43/0x5890 [ 466.659208][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 466.664425][ C0] ? __pfx___schedule+0x10/0x10 [ 466.669275][ C0] ? schedule+0x298/0x350 [ 466.673601][ C0] ? __pfx_lock_release+0x10/0x10 [ 466.678634][ C0] ? lock_acquire+0x2f/0xb0 [ 466.683140][ C0] ? schedule+0x1fd/0x350 [ 466.687469][ C0] schedule+0xe7/0x350 [ 466.691534][ C0] schedule_timeout+0x124/0x280 [ 466.696386][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 466.701760][ C0] ? __pfx_process_timeout+0x10/0x10 [ 466.707044][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 466.712859][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 466.718342][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 466.723123][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 466.728412][ C0] ? rcu_gp_init+0xc82/0x1630 [ 466.733095][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 466.738319][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 466.744124][ C0] rcu_gp_kthread+0x271/0x380 [ 466.748802][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 466.754004][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 466.759198][ C0] ? __kthread_parkme+0x148/0x220 [ 466.764218][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 466.769418][ C0] kthread+0x3af/0x750 [ 466.773486][ C0] ? __pfx_kthread+0x10/0x10 [ 466.778078][ C0] ? __pfx_kthread+0x10/0x10 [ 466.782664][ C0] ret_from_fork+0x45/0x80 [ 466.787079][ C0] ? __pfx_kthread+0x10/0x10 [ 466.791669][ C0] ret_from_fork_asm+0x1a/0x30 [ 466.796442][ C0] [ 466.799454][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 466.805764][ C0] Sending NMI from CPU 0 to CPUs 1: [ 466.810960][ C1] NMI backtrace for cpu 1 [ 466.810970][ C1] CPU: 1 UID: 0 PID: 10021 Comm: syz.2.1085 Not tainted 6.14.0-rc5-syzkaller #0 [ 466.810983][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 466.810990][ C1] RIP: 0010:__lock_acquire+0xc9d/0x3c40 [ 466.811009][ C1] Code: 48 c7 c2 30 8c 62 90 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 14 02 48 c7 c0 30 8c 62 90 83 e0 07 83 c0 03 38 d0 7c 08 <84> d2 0f 85 b0 28 00 00 8b 1d 95 1e cc 0e 85 db 75 40 44 8b 5c 24 [ 466.811020][ C1] RSP: 0018:ffffc90000a18af0 EFLAGS: 00000006 [ 466.811030][ C1] RAX: 0000000000000003 RBX: d57e1d102ea6ccdd RCX: ffffffff81967022 [ 466.811038][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000057e1d10d [ 466.811045][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff2dd8598 [ 466.811053][ C1] R10: ffffffff96ec2cc7 R11: 0000000000000001 R12: ffffed1004ebd5e5 [ 466.811060][ C1] R13: ffff8880275ea440 R14: 0000000000000002 R15: ffff8880275eaf58 [ 466.811068][ C1] FS: 00007f899f0856c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 466.811082][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.811091][ C1] CR2: 000040000001b000 CR3: 0000000053018000 CR4: 00000000003526f0 [ 466.811098][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 466.811105][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 466.811113][ C1] Call Trace: [ 466.811117][ C1] [ 466.811121][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 466.811141][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 466.811156][ C1] ? nmi_handle+0x1ac/0x5d0 [ 466.811173][ C1] ? __lock_acquire+0xc9d/0x3c40 [ 466.811188][ C1] ? default_do_nmi+0x6a/0x160 [ 466.811206][ C1] ? exc_nmi+0x170/0x1e0 [ 466.811223][ C1] ? end_repeat_nmi+0xf/0x53 [ 466.811242][ C1] ? __lock_acquire+0xf32/0x3c40 [ 466.811257][ C1] ? __lock_acquire+0xc9d/0x3c40 [ 466.811273][ C1] ? __lock_acquire+0xc9d/0x3c40 [ 466.811289][ C1] ? __lock_acquire+0xc9d/0x3c40 [ 466.811305][ C1] [ 466.811309][ C1] [ 466.811316][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 466.811333][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 466.811350][ C1] lock_acquire.part.0+0x11b/0x380 [ 466.811366][ C1] ? debug_object_deactivate+0x13b/0x370 [ 466.811381][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 466.811398][ C1] ? rcu_is_watching+0x12/0xc0 [ 466.811410][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 466.811423][ C1] ? debug_object_activate+0x149/0x4a0 [ 466.811437][ C1] ? debug_object_deactivate+0x13b/0x370 [ 466.811450][ C1] ? lock_acquire+0x2f/0xb0 [ 466.811464][ C1] ? debug_object_deactivate+0x13b/0x370 [ 466.811479][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 466.811491][ C1] ? debug_object_deactivate+0x13b/0x370 [ 466.811505][ C1] debug_object_deactivate+0x13b/0x370 [ 466.811518][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 466.811533][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 466.811546][ C1] ? __pfx_advance_sched+0x10/0x10 [ 466.811565][ C1] __hrtimer_run_queues+0x47c/0xae0 [ 466.811580][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 466.811591][ C1] ? read_tsc+0x9/0x20 [ 466.811606][ C1] hrtimer_interrupt+0x392/0x8e0 [ 466.811621][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 466.811639][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 466.811653][ C1] [ 466.811657][ C1] [ 466.811661][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.811678][ C1] RIP: 0010:finish_task_switch.isra.0+0x220/0xcc0 [ 466.811697][ C1] Code: a9 0a 00 00 44 8b 0d 33 e4 d9 0e 45 85 c9 0f 85 c0 01 00 00 48 89 df e8 ae f8 ff ff e8 99 f1 38 00 fb 65 48 8b 1d 20 31 7b 7e <48> 8d bb 08 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 466.811708][ C1] RSP: 0018:ffffc9000caf7710 EFLAGS: 00000206 [ 466.811717][ C1] RAX: 000000000000207b RBX: ffff8880275ea440 RCX: 1ffffffff20c42b1 [ 466.811725][ C1] RDX: 0000000000000000 RSI: ffffffff8b6ced60 RDI: ffffffff8bd359e0 [ 466.811732][ C1] RBP: ffffc9000caf7758 R08: 0000000000000001 R09: 0000000000000001 [ 466.811740][ C1] R10: ffffffff90625917 R11: 0000000000000000 R12: ffff8880b873fa30 [ 466.811747][ C1] R13: ffff8880313d2440 R14: ffff888070e26400 R15: ffff8880b863ec00 [ 466.811760][ C1] ? __switch_to+0x749/0x1190 [ 466.811773][ C1] __schedule+0xf4b/0x5890 [ 466.811786][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 466.811805][ C1] ? __pfx___schedule+0x10/0x10 [ 466.811817][ C1] ? schedule+0x298/0x350 [ 466.811829][ C1] ? __pfx_lock_release+0x10/0x10 [ 466.811847][ C1] ? lock_acquire+0x2f/0xb0 [ 466.811861][ C1] ? schedule+0x1fd/0x350 [ 466.811874][ C1] schedule+0xe7/0x350 [ 466.811891][ C1] schedule_timeout+0x244/0x280 [ 466.811908][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 466.811929][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.811942][ C1] __wait_for_common+0x3e1/0x600 [ 466.811955][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 466.811974][ C1] ? __pfx___wait_for_common+0x10/0x10 [ 466.811988][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 466.812005][ C1] ? generic_exec_single+0xbb/0x390 [ 466.812019][ C1] rdmsr_safe_on_cpu+0x1de/0x210 [ 466.812035][ C1] ? __pfx_rdmsr_safe_on_cpu+0x10/0x10 [ 466.812049][ C1] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 466.812063][ C1] ? __might_fault+0x13b/0x190 [ 466.812077][ C1] ? __pfx_lock_release+0x10/0x10 [ 466.812097][ C1] ? _copy_to_user+0x48/0xd0 [ 466.812110][ C1] msr_read+0x19e/0x250 [ 466.812123][ C1] ? __pfx_msr_read+0x10/0x10 [ 466.812136][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 466.812149][ C1] ? security_file_permission+0x71/0x210 [ 466.812167][ C1] ? rw_verify_area+0xcf/0x680 [ 466.812183][ C1] ? __pfx_msr_read+0x10/0x10 [ 466.812195][ C1] vfs_read+0x1df/0xbf0 [ 466.812212][ C1] ? __fget_files+0x1fc/0x3a0 [ 466.812224][ C1] ? __pfx_lock_release+0x10/0x10 [ 466.812240][ C1] ? __pfx_vfs_read+0x10/0x10 [ 466.812256][ C1] ? do_futex+0x123/0x350 [ 466.812270][ C1] ? lock_acquire+0x2f/0xb0 [ 466.812285][ C1] ? __fget_files+0x40/0x3a0 [ 466.812297][ C1] ? __fget_files+0x206/0x3a0 [ 466.812311][ C1] ksys_read+0x12b/0x250 [ 466.812327][ C1] ? __pfx_ksys_read+0x10/0x10 [ 466.812347][ C1] do_syscall_64+0xcd/0x250 [ 466.812361][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.812378][ C1] RIP: 0033:0x7f899e18d169 [ 466.812389][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.812400][ C1] RSP: 002b:00007f899f085038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 466.812411][ C1] RAX: ffffffffffffffda RBX: 00007f899e3a5fa0 RCX: 00007f899e18d169 [ 466.812419][ C1] RDX: 0000000000018ff8 RSI: 0000400000019680 RDI: 0000000000000003 [ 466.812427][ C1] RBP: 00007f899e20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 466.812434][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.812441][ C1] R13: 0000000000000000 R14: 00007f899e3a5fa0 R15: 00007fff43813508 [ 466.812452][ C1]