last executing test programs: 8.510787783s ago: executing program 4 (id=423): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0x4, {0x0, 0x0, 0x0, {0x5, 0x1002, 0x5, 0xa8, 0x6bf2, 0xfffffffffffffffd, 0x6, 0x10, 0xd, 0x8000, 0x180000, 0x0, 0x0, 0xce}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000340)='./file1\x00', 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000f80)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES32, @ANYRES16=r1, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6.657328597s ago: executing program 0 (id=430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000063f943ff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="9aef7d3400001a4c91c0b40ea8a9", 0x0, 0x9, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x9}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @mcast1, 0x8}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000080)=ANY=[], 0x4}}, 0x24000080) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40041480}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="15001800ea448ca7436036e558815a99cf1a41f1ebaaea9eaf1af391228a3a67ed501fc2603d565d3773edc1427eff471f347eed7a368d", @ANYRES16=r5, @ANYBLOB="dab32abd7000fedbdf250e00000008003c000100000005002f000000000008002c0076000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x5000) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r7 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000500)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x1, r8}) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8916, &(0x7f0000000000)) ioctl(r9, 0x8936, &(0x7f0000000000)) ioctl$KVM_SET_IRQCHIP(r1, 0xaea3, 0x0) 6.515967719s ago: executing program 4 (id=431): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="0d0000002000010300000000000000000200000400"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00!\x00'], 0x28}}, 0x0) 4.255692503s ago: executing program 4 (id=433): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x400000000000004) preadv(r0, 0x0, 0x0, 0x7, 0xff) r1 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xf5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a300000000040000480100001800c000100636f756e746572002c000180090001007866726d000000001c000280080001400000000a080002400000"], 0xf0}}, 0x0) 4.235357264s ago: executing program 2 (id=435): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c004000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 4.234885161s ago: executing program 2 (id=436): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x530001, 0x40) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x219000, 0x1000, 0xffffffff, 0x2}, 0x20) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="ad94263ce62e3c87caca3d5b8b09afd98830703c8fc33ac45fbdff448075752b7c3a1738", 0x24}], 0x1}, 0x8000) recvmsg$kcm(r3, &(0x7f0000000480)={0x0, 0xfffffffffffffcb7, &(0x7f0000000140)=[{0x0}], 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) 4.234628196s ago: executing program 1 (id=437): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)="580000001300add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000009200000000020000", 0x58}], 0x1) 4.126014846s ago: executing program 4 (id=438): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x796, 0x0, 0x0, 0x7fff}) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x100) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x60000, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dfe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x80080400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xe, &(0x7f0000000000), &(0x7f0000000080)=0x4) 4.076151216s ago: executing program 3 (id=439): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r4, &(0x7f00000003c0)="00009a4bb35b", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)}}, 0x40) 4.019669786s ago: executing program 1 (id=440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206050000000000000000000000000005000400000000000900020073797a300000000005000500010000ffff0001000600000011000300686173683a69702c6d61726b00000000"], 0x4c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'vlan0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x2d, 0x0, 0x8}]}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2}) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) 3.306055747s ago: executing program 4 (id=441): bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4a, 0x3, 0x487, 0x9, 0x0, 0x1, 0x2, 0x7, 0x3a, 0x9, 0x80000000, 0xfffffffe, 0x97be, 0x8, 0xfa, 0x8, [0x1154, 0x7]}}) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="8fc0d2585244f9b4ba669fd87b8e35d5164bc7429ae9e2f1828310941d72", 0x1e}, {&(0x7f0000000280)="ee03af4c56816f66f2c61d47097ce036cc2480549e9077eee874678e690857908b8dae7b8c6fad3a49b1e0eb3203add98fbccf83dfa732906e484301fa6ecd0e0931ccc63b4876db698b0d9e98c775dd1accea19729b5db2cbe201c4b7068b864bacfe3f07466add03618cf1586602c7906d359d8e6d33bf22767b88680f6ca263572420e96a064cff216b285c21486c38b9f3c13aea8cbabc9371a78274440a", 0xa0}], 0x2}, 0x20000801) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e28, @loopback}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) close(r4) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)={0xfffffffffffffffd, 0x1}) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x10001, @empty}, 0x1c) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x3}, @hyper, 0x0, 0x2, 0x5e, 0x0, 0x2000000, 0x0, 0x2}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x9, 0x4}) 3.198477226s ago: executing program 2 (id=442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0xfffffffffffffe9a, {0xd000, 0x80a0000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa710c3e20fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362eb5bf86fce896dbc2a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca433d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eeae43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b5511ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000640)={{r3, 0x3, 0x1, 0x6, 0x4, 0x5, 0xffffffffffffff7f, 0x80, 0x73, 0x9, 0xb8df, 0xe, 0x80000001, 0x3, 0xba}}) (async, rerun: 64) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="f20f1b230f783a440f20c066350c000000440f22c066b95502000066b85f00000066ba000000000f300f2133f30fc2b6d400320f019eb93667f00fb05f74bad104ec0f9f9f0e00", 0x47}], 0x1, 0x20, 0x0, 0x0) (rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000280)=@x86={0x8, 0xab, 0x8, 0x0, 0xfffffffb, 0xae, 0x6, 0x4, 0x9, 0x2, 0x80, 0x1, 0x0, 0x8, 0x9, 0xf2, 0x8, 0x5, 0x3, '\x00', 0x5, 0xffff}) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x18) (async) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000000)={[0xd000, 0x1000, 0x4, 0x3000], 0x0, 0x5, 0x8}) (async) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x4, @dev={0xac, 0x14, 0x14, 0x24}, 0x4e23, 0x2, 'sed\x00', 0xe, 0x8, 0x2c}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e22, 0x1, 0x7, 0x7fffffff, 0x4}}, 0x44) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.151465351s ago: executing program 3 (id=443): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5332, &(0x7f0000000400)={{}, 0x1, 0x7, 0x0, {}, 0x0, 0x9ae}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) 3.106960152s ago: executing program 0 (id=444): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="0d0000002000010300000000000000000200000400"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x0) 2.950455542s ago: executing program 0 (id=445): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000001d80), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa3f, {{0xa, 0x4e21, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @remote}, r1, 0x3}}, 0x48) (fail_nth: 4) 2.874318753s ago: executing program 3 (id=446): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}, 0x1, 0x0, 0x0, 0x40011}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}, 0x1, 0x0, 0x0, 0x40011}, 0x0) 2.574795282s ago: executing program 2 (id=447): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000480)=0xfff9, &(0x7f00000004c0)=0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x7fffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c00000010000304000000001f00000000007400", @ANYRES32=r8, @ANYBLOB="00000000031201003c0012800b00010062726964676500002c0002800800050001000000060027000000000008000100150000000800040009000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r7) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.188383795s ago: executing program 1 (id=448): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480)=[{{&(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/59, 0x3b}, {&(0x7f0000000340)=""/58, 0x3a}], 0x2, &(0x7f00000003c0)=""/183, 0xb7}, 0x3}], 0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x0, 0x1}, &(0x7f00000004c0)=0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001a005f3814f9dc070009040180002000000000000000000008000f0040000000", 0x24) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000040)="100c060026220300000000000000", 0xe, 0xfffffffffffffffc) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x2000, 0xf86}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000180)='blkio.bfq.io_service_time\x00', 0x0, 0x0) 2.187686866s ago: executing program 3 (id=449): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r2}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x80, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}, @IFLA_AF_SPEC={0x58, 0x1a, 0x0, 0x1, [@AF_INET6={0x48, 0x4, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0xb}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x4}, @AF_MPLS={0x4}]}]}, 0x80}}, 0x0) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f00000001c0)={0x0, 0x5, 0x8, '\x00', &(0x7f0000000180)=0xec}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) readahead(r5, 0x919f, 0x10000) openat$cgroup_type(r4, &(0x7f0000000200), 0x2, 0x0) 1.89020928s ago: executing program 0 (id=450): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0xeebc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000580)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000003c0)={'a', ' *:* ', 'm\x00'}, 0x8) r3 = openat$cgroup_devices(r1, &(0x7f0000019080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)={'a', ' *:* ', 'm\x00'}, 0x8) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:* w2'], 0x8) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000019140)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000019080), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r6}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') mknod$loop(&(0x7f00000190c0)='./file0\x00', 0x8000, 0x0) pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x8000) 1.323880765s ago: executing program 1 (id=451): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x796, 0x0, 0x0, 0x7fff}) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x100) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x60000, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dfe, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x80080400) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xe, &(0x7f0000000000), &(0x7f0000000080)=0x4) 1.323282113s ago: executing program 3 (id=452): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20202, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r2, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000140)="10eba9fdb4cbab48929e1af15100"/28, 0x1c}], 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001140)=@generic={&(0x7f0000001100)='./file0\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) r6 = syz_open_dev$media(&(0x7f0000000680), 0x8, 0x8000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f00000006c0)=0xffffffffffffffff) ioctl$FIONREAD(r7, 0x541b, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) close_range(r0, 0xffffffffffffffff, 0x0) 1.171263321s ago: executing program 2 (id=453): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20202, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r2, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000140)="10eba9fdb4cbab48929e1af15100"/28, 0x1c}], 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001140)=@generic={&(0x7f0000001100)='./file0\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) r6 = syz_open_dev$media(&(0x7f0000000680), 0x8, 0x8000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f00000006c0)=0xffffffffffffffff) ioctl$FIONREAD(r7, 0x541b, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) close_range(r0, 0xffffffffffffffff, 0x0) 427.588781ms ago: executing program 3 (id=454): syz_usb_connect(0x3, 0x53, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000243fe21082054700813501020301090241000100fd000009040200023470da000a240104000102010206240403074a090507084000050603072501820209000905091000020b1706070527efa0fc"], 0x0) syz_io_uring_setup(0x25ef, &(0x7f00000000c0)={0x0, 0xf9b0, 0x2000, 0x0, 0x2d7}, &(0x7f0000000000), &(0x7f0000000140)) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000300)="d8cda9fcd2270008749c0bea0d277045598c05ac5c53e3e307bd768b16010b006c5652dc4c0771af6d19345dac25202e49a6ac960a64753fe6ba052249b967f5d59b5a92bdcfa8fb825827db6c8f73c67183e64d21d522f66b402523679186aa7f1412c9745bac46317043456a2e8f93127c63a6f4ecdfa84a6e12d34963cb6124cd08958646f373fb59512f1068e7a5ec819ec6c17f90aad15dee4bec8c236ed0967a1103c51fa58bab7c6b2e9dad425cf39e77736d000f78819f6c94f76ed4"}], 0x5) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f0000000100)="764c0328") syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x20006) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) 421.52726ms ago: executing program 2 (id=455): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0x4, {0x0, 0x0, 0x0, {0x5, 0x1002, 0x5, 0xa8, 0x6bf2, 0xfffffffffffffffd, 0x6, 0x10, 0xd, 0x8000, 0x180000, 0x0, 0x0, 0xce}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000340)='./file1\x00', 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000f80)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES32, @ANYRES16=r1, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 289.461895ms ago: executing program 1 (id=456): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat$incfs(r1, &(0x7f0000000180)='.log\x00', 0x101102, 0x3) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x4a, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001940)) ioctl$VHOST_SET_VRING_ENDIAN(r7, 0x4008af13, &(0x7f0000000300)) sendmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="34615e9d48b2ce6ddf6627a63629f582db8b5f1984ded6d95f99139b5caeddb5b1451f41392391284244262b1bd742f5c2344b71abb789092dd90107a68375ade3f533e149a304993100acdde5590f60b2b51a60ac156e3615ebbd5863613ebef0c30fad46068cddda33a7c940c08249602c8b7f177227610c478dea1e822b560468a2f43274817b122493c4eeb597b283fb4b58c062b784d63861981be3564c722c968ca7e0d9c352489a763cec9f34034e2264a1a99219fa1758edaf127bde837c57ac6cf50ed28d419f941f053003cb56fb4b80b31055e6ad8fe842", 0xdd}, {&(0x7f00000003c0)="966ba3ddb278dfc182b76851c2cccf1e48d8558a0813f4bafdf56e68d28cb791bcd12b55ecd084a46e674f6b6fc8b529b3ef049ce2bf0e20b7daaa06a7abf8d559d95403414dce602a94a2a79ef8ad5fba8c5afed641bf0008f45df1c0247f2974f1b10a8e73711f285a6494d0d9169dafaa4f12797534199733008e2d61a937ba214ffe34cd9974bf02df0f63d2f7ad3987b60fc2dafbf1921b31007ae909cd2b7156", 0xa3}, {&(0x7f0000000200)="d324f14f9a9fb801d608c47b0819eb414d8d85197c705f6ec791fc7ec01f7be2637d69c6cba155e29a708666d40de43b041a19811843a272d0c874ccaf1e7995aa8aaf82240fbb9b715c0a98f3449a712bb83b453e345a9ba75d7c144dcc64ef6a480d6b658a6adfdaf467", 0x6b}], 0x3, &(0x7f00000004c0)=[{0x90, 0x10b, 0x2, "4335467e0f31075f292032d50dc0d1761a718c6c59de9f9a5dc448f1d938a036f52ce8131a1e719592c9d98dd03d4c78632b417bc99739e2a67c04e6123b441736b7ebd07391af4a6038ba5a038d025d91ead52ab64afe0d4897c448e3137fbed937b823e484c2193bd4dd0aa6f90ed29d3cbd4188a8f259c9f03253023e"}, {0x88, 0x103, 0x0, "e2019f117500fdf25740232dafb9fdf85d51bcefda7f8d31f762ca6fce794716de6d34ea197868261e2f0393a18a3396141b137019de4dc04a580424bb30f4ff4bc790a0f7b7d13d6d4292e6f176c5ad8d25b81cec3edccf0a2ce9f14d2a59c76c0e2f1b7440806f03806dc02c4d20fdee2c669e274f24"}], 0x118}, 0x20000801) ioprio_get$uid(0x2, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f636b20696f58f4dce93d3b2d2b6d656d00"], 0xc) write$vga_arbiter(r9, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) close_range(r8, 0xffffffffffffffff, 0x0) 287.742265ms ago: executing program 4 (id=457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fsopen(&(0x7f0000000040)='bpf\x00', 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, 0x3, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 190.263496ms ago: executing program 0 (id=458): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000b40)='oom_adj\x00') write$yama_ptrace_scope(r2, &(0x7f0000000dc0)='3\x00', 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)={0x5c, 0x55, '\x00', [@generic={0x35, 0xf7, "c5fb541ee46a3a30c483aea86fa4eab2f194a1a0085aca010f7ce39ac412ba3f91960c58158a67d15561ab94c81dd9418fab7998c73d6c9ccfcc46685d133da0f2b8737a2be21080a6606e8cf2ef282931f13f69c0c6ec5fdcd2de179c0baebbc6f8b91421aaedeb3e564589f391d3fa8a5945610db767f5a7dca50ef4f2bf00d3871dc4246ad592fa38f1ab37273ef054984651f568830a91f2bea6a7ac20f5b5c284cd3698ea5b5caed49e4be75fad9efb3ef0c8509f1432ec52d3d58caa7adbd493bd5d4225bc6a60e0130b8a431e07675f27d47be5f42daa866624ee732cd38dba4851a9e0bf8dc3e74ec4c400d501418e0aeb8db0"}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @generic={0x1, 0xa2, "ad62ac312691ad6a78554ad238c9ef440b2b37d0813e6c1581cd3acc859030b5554311f530e50cba6914d8bebd24a5608c1dc90bb1925a07f6bcf59611fca62502f6c5c42196ba3adfd71c36950f5e6e1eedb09e83034824932cfc298edf86d89b98455ff96b365bc7dcdaf2d42b7a27b0b50a52fb5062f5a6af328ca38af1f1126f374e58134528d54c3a1f47a854eea5b1933a3ac6acfcd72e5a9d509188994136"}, @ra={0x5, 0x2, 0xf3}, @generic={0x2, 0xcd, "aeb2084c189bdfd5b0e74ba2023145926580990af0780456b1c73526995b6ceef2faf4129e93f777f7eceac8aa3fcd69f54e4e9317c96962f2a7fdad83d2c8f0e9482d3bf89333214288e218bcfab6c44f54c2f4d339573fc7b15afc1b8733722a9e32ea4a4e3eafbc98fd52a711e0b48a77c15eb412809ffe9113b80662221a0f32d00497c6b751477f27412f34ff508f42f99afbe30a7459677571ec7fe1f30ab438eb8059a647cfe232e92e42d9581d742132abb7c97edeedbe307f8e32669955dcdd06fa6d821b6c89e183"}, @enc_lim={0x4, 0x1, 0xa1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x42, 0x1a, "9e7ca33c13ed2cd7ba237fd0b631399ba9529fec00588c8f8ffa"}]}, 0x2b8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0xb) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000104000000000000000000000000e084d803253081241dbb4bc5c8ae91b0d537a83db2e46c6ca9cb0700000000000000656d42023d0433d0daf618809f3f676eae35ace55c7e870c167b6cacd8c1a4189e703854d1ff918ba7bd6790c4c7f100c3b9a0d436674e2a1ade229ba85e3ff0dc75a66b1e3056463376316cc4cc", @ANYRES32=0x0, @ANYBLOB="21000000000000002800128008000100687372001c00028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB="0500070001000000"], 0x48}}, 0x0) 30.303961ms ago: executing program 0 (id=459): syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7fa727", 0x0, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, @local}}}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8) 0s ago: executing program 1 (id=460): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000095006556d765358f8f620003f2e6f17cbf9d6f672331527365bb0000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0x2, &(0x7f0000006680)) mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) recvfrom(r1, &(0x7f00000009c0)=""/4096, 0x1000, 0x40000001, &(0x7f0000000100)=@can={0x1d, r2}, 0x80) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x5, [@enum={0xe, 0x8, 0x0, 0x6, 0x4, [{0xf, 0x9}, {0x4, 0xfffffff9}, {0xf, 0x8}, {0xd, 0x3}, {0xf, 0xe}, {0x2, 0x2c}, {0xb, 0x3ff}, {0x1, 0xa}]}, @ptr={0xd, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x0, 0x61, 0x61]}}, &(0x7f0000000240)=""/53, 0x75, 0x35, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f00000004c0)=""/86, 0x56, 0x0, &(0x7f00000007c0)=""/218, 0xda}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0xf, 0x2, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200}], &(0x7f0000000180)='GPL\x00', 0x2c1, 0x0, 0x0, 0x41100, 0x6c, '\x00', r2, @cgroup_device, r7, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x4, 0x1, 0x1}, 0x10, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) kernel console output (not intermixed with test programs): ce number 2 using dummy_hcd [ 85.881644][ T971] usb 1-1: config 0 descriptor?? [ 85.894099][ T6220] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.898896][ T6240] FAULT_INJECTION: forcing a failure. [ 85.898896][ T6240] name failslab, interval 1, probability 0, space 0, times 1 [ 85.901420][ T6220] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.948030][ T971] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 85.975835][ T6240] CPU: 0 UID: 0 PID: 6240 Comm: syz.1.58 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 85.975858][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 85.975867][ T6240] Call Trace: [ 85.975873][ T6240] [ 85.975879][ T6240] dump_stack_lvl+0x16c/0x1f0 [ 85.975901][ T6240] should_fail_ex+0x512/0x640 [ 85.975912][ T6240] ? __kmalloc_noprof+0xbf/0x510 [ 85.975924][ T6240] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 85.975941][ T6240] should_failslab+0xc2/0x120 [ 85.975953][ T6240] __kmalloc_noprof+0xd2/0x510 [ 85.975966][ T6240] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 85.975984][ T6240] ? cred_has_capability.isra.0+0x193/0x2f0 [ 85.976001][ T6240] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 85.976018][ T6240] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 85.976039][ T6240] ? bpf_lsm_capable+0x9/0x10 [ 85.976048][ T6240] ? security_capable+0x7e/0x260 [ 85.976064][ T6240] genl_rcv_msg+0x55c/0x800 [ 85.976081][ T6240] ? __pfx_genl_rcv_msg+0x10/0x10 [ 85.976097][ T6240] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 85.976112][ T6240] ? __lock_acquire+0xaa4/0x1ba0 [ 85.976125][ T6240] netlink_rcv_skb+0x16a/0x440 [ 85.976139][ T6240] ? __pfx_genl_rcv_msg+0x10/0x10 [ 85.976156][ T6240] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 85.976177][ T6240] ? __pfx_down_read+0x10/0x10 [ 85.976193][ T6240] ? netlink_deliver_tap+0x1ae/0xd30 [ 85.976213][ T6240] genl_rcv+0x28/0x40 [ 85.976227][ T6240] netlink_unicast+0x53a/0x7f0 [ 85.976244][ T6240] ? __pfx_netlink_unicast+0x10/0x10 [ 85.976261][ T6240] netlink_sendmsg+0x8d1/0xdd0 [ 85.976278][ T6240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.976299][ T6240] ____sys_sendmsg+0xa95/0xc70 [ 85.976316][ T6240] ? copy_msghdr_from_user+0x10a/0x160 [ 85.976329][ T6240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.976351][ T6240] ___sys_sendmsg+0x134/0x1d0 [ 85.976364][ T6240] ? __pfx____sys_sendmsg+0x10/0x10 [ 85.976394][ T6240] __sys_sendmsg+0x16d/0x220 [ 85.976406][ T6240] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.976423][ T6240] ? rcu_is_watching+0x12/0xc0 [ 85.976440][ T6240] do_syscall_64+0xcd/0x260 [ 85.976456][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.976466][ T6240] RIP: 0033:0x7f890658d169 [ 85.976475][ T6240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.976484][ T6240] RSP: 002b:00007f8907345038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.976494][ T6240] RAX: ffffffffffffffda RBX: 00007f89067a5fa0 RCX: 00007f890658d169 [ 85.976500][ T6240] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 85.976506][ T6240] RBP: 00007f8907345090 R08: 0000000000000000 R09: 0000000000000000 [ 85.976511][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.976516][ T6240] R13: 0000000000000000 R14: 00007f89067a5fa0 R15: 00007fffbaf75da8 [ 85.976529][ T6240] [ 86.262750][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.701241][ T24] usb 3-1: descriptor type invalid, skip [ 86.728575][ T24] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 86.835168][ T24] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.848469][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 86.858694][ T24] usb 3-1: string descriptor 0 read error: -22 [ 86.868564][ T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.40 [ 87.334015][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.507535][ T5871] usb 1-1: USB disconnect, device number 2 [ 87.543194][ T24] usb 3-1: can't set config #1, error -71 [ 87.656330][ T5871] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 87.961646][ T24] usb 3-1: USB disconnect, device number 2 [ 88.232021][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 88.232038][ T30] audit: type=1400 audit(1744698248.767:248): avc: denied { create } for pid=6251 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.058070][ T30] audit: type=1400 audit(1744698249.777:249): avc: denied { mount } for pid=6256 comm="syz.1.63" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 90.304928][ T30] audit: type=1400 audit(1744698251.037:250): avc: denied { bind } for pid=6269 comm="syz.4.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.357440][ T6276] netlink: 'syz.3.69': attribute type 11 has an invalid length. [ 90.357452][ T6276] netlink: 224 bytes leftover after parsing attributes in process `syz.3.69'. [ 90.417016][ T6268] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.418264][ T6268] netlink: 'syz.1.63': attribute type 10 has an invalid length. [ 90.434344][ T30] audit: type=1400 audit(1744698251.037:251): avc: denied { write } for pid=6274 comm="syz.0.70" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 90.473640][ T30] audit: type=1400 audit(1744698251.117:252): avc: denied { write } for pid=6269 comm="syz.4.66" path="socket:[9439]" dev="sockfs" ino=9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.559755][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.914357][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.251875][ T5871] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.472791][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 91.488598][ T24] usb 3-1: New USB device found, idVendor=0457, idProduct=0a00, bcdDevice= 0.00 [ 91.498436][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.508492][ T24] usb 3-1: config 0 descriptor?? [ 91.635894][ T30] audit: type=1400 audit(1744698252.367:253): avc: denied { write } for pid=6296 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 91.650006][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.75'. [ 91.666968][ T5871] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 91.688183][ T5871] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 91.713459][ T5871] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 91.753149][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.787159][ T6282] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 91.801774][ T5871] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 91.812188][ T6298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.75'. [ 91.853654][ T6298] veth0_vlan: entered allmulticast mode [ 91.918349][ T6298] veth0_vlan: left promiscuous mode [ 92.247300][ T6298] veth0_vlan: entered promiscuous mode [ 92.408718][ T5871] usb 4-1: USB disconnect, device number 2 [ 93.036928][ T30] audit: type=1400 audit(1744698253.767:254): avc: denied { block_suspend } for pid=6281 comm="syz.3.72" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 93.144447][ T30] audit: type=1400 audit(1744698253.797:255): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 93.381168][ T5871] usb 3-1: USB disconnect, device number 3 [ 93.497997][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 94.513009][ T30] audit: type=1400 audit(1744698255.097:256): avc: denied { bind } for pid=6316 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.733026][ T30] audit: type=1400 audit(1744698255.097:257): avc: denied { name_bind } for pid=6316 comm="syz.1.81" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 94.754499][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.763056][ T30] audit: type=1400 audit(1744698255.097:258): avc: denied { node_bind } for pid=6316 comm="syz.1.81" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 95.133565][ T30] audit: type=1400 audit(1744698255.837:259): avc: denied { setopt } for pid=6327 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.368802][ T30] audit: type=1400 audit(1744698255.837:260): avc: denied { create } for pid=6327 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 95.388189][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.780783][ T30] audit: type=1400 audit(1744698255.837:261): avc: denied { listen } for pid=6327 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 96.306481][ T30] audit: type=1400 audit(1744698255.837:262): avc: denied { accept } for pid=6327 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 96.580737][ T30] audit: type=1400 audit(1744698255.887:263): avc: denied { write } for pid=6327 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.655284][ T30] audit: type=1400 audit(1744698256.057:264): avc: denied { append } for pid=6332 comm="syz.2.83" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 96.927098][ T6350] sctp: [Deprecated]: syz.3.89 (pid 6350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.927098][ T6350] Use struct sctp_sack_info instead [ 97.019729][ T30] audit: type=1400 audit(1744698257.747:265): avc: denied { mount } for pid=6339 comm="syz.1.87" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 97.245782][ T6354] ======================================================= [ 97.245782][ T6354] WARNING: The mand mount option has been deprecated and [ 97.245782][ T6354] and is ignored by this kernel. Remove the mand [ 97.245782][ T6354] option from the mount to silence this warning. [ 97.245782][ T6354] ======================================================= [ 97.300736][ T971] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.423072][ T6361] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.426837][ T6361] netlink: 'syz.4.91': attribute type 10 has an invalid length. [ 97.629273][ T971] usb 4-1: Using ep0 maxpacket: 8 [ 97.648614][ T971] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 97.656690][ T971] usb 4-1: config 0 has no interface number 0 [ 97.662945][ T971] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.684266][ T971] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 97.713313][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.762320][ T971] usb 4-1: config 0 descriptor?? [ 97.782080][ T971] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 99.960972][ T6374] delete_channel: no stack [ 100.290492][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 100.290505][ T30] audit: type=1400 audit(1744698261.027:274): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 100.950928][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 102.249453][ T30] audit: type=1400 audit(1744698262.967:275): avc: denied { read write } for pid=6396 comm="syz.1.100" name="sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 102.273245][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.043197][ T6396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.509435][ T30] audit: type=1400 audit(1744698262.967:276): avc: denied { open } for pid=6396 comm="syz.1.100" path="/dev/sg0" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 103.509478][ T30] audit: type=1400 audit(1744698263.227:277): avc: denied { create } for pid=6396 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.680571][ T1203] usb 4-1: USB disconnect, device number 3 [ 104.024257][ T30] audit: type=1400 audit(1744698264.587:278): avc: denied { watch } for pid=6403 comm="syz.3.102" path="/17" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 104.024444][ T30] audit: type=1400 audit(1744698264.747:279): avc: denied { open } for pid=6402 comm="syz.0.104" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 104.108534][ T30] audit: type=1400 audit(1744698264.837:280): avc: denied { write } for pid=6405 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.743193][ T6407] pty pty21: ldisc open failed (-12), clearing slot 21 [ 105.138310][ T6424] [U] [ 105.140993][ T6424] [U] [ 105.143652][ T6424] [U] [ 105.146310][ T6424] [U] [ 105.149030][ T6424] [U] [ 105.151692][ T6424] [U] [ 105.154348][ T6424] [U] [ 105.157004][ T6424] [U] [ 105.159854][ T6424] [U] [ 105.162519][ T6424] [U] [ 105.165172][ T6424] [U] [ 105.167826][ T6424] [U] [ 105.170524][ T6424] [U] [ 105.173182][ T6424] [U] [ 105.175837][ T6424] [U] [ 105.178491][ T6424] [U] [ 105.181177][ T6424] [U] [ 105.183838][ T6424] [U] [ 105.186491][ T6424] [U] [ 105.189147][ T6424] [U] [ 105.191830][ T6424] [U] [ 105.194487][ T6424] [U] [ 105.197146][ T6424] [U] [ 105.199803][ T6424] [U] [ 105.202561][ T6424] [U] [ 105.205224][ T6424] [U] [ 105.207881][ T6424] [U] [ 105.210538][ T6424] [U] [ 105.213251][ T6424] [U] [ 105.215909][ T6424] [U] [ 105.218573][ T6424] [U] [ 105.221239][ T6424] [U] [ 105.223942][ T6424] [U] [ 105.226610][ T6424] [U] [ 105.229267][ T6424] [U] [ 105.231923][ T6424] [U] [ 105.234595][ T6424] [U] [ 105.237254][ T6424] [U] [ 105.239926][ T6424] [U] [ 105.242585][ T6424] [U] [ 105.245275][ T6424] [U] [ 105.247932][ T6424] [U] [ 105.250591][ T6424] [U] [ 105.253250][ T6424] [U] [ 105.255932][ T6424] [U] [ 105.258598][ T6424] [U] [ 105.261258][ T6424] [U] [ 105.263914][ T6424] [U] [ 105.266613][ T6424] [U] [ 105.269274][ T6424] [U] [ 105.271933][ T6424] [U] [ 105.274589][ T6424] [U] [ 105.277266][ T6424] [U] [ 105.279927][ T6424] [U] [ 105.282584][ T6424] [U] [ 105.285240][ T6424] [U] [ 105.287961][ T6424] [U] [ 105.290632][ T6424] [U] [ 105.293288][ T6424] [U] [ 105.295946][ T6424] [U] [ 105.298619][ T6424] [U] [ 105.301277][ T6424] [U] [ 105.303935][ T6424] [U] [ 105.306593][ T6424] [U] [ 105.309295][ T6424] [U] [ 105.311955][ T6424] [U] [ 105.314613][ T6424] [U] [ 105.317272][ T6424] [U] [ 105.319947][ T6424] [U] [ 105.322605][ T6424] [U] [ 105.325261][ T6424] [U] [ 105.327919][ T6424] [U] [ 105.330597][ T6424] [U] [ 105.333255][ T6424] [U] [ 105.335914][ T6424] [U] [ 105.338572][ T6424] [U] [ 105.341259][ T6424] [U] [ 105.343917][ T6424] [U] [ 105.346573][ T6424] [U] [ 105.349229][ T6424] [U] [ 105.351910][ T6424] [U] [ 105.354570][ T6424] [U] [ 105.357226][ T6424] [U] [ 105.359892][ T6424] [U] [ 105.362595][ T6424] [U] [ 105.365256][ T6424] [U] [ 105.367924][ T6424] [U] [ 105.370582][ T6424] [U] [ 105.373259][ T6424] [U] [ 105.375917][ T6424] [U] [ 105.378575][ T6424] [U] [ 105.381243][ T6424] [U] [ 105.383916][ T6424] [U] [ 105.386576][ T6424] [U] [ 105.389234][ T6424] [U] [ 105.391892][ T6424] [U] [ 105.394571][ T6424] [U] [ 105.397229][ T6424] [U] [ 105.399887][ T6424] [U] [ 105.402545][ T6424] [U] [ 105.405235][ T6424] [U] [ 105.407895][ T6424] [U] [ 105.410562][ T6424] [U] [ 105.413225][ T6424] [U] [ 105.415903][ T6424] [U] [ 105.418575][ T6424] [U] [ 105.421231][ T6424] [U] [ 105.423890][ T6424] [U] [ 105.426565][ T6424] [U] [ 105.429222][ T6424] [U] [ 105.431881][ T6424] [U] [ 105.434549][ T6424] [U] [ 105.437228][ T6424] [U] [ 105.439888][ T6424] [U] [ 105.442544][ T6424] [U] [ 105.445201][ T6424] [U] [ 105.447891][ T6424] [U] [ 105.450549][ T6424] [U] [ 105.453205][ T6424] [U] [ 105.455864][ T6424] [U] [ 105.458558][ T6424] [U] [ 105.461229][ T6424] [U] [ 105.463890][ T6424] [U] [ 105.466548][ T6424] [U] [ 105.469244][ T6424] [U] [ 105.471904][ T6424] [U] [ 105.474560][ T6424] [U] [ 105.498823][ T6423] [U] [ 105.548626][ T30] audit: type=1400 audit(1744698266.277:281): avc: denied { create } for pid=6421 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 105.552305][ T6430] netlink: 'syz.3.110': attribute type 1 has an invalid length. [ 105.613886][ T30] audit: type=1400 audit(1744698266.337:282): avc: denied { write } for pid=6421 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 105.694505][ T30] audit: type=1400 audit(1744698266.417:283): avc: denied { write } for pid=6433 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 105.740406][ T30] audit: type=1400 audit(1744698266.467:284): avc: denied { write } for pid=6429 comm="syz.3.110" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.769596][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.112'. [ 105.851052][ T6445] netlink: 48 bytes leftover after parsing attributes in process `syz.1.111'. [ 105.851684][ T30] audit: type=1400 audit(1744698266.587:285): avc: denied { ioctl } for pid=6431 comm="syz.1.111" path="/dev/usbmon5" dev="devtmpfs" ino=731 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.885047][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.900283][ T6446] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 105.920996][ T6446] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 105.954253][ T6447] process 'syz.2.109' launched '/dev/fd/8' with NULL argv: empty string added [ 105.969554][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'. [ 106.028967][ T30] audit: type=1400 audit(1744698266.687:286): avc: denied { execute } for pid=6426 comm="syz.2.109" dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.061701][ T30] audit: type=1400 audit(1744698266.697:287): avc: denied { execute_no_trans } for pid=6426 comm="syz.2.109" path=2F6D656D66643A5B0BDB58AE5B35A990FF631F1AA9FDFAADD16D64E7E27F9BD55210F3B6FF54BFD1C8854858A9250C1A6510202864656C6574656429 dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.410355][ T6447] bridge_slave_1: left allmulticast mode [ 106.425162][ T6447] bridge_slave_1: left promiscuous mode [ 106.437605][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.564448][ T6447] bridge_slave_0: left allmulticast mode [ 106.572527][ T6447] bridge_slave_0: left promiscuous mode [ 106.583857][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.112547][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'. [ 108.121467][ T6469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.119'. [ 108.153992][ T6465] : entered promiscuous mode [ 108.202221][ T30] audit: type=1400 audit(1744698268.907:288): avc: denied { setopt } for pid=6464 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 108.309443][ T24] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 108.412592][ T30] audit: type=1400 audit(1744698269.147:289): avc: denied { setopt } for pid=6475 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.481622][ T6480] [U] [ 108.484315][ T6480] [U] [ 108.486977][ T6480] [U] [ 108.489652][ T6480] [U] [ 108.493616][ T6480] [U] [ 108.496282][ T6480] [U] [ 108.498944][ T6480] [U] [ 108.501602][ T6480] [U] [ 108.504322][ T6480] [U] [ 108.506981][ T6480] [U] [ 108.509641][ T6480] [U] [ 108.512296][ T6480] [U] [ 108.514976][ T6480] [U] [ 108.517635][ T6480] [U] [ 108.520293][ T6480] [U] [ 108.522948][ T6480] [U] [ 108.525636][ T6480] [U] [ 108.528296][ T6480] [U] [ 108.530954][ T6480] [U] [ 108.533623][ T6480] [U] [ 108.536319][ T6480] [U] [ 108.538979][ T6480] [U] [ 108.541639][ T6480] [U] [ 108.544298][ T6480] [U] [ 108.546982][ T6480] [U] [ 108.549642][ T6480] [U] [ 108.552302][ T6480] [U] [ 108.554960][ T6480] [U] [ 108.557643][ T6480] [U] [ 108.560301][ T6480] [U] [ 108.562958][ T6480] [U] [ 108.565617][ T6480] [U] [ 108.568356][ T6480] [U] [ 108.571019][ T6480] [U] [ 108.573689][ T6480] [U] [ 108.576352][ T6480] [U] [ 108.579049][ T6480] [U] [ 108.581707][ T6480] [U] [ 108.584368][ T6480] [U] [ 108.587027][ T6480] [U] [ 108.589734][ T6480] [U] [ 108.592392][ T6480] [U] [ 108.595051][ T6480] [U] [ 108.597708][ T6480] [U] [ 108.600382][ T6480] [U] [ 108.603047][ T6480] [U] [ 108.605706][ T6480] [U] [ 108.608363][ T6480] [U] [ 108.611069][ T6480] [U] [ 108.613731][ T6480] [U] [ 108.616387][ T6480] [U] [ 108.619051][ T6480] [U] [ 108.621727][ T6480] [U] [ 108.624388][ T6480] [U] [ 108.627057][ T6480] [U] [ 108.629716][ T6480] [U] [ 108.632406][ T6480] [U] [ 108.635074][ T6480] [U] [ 108.637732][ T6480] [U] [ 108.640389][ T6480] [U] [ 108.643064][ T6480] [U] [ 108.645721][ T6480] [U] [ 108.648379][ T6480] [U] [ 108.651042][ T6480] [U] [ 108.653721][ T6480] [U] [ 108.656381][ T6480] [U] [ 108.659042][ T6480] [U] [ 108.661698][ T6480] [U] [ 108.664368][ T6480] [U] [ 108.667031][ T6480] [U] [ 108.669690][ T6480] [U] [ 108.672360][ T6480] [U] [ 108.675054][ T6480] [U] [ 108.677714][ T6480] [U] [ 108.680380][ T6480] [U] [ 108.683042][ T6480] [U] [ 108.685722][ T6480] [U] [ 108.688381][ T6480] [U] [ 108.691042][ T6480] [U] [ 108.693701][ T6480] [U] [ 108.696386][ T6480] [U] [ 108.699050][ T6480] [U] [ 108.701719][ T6480] [U] [ 108.704375][ T6480] [U] [ 108.707051][ T6480] [U] [ 108.709709][ T6480] [U] [ 108.712365][ T6480] [U] [ 108.715022][ T6480] [U] [ 108.717704][ T6480] [U] [ 108.720363][ T6480] [U] [ 108.723039][ T6480] [U] [ 108.725702][ T6480] [U] [ 108.728384][ T6480] [U] [ 108.731055][ T6480] [U] [ 108.733716][ T6480] [U] [ 108.736373][ T6480] [U] [ 108.739074][ T6480] [U] [ 108.741735][ T6480] [U] [ 108.744408][ T6480] [U] [ 108.747065][ T6480] [U] [ 108.749737][ T6480] [U] [ 108.752396][ T6480] [U] [ 108.755056][ T6480] [U] [ 108.757720][ T6480] [U] [ 108.760405][ T6480] [U] [ 108.763066][ T6480] [U] [ 108.765722][ T6480] [U] [ 108.768398][ T6480] [U] [ 108.771084][ T6480] [U] [ 108.773742][ T6480] [U] [ 108.776400][ T6480] [U] [ 108.779058][ T6480] [U] [ 108.781737][ T6480] [U] [ 108.784407][ T6480] [U] [ 108.787064][ T6480] [U] [ 108.789723][ T6480] [U] [ 108.792404][ T6480] [U] [ 108.795064][ T6480] [U] [ 108.797723][ T6480] [U] [ 108.800381][ T6480] [U] [ 108.803095][ T6480] [U] [ 108.805772][ T6480] [U] [ 108.808428][ T6480] [U] [ 108.811087][ T6480] [U] [ 108.813764][ T6480] [U] [ 108.816423][ T6480] [U] [ 108.819087][ T6480] [U] [ 108.846156][ T24] usb 4-1: descriptor type invalid, skip [ 108.854752][ T24] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 109.015012][ T6481] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.022300][ T6481] netlink: 'syz.4.123': attribute type 10 has an invalid length. [ 109.162984][ T6479] [U] [ 109.170617][ T24] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.202252][ T30] audit: type=1400 audit(1744698269.897:290): avc: denied { rename } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.301999][ T6485] Zero length message leads to an empty skb [ 109.492643][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 109.607225][ T24] usb 4-1: string descriptor 0 read error: -22 [ 109.676228][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.40 [ 109.792653][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.021152][ T6462] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 110.077129][ T6483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.275560][ T6489] [U] [ 110.278251][ T6489] [U] [ 110.280934][ T6489] [U] [ 110.283620][ T6489] [U] [ 110.579542][ T6489] [U] [ 110.582269][ T6489] [U] [ 110.584958][ T6489] [U] [ 110.587644][ T6489] [U] [ 110.646519][ T24] usbhid 4-1:1.0: can't add hid device: -71 [ 110.667744][ T30] audit: type=1400 audit(1744698269.897:291): avc: denied { unlink } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.718499][ T6489] [U] [ 110.721216][ T6489] [U] [ 110.723900][ T6489] [U] [ 110.726582][ T6489] [U] [ 110.733475][ T6489] [U] [ 110.736177][ T6489] [U] [ 110.738863][ T6489] [U] [ 110.741554][ T6489] [U] [ 110.744377][ T24] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 110.757919][ T30] audit: type=1400 audit(1744698269.907:292): avc: denied { create } for pid=5178 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.780795][ T30] audit: type=1400 audit(1744698271.507:293): avc: denied { read } for pid=6491 comm="syz.0.127" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 110.804491][ T30] audit: type=1400 audit(1744698271.517:294): avc: denied { create } for pid=6491 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 110.816972][ T6492] input: syz0 as /devices/virtual/input/input5 [ 110.825283][ T30] audit: type=1400 audit(1744698271.517:295): avc: denied { setopt } for pid=6491 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 110.858476][ T24] usb 4-1: USB disconnect, device number 4 [ 110.864896][ T6489] [U] [ 110.867592][ T6489] [U] [ 110.870266][ T6489] [U] [ 110.872934][ T6489] [U] [ 110.885670][ T6489] [U] [ 110.888372][ T6489] [U] [ 110.889495][ T5873] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.891047][ T6489] [U] [ 110.901173][ T6489] [U] [ 110.904098][ T6489] [U] [ 110.906787][ T6489] [U] [ 110.909476][ T6489] [U] [ 110.912164][ T6489] [U] [ 110.915009][ T6489] [U] [ 110.917697][ T6489] [U] [ 110.920387][ T6489] [U] [ 110.923066][ T6489] [U] [ 110.926029][ T6489] [U] [ 110.928724][ T6489] [U] [ 110.931413][ T6489] [U] [ 110.934102][ T6489] [U] [ 110.943437][ T30] audit: type=1400 audit(1744698271.677:296): avc: denied { read } for pid=5181 comm="acpid" name="event4" dev="devtmpfs" ino=2774 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.965847][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.972173][ T6489] [U] [ 110.974877][ T6489] [U] [ 110.977566][ T6489] [U] [ 110.980239][ T6489] [U] [ 110.982463][ T30] audit: type=1400 audit(1744698271.677:297): avc: denied { open } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2774 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.008431][ T30] audit: type=1400 audit(1744698271.677:298): avc: denied { ioctl } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2774 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.033267][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.033406][ T6489] [U] [ 111.079855][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 111.093850][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.102916][ T5873] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 111.119424][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.126440][ T30] audit: type=1400 audit(1744698271.857:299): avc: denied { create } for pid=6496 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.134312][ T5873] usb 5-1: Product: syz [ 111.146763][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.158337][ T5873] usb 5-1: Manufacturer: syz [ 111.163356][ T5873] usb 5-1: SerialNumber: syz [ 111.168892][ T30] audit: type=1400 audit(1744698271.887:300): avc: denied { connect } for pid=6496 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.191865][ T5873] usb 5-1: config 0 descriptor?? [ 111.299790][ T5859] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.523152][ T5859] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 111.538296][ T5859] usb 1-1: config 1 has no interface number 0 [ 111.559694][ T5859] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.573605][ T5859] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 111.582886][ T5859] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 111.594813][ T5859] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 111.609320][ T5859] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.618682][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.638542][ T5859] usb 1-1: Product: syz [ 111.644567][ T5859] usb 1-1: Manufacturer: syz [ 111.649229][ T5859] usb 1-1: SerialNumber: syz [ 111.718576][ T5873] gs_usb 5-1:0.0: Configuring for 196 interfaces [ 111.736065][ T5873] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 111.749623][ T5873] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 111.829678][ T5872] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.863794][ T6492] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 111.975903][ T5873] usb 5-1: USB disconnect, device number 2 [ 111.992053][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 112.000811][ T5872] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.027596][ T5872] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.062610][ T5872] usb 2-1: config 0 interface 0 has no altsetting 0 [ 112.079432][ T5872] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 112.106912][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.141847][ T5872] usb 2-1: config 0 descriptor?? [ 112.600248][ T6492] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.615775][ T5859] cdc_ncm 1-1:1.1: bind() failure [ 112.633752][ T5872] saitek 0003:06A3:0621.0001: unknown main item tag 0x0 [ 112.644295][ T5872] saitek 0003:06A3:0621.0001: unknown main item tag 0x0 [ 112.651607][ T5872] saitek 0003:06A3:0621.0001: unknown main item tag 0x0 [ 112.658734][ T5872] saitek 0003:06A3:0621.0001: unknown main item tag 0x0 [ 112.666248][ T5872] saitek 0003:06A3:0621.0001: unknown main item tag 0x0 [ 112.677663][ T5872] saitek 0003:06A3:0621.0001: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.1-1/input0 [ 112.838206][ T5873] usb 2-1: USB disconnect, device number 2 [ 113.606245][ T5873] usb 1-1: USB disconnect, device number 3 [ 113.663619][ T6539] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.676526][ T6539] netlink: 'syz.4.142': attribute type 10 has an invalid length. [ 113.855580][ T6541] [U] [ 113.858270][ T6541] [U] [ 113.860935][ T6541] [U] [ 113.863596][ T6541] [U] [ 113.866343][ T6541] [U] [ 113.869018][ T6541] [U] [ 113.871679][ T6541] [U] [ 113.874336][ T6541] [U] [ 113.877133][ T6541] [U] [ 113.879812][ T6541] [U] [ 113.882472][ T6541] [U] [ 113.885140][ T6541] [U] [ 113.887848][ T6541] [U] [ 113.890510][ T6541] [U] [ 113.893169][ T6541] [U] [ 113.895824][ T6541] [U] [ 113.898520][ T6541] [U] [ 113.901181][ T6541] [U] [ 113.903839][ T6541] [U] [ 113.906498][ T6541] [U] [ 113.909191][ T6541] [U] [ 113.911856][ T6541] [U] [ 113.914518][ T6541] [U] [ 113.917198][ T6541] [U] [ 113.919929][ T6541] [U] [ 113.922594][ T6541] [U] [ 113.925258][ T6541] [U] [ 113.927938][ T6541] [U] [ 113.930649][ T6541] [U] [ 113.933311][ T6541] [U] [ 113.935972][ T6541] [U] [ 113.938642][ T6541] [U] [ 113.941353][ T6541] [U] [ 113.944019][ T6541] [U] [ 113.946691][ T6541] [U] [ 113.949349][ T6541] [U] [ 113.952053][ T6541] [U] [ 113.954717][ T6541] [U] [ 113.957377][ T6541] [U] [ 113.960040][ T6541] [U] [ 113.962738][ T6541] [U] [ 113.965401][ T6541] [U] [ 113.968069][ T6541] [U] [ 113.970732][ T6541] [U] [ 113.973428][ T6541] [U] [ 113.976096][ T6541] [U] [ 113.978753][ T6541] [U] [ 113.981425][ T6541] [U] [ 113.984122][ T6541] [U] [ 113.986783][ T6541] [U] [ 113.989445][ T6541] [U] [ 113.992104][ T6541] [U] [ 113.994796][ T6541] [U] [ 113.997456][ T6541] [U] [ 114.000118][ T6541] [U] [ 114.002779][ T6541] [U] [ 114.005491][ T6541] [U] [ 114.008153][ T6541] [U] [ 114.010814][ T6541] [U] [ 114.013473][ T6541] [U] [ 114.016153][ T6541] [U] [ 114.018816][ T6541] [U] [ 114.021475][ T6541] [U] [ 114.024136][ T6541] [U] [ 114.026849][ T6541] [U] [ 114.029521][ T6541] [U] [ 114.032187][ T6541] [U] [ 114.034847][ T6541] [U] [ 114.037544][ T6541] [U] [ 114.040205][ T6541] [U] [ 114.042866][ T6541] [U] [ 114.045537][ T6541] [U] [ 114.048233][ T6541] [U] [ 114.050897][ T6541] [U] [ 114.053572][ T6541] [U] [ 114.056230][ T6541] [U] [ 114.058910][ T6541] [U] [ 114.061576][ T6541] [U] [ 114.064235][ T6541] [U] [ 114.066893][ T6541] [U] [ 114.069597][ T6541] [U] [ 114.072260][ T6541] [U] [ 114.074927][ T6541] [U] [ 114.077588][ T6541] [U] [ 114.080355][ T6541] [U] [ 114.083017][ T6541] [U] [ 114.085688][ T6541] [U] [ 114.088352][ T6541] [U] [ 114.091040][ T6541] [U] [ 114.093708][ T6541] [U] [ 114.096378][ T6541] [U] [ 114.099041][ T6541] [U] [ 114.101728][ T6541] [U] [ 114.104390][ T6541] [U] [ 114.107048][ T6541] [U] [ 114.109707][ T6541] [U] [ 114.112416][ T6541] [U] [ 114.115091][ T6541] [U] [ 114.117761][ T6541] [U] [ 114.120430][ T6541] [U] [ 114.123115][ T6541] [U] [ 114.125776][ T6541] [U] [ 114.128438][ T6541] [U] [ 114.131099][ T6541] [U] [ 114.133798][ T6541] [U] [ 114.136459][ T6541] [U] [ 114.139119][ T6541] [U] [ 114.141794][ T6541] [U] [ 114.144476][ T6541] [U] [ 114.147137][ T6541] [U] [ 114.149805][ T6541] [U] [ 114.152475][ T6541] [U] [ 114.155184][ T6541] [U] [ 114.157844][ T6541] [U] [ 114.160517][ T6541] [U] [ 114.163189][ T6541] [U] [ 114.165871][ T6541] [U] [ 114.168542][ T6541] [U] [ 114.171223][ T6541] [U] [ 114.173882][ T6541] [U] [ 114.176585][ T6541] [U] [ 114.179246][ T6541] [U] [ 114.181904][ T6541] [U] [ 114.184584][ T6541] [U] [ 114.187276][ T6541] [U] [ 114.189937][ T6541] [U] [ 114.192596][ T6541] [U] [ 114.272170][ T6540] [U] [ 115.235625][ T5873] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 115.738910][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 115.749637][ T30] audit: type=1400 audit(1744698276.457:305): avc: denied { setopt } for pid=6564 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.849463][ T5873] usb 2-1: descriptor type invalid, skip [ 115.849976][ T30] audit: type=1400 audit(1744698276.457:306): avc: denied { name_bind } for pid=6564 comm="syz.3.152" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 115.910406][ T5873] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 115.921538][ T5873] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.937541][ T5873] usb 2-1: config 1 interface 0 has no altsetting 0 [ 115.961506][ T5873] usb 2-1: string descriptor 0 read error: -22 [ 115.968252][ T5873] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.40 [ 115.986703][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.006196][ T6549] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.053914][ T30] audit: type=1400 audit(1744698276.787:307): avc: denied { ioctl } for pid=6572 comm="syz.2.154" path="socket:[10418]" dev="sockfs" ino=10418 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.189771][ T30] audit: type=1400 audit(1744698276.937:308): avc: denied { read append } for pid=6572 comm="syz.2.154" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 117.213302][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.238711][ T30] audit: type=1400 audit(1744698277.027:309): avc: denied { open } for pid=6572 comm="syz.2.154" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 118.551641][ T5873] usbhid 2-1:1.0: can't add hid device: -71 [ 118.559078][ T5873] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 118.574499][ T5873] usb 2-1: USB disconnect, device number 3 [ 118.685597][ T6591] [U] [ 118.688294][ T6591] [U] [ 118.690979][ T6591] [U] [ 118.693652][ T6591] [U] [ 118.696442][ T6591] [U] [ 118.699117][ T6591] [U] [ 118.701779][ T6591] [U] [ 118.704448][ T6591] [U] [ 118.707178][ T6591] [U] [ 118.709841][ T6591] [U] [ 118.712515][ T6591] [U] [ 118.715176][ T6591] [U] [ 118.717911][ T6591] [U] [ 118.720574][ T6591] [U] [ 118.723233][ T6591] [U] [ 118.725891][ T6591] [U] [ 118.728617][ T6591] [U] [ 118.731294][ T6591] [U] [ 118.733958][ T6591] [U] [ 118.736647][ T6591] [U] [ 118.739407][ T6591] [U] [ 118.742079][ T6591] [U] [ 118.744741][ T6591] [U] [ 118.747399][ T6591] [U] [ 118.750132][ T6591] [U] [ 118.752796][ T6591] [U] [ 118.755459][ T6591] [U] [ 118.758122][ T6591] [U] [ 118.760830][ T6591] [U] [ 118.763492][ T6591] [U] [ 118.766158][ T6591] [U] [ 118.768819][ T6591] [U] [ 118.771579][ T6591] [U] [ 118.774243][ T6591] [U] [ 118.776903][ T6591] [U] [ 118.779571][ T6591] [U] [ 118.782319][ T6591] [U] [ 118.784984][ T6591] [U] [ 118.787657][ T6591] [U] [ 118.790328][ T6591] [U] [ 118.793052][ T6591] [U] [ 118.795723][ T6591] [U] [ 118.798392][ T6591] [U] [ 118.801053][ T6591] [U] [ 118.803772][ T6591] [U] [ 118.806436][ T6591] [U] [ 118.809109][ T6591] [U] [ 118.811771][ T6591] [U] [ 118.814494][ T6591] [U] [ 118.817157][ T6591] [U] [ 118.819818][ T6591] [U] [ 118.822476][ T6591] [U] [ 118.825186][ T6591] [U] [ 118.827846][ T6591] [U] [ 118.830518][ T6591] [U] [ 118.833176][ T6591] [U] [ 118.835891][ T6591] [U] [ 118.838564][ T6591] [U] [ 118.841223][ T6591] [U] [ 118.843886][ T6591] [U] [ 118.846590][ T6591] [U] [ 118.849251][ T6591] [U] [ 118.851910][ T6591] [U] [ 118.854578][ T6591] [U] [ 118.857297][ T6591] [U] [ 118.859966][ T6591] [U] [ 118.862624][ T6591] [U] [ 118.865282][ T6591] [U] [ 118.868064][ T6591] [U] [ 118.870737][ T6591] [U] [ 118.873398][ T6591] [U] [ 118.876059][ T6591] [U] [ 118.878798][ T6591] [U] [ 118.881470][ T6591] [U] [ 118.884153][ T6591] [U] [ 118.886828][ T6591] [U] [ 118.889960][ T6591] [U] [ 118.892633][ T6591] [U] [ 118.895296][ T6591] [U] [ 118.897958][ T6591] [U] [ 118.900701][ T6591] [U] [ 118.903362][ T6591] [U] [ 118.906022][ T6591] [U] [ 118.908683][ T6591] [U] [ 118.911386][ T6591] [U] [ 118.914058][ T6591] [U] [ 118.916716][ T6591] [U] [ 118.919386][ T6591] [U] [ 118.922114][ T6591] [U] [ 118.924779][ T6591] [U] [ 118.927437][ T6591] [U] [ 118.930097][ T6591] [U] [ 118.932814][ T6591] [U] [ 118.935476][ T6591] [U] [ 118.938146][ T6591] [U] [ 118.940818][ T6591] [U] [ 118.943534][ T6591] [U] [ 118.946202][ T6591] [U] [ 118.948874][ T6591] [U] [ 118.951532][ T6591] [U] [ 118.954240][ T6591] [U] [ 118.956904][ T6591] [U] [ 118.959568][ T6591] [U] [ 118.962228][ T6591] [U] [ 118.965003][ T6591] [U] [ 118.967668][ T6591] [U] [ 118.970342][ T6591] [U] [ 118.973001][ T6591] [U] [ 118.975710][ T6591] [U] [ 118.978370][ T6591] [U] [ 118.981040][ T6591] [U] [ 118.983703][ T6591] [U] [ 118.986427][ T6591] [U] [ 118.989089][ T6591] [U] [ 118.991751][ T6591] [U] [ 118.994420][ T6591] [U] [ 118.997129][ T6591] [U] [ 118.999792][ T6591] [U] [ 119.002452][ T6591] [U] [ 119.005121][ T6591] [U] [ 119.007845][ T6591] [U] [ 119.010508][ T6591] [U] [ 119.013167][ T6591] [U] [ 119.015837][ T6591] [U] [ 119.018559][ T6591] [U] [ 119.021230][ T6591] [U] [ 119.023893][ T6591] [U] [ 119.057149][ T6590] [U] [ 119.155210][ T6570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.453156][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 119.486247][ T5910] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.750843][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 119.756142][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 119.766433][ T30] audit: type=1400 audit(1744698280.497:310): avc: denied { bind } for pid=6603 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.787958][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 119.798472][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.808879][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 119.827876][ T5910] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 119.844605][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.853446][ T5910] usb 4-1: Product: syz [ 119.860716][ T5910] usb 4-1: Manufacturer: syz [ 119.866184][ T5910] usb 4-1: SerialNumber: syz [ 119.872589][ T6605] bond0: (slave bond_slave_0): Releasing backup interface [ 119.882850][ T5910] usb 4-1: config 0 descriptor?? [ 120.529586][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.567124][ T30] audit: type=1400 audit(1744698281.287:311): avc: denied { mount } for pid=6592 comm="syz.3.159" name="/" dev="rpc_pipefs" ino=10555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 120.578915][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.645610][ T5859] usb 4-1: USB disconnect, device number 5 [ 121.319084][ T6622] netlink: 'syz.4.169': attribute type 2 has an invalid length. [ 121.331592][ T6622] netlink: 48 bytes leftover after parsing attributes in process `syz.4.169'. [ 121.414342][ T6627] [U] [ 121.417030][ T6627] [U] [ 121.419690][ T6627] [U] [ 121.422349][ T6627] [U] [ 121.425607][ T6627] [U] [ 121.428272][ T6627] [U] [ 121.430931][ T6627] [U] [ 121.433588][ T6627] [U] [ 121.436330][ T6627] [U] [ 121.438994][ T6627] [U] [ 121.441657][ T6627] [U] [ 121.444317][ T6627] [U] [ 121.447517][ T6627] [U] [ 121.450196][ T6627] [U] [ 121.452859][ T6627] [U] [ 121.455516][ T6627] [U] [ 121.458211][ T6627] [U] [ 121.460877][ T6627] [U] [ 121.463537][ T6627] [U] [ 121.466200][ T6627] [U] [ 121.468894][ T6627] [U] [ 121.471569][ T6627] [U] [ 121.474230][ T6627] [U] [ 121.476889][ T6627] [U] [ 121.479580][ T6627] [U] [ 121.482240][ T6627] [U] [ 121.484917][ T6627] [U] [ 121.487575][ T6627] [U] [ 121.490270][ T6627] [U] [ 121.492943][ T6627] [U] [ 121.495606][ T6627] [U] [ 121.498267][ T6627] [U] [ 121.500966][ T6627] [U] [ 121.503627][ T6627] [U] [ 121.506289][ T6627] [U] [ 121.508952][ T6627] [U] [ 121.511641][ T6627] [U] [ 121.514301][ T6627] [U] [ 121.516960][ T6627] [U] [ 121.519619][ T6627] [U] [ 121.522309][ T6627] [U] [ 121.524986][ T6627] [U] [ 121.527646][ T6627] [U] [ 121.530305][ T6627] [U] [ 121.532989][ T6627] [U] [ 121.535651][ T6627] [U] [ 121.538313][ T6627] [U] [ 121.540990][ T6627] [U] [ 121.543681][ T6627] [U] [ 121.546343][ T6627] [U] [ 121.549007][ T6627] [U] [ 121.551665][ T6627] [U] [ 121.554341][ T6627] [U] [ 121.557002][ T6627] [U] [ 121.559676][ T6627] [U] [ 121.562339][ T6627] [U] [ 121.565028][ T6627] [U] [ 121.567691][ T6627] [U] [ 121.570366][ T6627] [U] [ 121.573025][ T6627] [U] [ 121.575715][ T6627] [U] [ 121.578379][ T6627] [U] [ 121.581039][ T6627] [U] [ 121.583709][ T6627] [U] [ 121.586415][ T6627] [U] [ 121.589083][ T6627] [U] [ 121.591743][ T6627] [U] [ 121.594404][ T6627] [U] [ 121.597098][ T6627] [U] [ 121.599762][ T6627] [U] [ 121.602434][ T6627] [U] [ 121.605099][ T6627] [U] [ 121.607868][ T6627] [U] [ 121.610541][ T6627] [U] [ 121.613203][ T6627] [U] [ 121.615864][ T6627] [U] [ 121.618544][ T6627] [U] [ 121.621217][ T6627] [U] [ 121.623886][ T6627] [U] [ 121.626546][ T6627] [U] [ 121.629230][ T6627] [U] [ 121.631901][ T6627] [U] [ 121.634563][ T6627] [U] [ 121.637221][ T6627] [U] [ 121.639924][ T6627] [U] [ 121.642583][ T6627] [U] [ 121.645241][ T6627] [U] [ 121.647900][ T6627] [U] [ 121.650593][ T6627] [U] [ 121.653253][ T6627] [U] [ 121.655919][ T6627] [U] [ 121.658590][ T6627] [U] [ 121.661268][ T6627] [U] [ 121.663950][ T6627] [U] [ 121.666608][ T6627] [U] [ 121.669265][ T6627] [U] [ 121.671963][ T6627] [U] [ 121.674623][ T6627] [U] [ 121.677282][ T6627] [U] [ 121.679944][ T6627] [U] [ 121.682615][ T6627] [U] [ 121.685287][ T6627] [U] [ 121.687947][ T6627] [U] [ 121.690605][ T6627] [U] [ 121.693304][ T6627] [U] [ 121.695965][ T6627] [U] [ 121.698634][ T6627] [U] [ 121.701306][ T6627] [U] [ 121.703992][ T6627] [U] [ 121.706654][ T6627] [U] [ 121.709335][ T6627] [U] [ 121.711998][ T6627] [U] [ 121.714693][ T6627] [U] [ 121.717355][ T6627] [U] [ 121.720018][ T6627] [U] [ 121.722676][ T6627] [U] [ 121.725363][ T6627] [U] [ 121.728035][ T6627] [U] [ 121.730708][ T6627] [U] [ 121.733367][ T6627] [U] [ 121.736074][ T6627] [U] [ 121.738735][ T6627] [U] [ 121.741393][ T6627] [U] [ 121.744069][ T6627] [U] [ 121.746744][ T6627] [U] [ 121.749408][ T6627] [U] [ 121.752083][ T6627] [U] [ 121.835353][ T6626] [U] [ 122.109567][ T5872] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 122.169754][ T30] audit: type=1400 audit(1744698282.887:312): avc: denied { getopt } for pid=6636 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.193234][ T30] audit: type=1400 audit(1744698282.917:313): avc: denied { bind } for pid=6636 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.831161][ T6640] siw: device registration error -23 [ 122.933350][ T5872] usb 3-1: descriptor type invalid, skip [ 123.443572][ T5872] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 123.465427][ T5872] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.558209][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 123.929450][ T5872] usb 3-1: config 1 interface 0 has no altsetting 0 [ 123.939197][ T5872] usb 3-1: string descriptor 0 read error: -22 [ 123.948908][ T6655] /dev/nullb0: Can't open blockdev [ 123.954327][ T30] audit: type=1400 audit(1744698284.667:314): avc: denied { create } for pid=6645 comm="syz.0.177" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 123.955042][ T5872] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.40 [ 123.985897][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.035722][ T6625] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.057987][ T30] audit: type=1400 audit(1744698284.677:315): avc: denied { mounton } for pid=6645 comm="syz.0.177" path="/37/file0" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.264396][ T30] audit: type=1400 audit(1744698284.917:316): avc: denied { create } for pid=6656 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 124.264780][ T5872] usbhid 3-1:1.0: can't add hid device: -71 [ 124.528372][ T5872] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 124.528377][ T30] audit: type=1400 audit(1744698284.957:317): avc: denied { read write } for pid=6656 comm="syz.1.180" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 124.528414][ T30] audit: type=1400 audit(1744698284.957:318): avc: denied { open } for pid=6656 comm="syz.1.180" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 124.607225][ T30] audit: type=1400 audit(1744698284.957:319): avc: denied { listen } for pid=6656 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.631990][ T30] audit: type=1400 audit(1744698284.957:320): avc: denied { getopt } for pid=6656 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.657102][ T30] audit: type=1400 audit(1744698285.337:321): avc: denied { bind } for pid=6662 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 125.657954][ T5872] usb 3-1: USB disconnect, device number 4 [ 126.349482][ T5910] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.509431][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 126.516831][ T5910] usb 3-1: config 3 has an invalid interface number: 139 but max is 0 [ 126.525108][ T5910] usb 3-1: config 3 has no interface number 0 [ 126.532920][ T5910] usb 3-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=5e.15 [ 126.541999][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.550017][ T5910] usb 3-1: Product: syz [ 126.554166][ T5910] usb 3-1: Manufacturer: syz [ 126.558743][ T5910] usb 3-1: SerialNumber: syz [ 129.086700][ T5910] imon 3-1:3.139: unable to register, err -19 [ 129.097914][ T5910] usb 3-1: USB disconnect, device number 5 [ 132.330879][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.337153][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 180.483235][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 180.484893][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 180.489259][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 180.495272][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 193.760937][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.767223][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.200899][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.207187][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.575958][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'. [ 262.019471][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 262.039425][ T5872] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 262.179457][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 262.232712][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 262.250879][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.269341][ T5872] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.289468][ T5872] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 262.308628][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.344842][ T5872] usb 3-1: config 0 descriptor?? [ 262.350100][ T5873] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 262.370025][ T6725] FAULT_INJECTION: forcing a failure. [ 262.370025][ T6725] name failslab, interval 1, probability 0, space 0, times 0 [ 262.400256][ T6725] CPU: 0 UID: 0 PID: 6725 Comm: syz.4.198 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 262.400277][ T6725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 262.400286][ T6725] Call Trace: [ 262.400291][ T6725] [ 262.400297][ T6725] dump_stack_lvl+0x16c/0x1f0 [ 262.400324][ T6725] should_fail_ex+0x512/0x640 [ 262.400342][ T6725] ? fs_reclaim_acquire+0xae/0x150 [ 262.400365][ T6725] ? tomoyo_encode2+0x100/0x3e0 [ 262.400386][ T6725] should_failslab+0xc2/0x120 [ 262.400404][ T6725] __kmalloc_noprof+0xd2/0x510 [ 262.400426][ T6725] tomoyo_encode2+0x100/0x3e0 [ 262.400451][ T6725] tomoyo_encode+0x29/0x50 [ 262.400471][ T6725] tomoyo_realpath_from_path+0x18f/0x6e0 [ 262.400495][ T6725] ? tomoyo_profile+0x47/0x60 [ 262.400513][ T6725] tomoyo_path_number_perm+0x245/0x580 [ 262.400532][ T6725] ? tomoyo_path_number_perm+0x237/0x580 [ 262.400552][ T6725] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 262.400574][ T6725] ? find_held_lock+0x2b/0x80 [ 262.400617][ T6725] ? find_held_lock+0x2b/0x80 [ 262.400636][ T6725] ? hook_file_ioctl_common+0x145/0x410 [ 262.400658][ T6725] ? __fget_files+0x20e/0x3c0 [ 262.400678][ T6725] security_file_ioctl+0x9b/0x240 [ 262.400702][ T6725] __x64_sys_ioctl+0xb7/0x200 [ 262.400726][ T6725] do_syscall_64+0xcd/0x260 [ 262.400750][ T6725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.400767][ T6725] RIP: 0033:0x7fa9c7d8d169 [ 262.400780][ T6725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.400794][ T6725] RSP: 002b:00007fa9c8bca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.400810][ T6725] RAX: ffffffffffffffda RBX: 00007fa9c7fa5fa0 RCX: 00007fa9c7d8d169 [ 262.400820][ T6725] RDX: 0000200000000000 RSI: 000000004008ae9c RDI: 0000000000000005 [ 262.400829][ T6725] RBP: 00007fa9c8bca090 R08: 0000000000000000 R09: 0000000000000000 [ 262.400838][ T6725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.400847][ T6725] R13: 0000000000000000 R14: 00007fa9c7fa5fa0 R15: 00007ffdf129abd8 [ 262.400869][ T6725] [ 262.400884][ T6725] ERROR: Out of memory at tomoyo_realpath_from_path. [ 262.560964][ T5873] usb 4-1: descriptor type invalid, skip [ 262.670334][ T5873] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 262.699571][ T5873] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.749879][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 262.768767][ T5873] usb 4-1: config 1 interface 0 has no altsetting 0 [ 262.775966][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 262.789586][ T24] usb 2-1: can't read configurations, error -71 [ 262.798205][ T5873] usb 4-1: string descriptor 0 read error: -22 [ 262.810015][ T5873] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.40 [ 262.819081][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.859855][ T6723] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 262.964480][ T5872] usbhid 3-1:0.0: can't add hid device: -71 [ 262.971672][ T5872] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 263.011201][ T5872] usb 3-1: USB disconnect, device number 6 [ 263.134936][ T6744] FAULT_INJECTION: forcing a failure. [ 263.134936][ T6744] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 263.148046][ T6744] CPU: 1 UID: 0 PID: 6744 Comm: syz.0.201 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 263.148067][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 263.148077][ T6744] Call Trace: [ 263.148082][ T6744] [ 263.148089][ T6744] dump_stack_lvl+0x16c/0x1f0 [ 263.148115][ T6744] should_fail_ex+0x512/0x640 [ 263.148136][ T6744] _copy_from_user+0x2e/0xd0 [ 263.148156][ T6744] __sys_bpf+0x21d/0x4d80 [ 263.148178][ T6744] ? rcu_is_watching+0x12/0xc0 [ 263.148197][ T6744] ? trace_sched_waking+0x110/0x120 [ 263.148221][ T6744] ? __pfx___sys_bpf+0x10/0x10 [ 263.148239][ T6744] ? __schedule+0x1186/0x5de0 [ 263.148260][ T6744] ? ksys_write+0x190/0x240 [ 263.148295][ T6744] ? fput+0x70/0xf0 [ 263.148313][ T6744] ? ksys_write+0x1b9/0x240 [ 263.148332][ T6744] __x64_sys_bpf+0x78/0xc0 [ 263.148353][ T6744] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.148373][ T6744] do_syscall_64+0xcd/0x260 [ 263.148398][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.148414][ T6744] RIP: 0033:0x7fe50698d169 [ 263.148426][ T6744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.148440][ T6744] RSP: 002b:00007fe507837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 263.148456][ T6744] RAX: ffffffffffffffda RBX: 00007fe506ba6160 RCX: 00007fe50698d169 [ 263.148466][ T6744] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 263.148475][ T6744] RBP: 00007fe507837090 R08: 0000000000000000 R09: 0000000000000000 [ 263.148484][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.148493][ T6744] R13: 0000000000000000 R14: 00007fe506ba6160 R15: 00007ffebf4586d8 [ 263.148515][ T6744] [ 263.334718][ T5873] usbhid 4-1:1.0: can't add hid device: -71 [ 263.342708][ T5873] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 263.354713][ T5873] usb 4-1: USB disconnect, device number 6 [ 263.380330][ T5859] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 263.524612][ T6750] fuse: Invalid uid '00000000000037777777777' [ 263.539615][ T5859] usb 5-1: Using ep0 maxpacket: 16 [ 263.546316][ T5859] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 263.557706][ T5859] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 264.052584][ T5859] usb 5-1: config 0 has no interface number 0 [ 264.058772][ T5859] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 264.070824][ T5859] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 264.082460][ T5859] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 264.093779][ T5859] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 264.112078][ T5859] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 264.122320][ T5859] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 264.158934][ T5859] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 264.350060][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.383978][ T5859] usb 5-1: config 0 descriptor?? [ 264.391513][ T6738] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 264.399012][ T6762] fuseblk: Bad value for 'user_id' [ 264.405173][ T6762] fuseblk: Bad value for 'user_id' [ 264.407287][ T5859] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 264.551128][ T5859] snd-usb-audio 5-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 264.612274][ T5859] usb 5-1: USB disconnect, device number 3 [ 264.620159][ T6763] udevd[6763]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.639719][ T5872] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 264.819400][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 264.879220][ T5872] usb 4-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 264.896610][ T5872] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 264.971456][ T5872] usb 4-1: config 0 interface 0 has no altsetting 0 [ 264.989800][ T5872] usb 4-1: New USB device found, idVendor=184f, idProduct=0001, bcdDevice=e0.b8 [ 264.998948][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.012161][ T5872] usb 4-1: Product: syz [ 265.024784][ T5872] usb 4-1: Manufacturer: syz [ 265.055268][ T5872] usb 4-1: SerialNumber: syz [ 265.080288][ T5872] usb 4-1: config 0 descriptor?? [ 266.453724][ T6783] netlink: 'syz.3.207': attribute type 4 has an invalid length. [ 266.945894][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 266.945908][ T30] audit: type=1400 audit(1744698427.677:329): avc: denied { mount } for pid=6777 comm="syz.1.211" name="/" dev="9p" ino=65538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 266.979490][ T5872] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 266.994687][ T30] audit: type=1400 audit(1744698427.687:330): avc: denied { bind } for pid=6777 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 267.039827][ T30] audit: type=1400 audit(1744698427.687:331): avc: denied { name_bind } for pid=6777 comm="syz.1.211" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 267.063958][ T30] audit: type=1400 audit(1744698427.687:332): avc: denied { node_bind } for pid=6777 comm="syz.1.211" saddr=ff01::1 src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 267.087231][ T30] audit: type=1400 audit(1744698427.757:333): avc: denied { append } for pid=6785 comm="syz.0.214" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 267.111048][ T30] audit: type=1400 audit(1744698427.767:334): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 267.169550][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 267.181937][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.204009][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.231675][ T5872] usb 3-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 267.241131][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.268220][ T5872] usb 3-1: config 0 descriptor?? [ 267.282610][ T6789] mmap: syz.1.215 (6789): VmData 37597184 exceed data ulimit 11. Update limits or use boot option ignore_rlimit_data. [ 267.369456][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 267.511830][ T30] audit: type=1400 audit(1744698428.247:335): avc: denied { create } for pid=6791 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 267.534892][ T30] audit: type=1400 audit(1744698428.267:336): avc: denied { setopt } for pid=6791 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 267.555138][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 267.564055][ T24] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 267.573149][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.581348][ T24] usb 1-1: Product: syz [ 267.585572][ T24] usb 1-1: Manufacturer: syz [ 267.592063][ T24] usb 1-1: SerialNumber: syz [ 267.629720][ T24] usb 1-1: config 0 descriptor?? [ 267.639745][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 267.699488][ T5872] hid-alps 0003:044E:121E.0002: unknown main item tag 0x0 [ 267.723778][ T5872] hid-alps 0003:044E:121E.0002: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.2-1/input0 [ 267.840066][ T6787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.849392][ T6787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.939811][ T30] audit: type=1400 audit(1744698428.677:337): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 267.948415][ T5872] usb 4-1: USB disconnect, device number 7 [ 268.105317][ T5940] usb 3-1: USB disconnect, device number 7 [ 268.175482][ T6802] Driver unsupported XDP return value 0 on prog (id 73) dev N/A, expect packet loss! [ 268.459386][ T5859] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 268.461272][ T5872] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 268.621019][ T5872] usb 4-1: descriptor type invalid, skip [ 268.630467][ T5872] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 268.650478][ T5872] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.682099][ T24] gspca_se401: read req failed req 0x06 error -19 [ 268.689476][ T5859] usb 2-1: Using ep0 maxpacket: 16 [ 268.696416][ T5859] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 268.700001][ T5872] usb 4-1: config 1 interface 0 has no altsetting 0 [ 268.705077][ T5859] usb 2-1: config 0 has no interface number 0 [ 268.717591][ T5859] usb 2-1: config 0 interface 244 has no altsetting 0 [ 268.721503][ T24] usb 1-1: USB disconnect, device number 4 [ 268.726580][ T5859] usb 2-1: New USB device found, idVendor=1b3d, idProduct=016f, bcdDevice=be.7c [ 268.816351][ T5872] usb 4-1: string descriptor 0 read error: -22 [ 268.866944][ T5872] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.40 [ 269.090698][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.134296][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.142488][ T5859] usb 2-1: Product: syz [ 269.146733][ T5859] usb 2-1: Manufacturer: syz [ 269.151484][ T5859] usb 2-1: SerialNumber: syz [ 269.158202][ T5859] usb 2-1: config 0 descriptor?? [ 269.169110][ T6799] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 269.452458][ T5872] usbhid 4-1:1.0: can't add hid device: -71 [ 269.458740][ T5872] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 269.461288][ T5859] ftdi_sio 2-1:0.244: FTDI USB Serial Device converter detected [ 269.501103][ T5859] ftdi_sio ttyUSB0: unknown device type: 0xbe7c [ 269.523547][ T5859] usb 2-1: USB disconnect, device number 6 [ 269.542713][ T5859] ftdi_sio 2-1:0.244: device disconnected [ 269.570476][ T5872] usb 4-1: USB disconnect, device number 8 [ 269.935493][ T30] audit: type=1400 audit(1744698430.667:338): avc: denied { setopt } for pid=6826 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 269.954689][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.802264][ T6832] random: crng reseeded on system resumption [ 271.817693][ T6839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.832036][ T6846] serio: Serial port ptm0 [ 271.840852][ T6839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.932350][ T6839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.953959][ T6839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.973758][ T6848] tipc: Started in network mode [ 271.986026][ T6848] tipc: Node identity , cluster identity 4711 [ 271.993617][ T6848] tipc: Failed to set node id, please configure manually [ 272.002393][ T6848] tipc: Enabling of bearer rejected, failed to enable media [ 272.119404][ T5940] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 272.136874][ T5859] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 272.437509][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 272.479547][ T5859] usb 2-1: Using ep0 maxpacket: 8 [ 272.496215][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.513141][ T5859] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.524701][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.538920][ T5859] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 272.566905][ T5940] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 272.599060][ T5859] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 272.632225][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.656505][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.670934][ T5940] usb 5-1: config 0 descriptor?? [ 272.684183][ T5859] usb 2-1: Product: syz [ 272.697141][ T5859] usb 2-1: Manufacturer: syz [ 272.702159][ T971] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 272.715263][ T5859] usb 2-1: SerialNumber: syz [ 272.733331][ T5859] usb 2-1: config 0 descriptor?? [ 272.813127][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 272.813143][ T30] audit: type=1400 audit(1744698433.547:342): avc: denied { ioctl } for pid=6854 comm="syz.0.233" path="socket:[11718]" dev="sockfs" ino=11718 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 272.892332][ T971] usb 3-1: Using ep0 maxpacket: 8 [ 272.903911][ T5940] usbhid 5-1:0.0: can't add hid device: -71 [ 272.914044][ T971] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 272.926714][ T971] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 272.946487][ T5940] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 272.994926][ T971] usb 3-1: config 0 has no interface number 0 [ 273.038705][ T5940] usb 5-1: USB disconnect, device number 4 [ 273.051700][ T971] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.098815][ T971] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 273.142883][ T971] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 273.182038][ T971] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 273.198684][ T971] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 273.208858][ T971] usb 3-1: Product: syz [ 273.215616][ T971] usb 3-1: Manufacturer: syz [ 273.239731][ T971] usb 3-1: config 0 descriptor?? [ 273.263199][ T6859] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 273.896515][ T971] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input6 [ 273.991140][ T5873] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 274.117497][ T5872] usb 3-1: USB disconnect, device number 8 [ 274.117534][ C0] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 274.135032][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 274.149556][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 274.157067][ T5873] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 274.170830][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.187235][ T5873] usb 4-1: config 0 descriptor?? [ 274.329467][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 274.337603][ T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 274.349493][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.362282][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.375097][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.384600][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.392697][ T24] usb 1-1: Product: syz [ 274.399106][ T5873] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 274.408880][ T24] usb 1-1: Manufacturer: syz [ 274.413631][ T24] usb 1-1: SerialNumber: syz [ 274.512270][ T5859] usb 2-1: USB disconnect, device number 7 [ 274.772689][ T30] audit: type=1400 audit(1744698435.507:343): avc: denied { read write } for pid=6893 comm="syz.2.241" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 274.808363][ T30] audit: type=1400 audit(1744698435.507:344): avc: denied { open } for pid=6893 comm="syz.2.241" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 274.829134][ T24] usb 1-1: 0:2 : does not exist [ 274.929372][ T5859] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 275.087121][ T5859] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.332763][ T5859] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.343233][ T5859] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 275.352588][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.363200][ T5859] usb 2-1: config 0 descriptor?? [ 275.776222][ T30] audit: type=1400 audit(1744698436.507:345): avc: denied { read write } for pid=6908 comm="syz.2.247" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 275.784850][ T5940] hid-generic C98F:0003:0000.0003: unknown main item tag 0x0 [ 275.799524][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.809442][ T30] audit: type=1400 audit(1744698436.507:346): avc: denied { open } for pid=6908 comm="syz.2.247" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 275.840816][ T5940] hid-generic C98F:0003:0000.0003: unknown main item tag 0x0 [ 275.851660][ T5940] hid-generic C98F:0003:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 275.899414][ T5859] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 276.032872][ T5859] usb 5-1: device descriptor read/64, error -71 [ 276.108596][ T5873] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 276.299460][ T5859] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 276.459702][ T5859] usb 5-1: device descriptor read/64, error -71 [ 276.614151][ T5859] usb usb5-port1: attempt power cycle [ 276.778315][ T5873] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 276.788672][ T5873] asix 4-1:0.0: probe with driver asix failed with error -71 [ 276.801743][ T5873] usb 4-1: USB disconnect, device number 9 [ 276.837614][ T24] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 276.875154][ T24] usb 1-1: USB disconnect, device number 5 [ 277.019413][ T5859] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 277.100404][ T6745] udevd[6745]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.119922][ T5859] usb 5-1: device descriptor read/8, error -71 [ 277.389486][ T5910] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 277.397189][ T5859] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 277.483031][ T5859] usb 5-1: device descriptor read/8, error -71 [ 277.593673][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 277.665380][ T5859] usb usb5-port1: unable to enumerate USB device [ 277.718178][ T5910] usb 4-1: unable to get BOS descriptor or descriptor too short [ 277.745625][ T6927] Process accounting resumed [ 277.798038][ T5910] usb 4-1: config 12 has too many interfaces: 196, using maximum allowed: 32 [ 277.838125][ T5910] usb 4-1: config 12 has an invalid descriptor of length 54, skipping remainder of the config [ 277.881835][ T5910] usb 4-1: config 12 has 0 interfaces, different from the descriptor's value: 196 [ 277.960776][ T5910] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 277.980369][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.988466][ T5910] usb 4-1: Product: syz [ 278.021280][ T5910] usb 4-1: Manufacturer: syz [ 278.126535][ T5910] usb 4-1: SerialNumber: syz [ 278.272709][ T30] audit: type=1400 audit(1744698439.007:347): avc: denied { audit_read } for pid=6936 comm="syz.2.255" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 278.348398][ T30] audit: type=1400 audit(1744698439.007:348): avc: denied { create } for pid=6936 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 278.386372][ T30] audit: type=1400 audit(1744698439.077:349): avc: denied { name_bind } for pid=6925 comm="syz.3.252" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 278.388199][ T6940] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 278.428219][ T30] audit: type=1400 audit(1744698439.157:350): avc: denied { bind } for pid=6925 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 278.447308][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.503527][ T30] audit: type=1400 audit(1744698439.157:351): avc: denied { name_bind } for pid=6925 comm="syz.3.252" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 278.535625][ T30] audit: type=1400 audit(1744698439.157:352): avc: denied { node_bind } for pid=6925 comm="syz.3.252" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 278.556812][ T30] audit: type=1400 audit(1744698439.157:353): avc: denied { setopt } for pid=6925 comm="syz.3.252" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 278.580866][ T30] audit: type=1400 audit(1744698439.227:354): avc: denied { nlmsg_write } for pid=6943 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 278.820320][ T5872] usb 2-1: USB disconnect, device number 8 [ 278.834036][ T30] audit: type=1400 audit(1744698439.557:355): avc: denied { unlink } for pid=6955 comm="syz.4.262" name="#1" dev="tmpfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 278.884919][ T30] audit: type=1400 audit(1744698439.567:356): avc: denied { mount } for pid=6955 comm="syz.4.262" name="/" dev="overlay" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 278.923483][ T6960] netlink: 'syz.1.263': attribute type 10 has an invalid length. [ 278.983791][ T6958] ntfs3(nullb0): Primary boot signature is not NTFS. [ 279.018042][ T6958] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 279.677029][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 280.065926][ T5910] usb 4-1: USB disconnect, device number 10 [ 280.111894][ T6974] gfs2: not a GFS2 filesystem [ 280.233199][ T6976] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 280.525776][ T6980] vlan2: entered promiscuous mode [ 280.534675][ T6980] bond0: entered promiscuous mode [ 280.574547][ T6980] bond_slave_0: entered promiscuous mode [ 280.900119][ T6980] bond_slave_1: entered promiscuous mode [ 281.478715][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 281.834976][ T7011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13787 sclass=netlink_route_socket pid=7011 comm=syz.4.276 [ 282.291066][ T7018] FAULT_INJECTION: forcing a failure. [ 282.291066][ T7018] name failslab, interval 1, probability 0, space 0, times 0 [ 282.303832][ T7018] CPU: 1 UID: 0 PID: 7018 Comm: syz.1.278 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 282.303846][ T7018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 282.303852][ T7018] Call Trace: [ 282.303856][ T7018] [ 282.303861][ T7018] dump_stack_lvl+0x16c/0x1f0 [ 282.303886][ T7018] should_fail_ex+0x512/0x640 [ 282.303897][ T7018] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 282.303910][ T7018] should_failslab+0xc2/0x120 [ 282.303921][ T7018] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 282.303932][ T7018] ? sock_alloc_inode+0x25/0x1c0 [ 282.303949][ T7018] ? __pfx_sock_alloc_inode+0x10/0x10 [ 282.303963][ T7018] sock_alloc_inode+0x25/0x1c0 [ 282.303977][ T7018] alloc_inode+0x61/0x240 [ 282.303990][ T7018] sock_alloc+0x40/0x280 [ 282.304004][ T7018] do_accept+0xf7/0x530 [ 282.304014][ T7018] ? do_raw_spin_lock+0x12c/0x2b0 [ 282.304026][ T7018] ? __pfx_do_accept+0x10/0x10 [ 282.304044][ T7018] __sys_accept4+0x100/0x1b0 [ 282.304054][ T7018] ? __pfx___sys_accept4+0x10/0x10 [ 282.304063][ T7018] ? ksys_write+0x1b9/0x240 [ 282.304072][ T7018] ? __pfx_ksys_write+0x10/0x10 [ 282.304080][ T7018] ? rcu_is_watching+0x12/0xc0 [ 282.304095][ T7018] __x64_sys_accept+0x74/0xb0 [ 282.304105][ T7018] ? lockdep_hardirqs_on+0x7c/0x110 [ 282.304118][ T7018] do_syscall_64+0xcd/0x260 [ 282.304134][ T7018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.304144][ T7018] RIP: 0033:0x7f890658d169 [ 282.304152][ T7018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.304162][ T7018] RSP: 002b:00007f8907345038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 282.304172][ T7018] RAX: ffffffffffffffda RBX: 00007f89067a5fa0 RCX: 00007f890658d169 [ 282.304178][ T7018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 282.304183][ T7018] RBP: 00007f8907345090 R08: 0000000000000000 R09: 0000000000000000 [ 282.304189][ T7018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.304195][ T7018] R13: 0000000000000000 R14: 00007f89067a5fa0 R15: 00007fffbaf75da8 [ 282.304207][ T7018] [ 282.575016][ T7026] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.595109][ T7026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.777025][ T7032] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.792991][ T7032] netlink: 'syz.4.283': attribute type 10 has an invalid length. [ 283.957751][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 284.048068][ T7047] FAULT_INJECTION: forcing a failure. [ 284.048068][ T7047] name failslab, interval 1, probability 0, space 0, times 0 [ 284.085061][ T7047] CPU: 0 UID: 0 PID: 7047 Comm: syz.3.285 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 284.085084][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 284.085094][ T7047] Call Trace: [ 284.085099][ T7047] [ 284.085105][ T7047] dump_stack_lvl+0x16c/0x1f0 [ 284.085131][ T7047] should_fail_ex+0x512/0x640 [ 284.085149][ T7047] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 284.085176][ T7047] should_failslab+0xc2/0x120 [ 284.085194][ T7047] __kmalloc_cache_noprof+0x6a/0x3e0 [ 284.085217][ T7047] ? __nla_parse+0x40/0x60 [ 284.085235][ T7047] ? tcf_action_init_1+0x278/0x6c0 [ 284.085255][ T7047] tcf_action_init_1+0x278/0x6c0 [ 284.085270][ T7047] ? tc_lookup_action_n+0xc9/0xf0 [ 284.085293][ T7047] ? __pfx_tcf_action_init_1+0x10/0x10 [ 284.085310][ T7047] ? __pfx_tc_action_load_ops+0x10/0x10 [ 284.085336][ T7047] ? __nla_parse+0x40/0x60 [ 284.085358][ T7047] tcf_action_init+0x42c/0x9c0 [ 284.085383][ T7047] ? __pfx_tcf_action_init+0x10/0x10 [ 284.085399][ T7047] ? __page_table_check_zero+0x32d/0x5b0 [ 284.085435][ T7047] ? __lock_acquire+0x5ca/0x1ba0 [ 284.085477][ T7047] ? __lock_acquire+0x5ca/0x1ba0 [ 284.085496][ T7047] tcf_action_add+0xee/0x5c0 [ 284.085518][ T7047] ? __pfx_tcf_action_add+0x10/0x10 [ 284.085571][ T7047] ? __nla_parse+0x40/0x60 [ 284.085596][ T7047] tc_ctl_action+0x35b/0x470 [ 284.085620][ T7047] ? __pfx_tc_ctl_action+0x10/0x10 [ 284.085646][ T7047] ? __pfx_tc_ctl_action+0x10/0x10 [ 284.085663][ T7047] rtnetlink_rcv_msg+0x3c6/0xe90 [ 284.085687][ T7047] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 284.085705][ T7047] ? __pfx_avc_has_perm+0x10/0x10 [ 284.085731][ T7047] netlink_rcv_skb+0x16a/0x440 [ 284.085753][ T7047] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 284.085774][ T7047] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 284.085810][ T7047] ? netlink_deliver_tap+0x1ae/0xd30 [ 284.085837][ T7047] netlink_unicast+0x53a/0x7f0 [ 284.085861][ T7047] ? __pfx_netlink_unicast+0x10/0x10 [ 284.085891][ T7047] netlink_sendmsg+0x8d1/0xdd0 [ 284.085917][ T7047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.085954][ T7047] ____sys_sendmsg+0xa95/0xc70 [ 284.085979][ T7047] ? copy_msghdr_from_user+0x10a/0x160 [ 284.085998][ T7047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.086034][ T7047] ___sys_sendmsg+0x134/0x1d0 [ 284.086055][ T7047] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.086106][ T7047] __sys_sendmsg+0x16d/0x220 [ 284.086127][ T7047] ? __pfx___sys_sendmsg+0x10/0x10 [ 284.086154][ T7047] ? rcu_is_watching+0x12/0xc0 [ 284.086182][ T7047] do_syscall_64+0xcd/0x260 [ 284.086206][ T7047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.086222][ T7047] RIP: 0033:0x7f8bca38d169 [ 284.086236][ T7047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.086251][ T7047] RSP: 002b:00007f8bcb274038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.086267][ T7047] RAX: ffffffffffffffda RBX: 00007f8bca5a6080 RCX: 00007f8bca38d169 [ 284.086278][ T7047] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 000000000000000a [ 284.086288][ T7047] RBP: 00007f8bcb274090 R08: 0000000000000000 R09: 0000000000000000 [ 284.086297][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.086307][ T7047] R13: 0000000000000000 R14: 00007f8bca5a6080 R15: 00007fff894d1f88 [ 284.086330][ T7047] [ 284.412659][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.429634][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 284.436343][ T24] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 284.446192][ T24] usb 2-1: config 0 has no interface number 0 [ 284.457686][ T24] usb 2-1: config 0 interface 200 has no altsetting 0 [ 284.559569][ T5910] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 284.654398][ T24] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 284.708071][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.742821][ T24] usb 2-1: Product: syz [ 284.813851][ T24] usb 2-1: Manufacturer: syz [ 284.818562][ T24] usb 2-1: SerialNumber: syz [ 284.964825][ T7056] ref_ctr_offset mismatch. inode: 0x129 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 285.053926][ T24] usb 2-1: config 0 descriptor?? [ 285.182086][ T5910] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 285.196118][ T5910] usb 1-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 285.210222][ T5910] usb 1-1: config 0 has no interface number 0 [ 285.328632][ T5910] usb 1-1: too many endpoints for config 0 interface 89 altsetting 249: 226, using maximum allowed: 30 [ 285.339825][ T5910] usb 1-1: config 0 interface 89 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 226 [ 285.353519][ T5910] usb 1-1: config 0 interface 89 has no altsetting 0 [ 285.364438][ T5910] usb 1-1: New USB device found, idVendor=2294, idProduct=635b, bcdDevice=a2.8d [ 285.371682][ T5872] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 285.373513][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 285.383731][ T7037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.388936][ T5910] usb 1-1: Product: syz [ 285.402958][ T5910] usb 1-1: Manufacturer: syz [ 285.407606][ T5910] usb 1-1: SerialNumber: syz [ 285.835346][ T7037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.856828][ T5910] usb 1-1: config 0 descriptor?? [ 285.983506][ T7037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.104108][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 286.554015][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 286.554033][ T30] audit: type=1400 audit(1744698447.127:366): avc: denied { ioctl } for pid=7044 comm="syz.0.287" path="socket:[12943]" dev="sockfs" ino=12943 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 286.647068][ T5872] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 286.676276][ T30] audit: type=1400 audit(1744698447.387:367): avc: denied { shutdown } for pid=7068 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 286.699855][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.712538][ T24] usbhid 2-1:0.200: couldn't find an input interrupt endpoint [ 286.737291][ T24] usb 2-1: USB disconnect, device number 9 [ 286.754058][ T5872] usb 5-1: Product: syz [ 286.767735][ T5872] usb 5-1: Manufacturer: syz [ 286.773813][ T5872] usb 5-1: SerialNumber: syz [ 286.797513][ T5872] usb 5-1: config 0 descriptor?? [ 287.009516][ T1203] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 287.047855][ T5872] usb 5-1: USB disconnect, device number 9 [ 287.189456][ T1203] usb 3-1: Using ep0 maxpacket: 32 [ 287.461950][ T6763] udevd[6763]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.472703][ T1203] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 287.526729][ T1203] usb 3-1: config 0 has no interface number 0 [ 287.552780][ T1203] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 287.710648][ T1203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.740059][ T1203] usb 3-1: Product: syz [ 287.744236][ T1203] usb 3-1: Manufacturer: syz [ 287.748897][ T1203] usb 3-1: SerialNumber: syz [ 287.759596][ T1203] usb 3-1: config 0 descriptor?? [ 288.158229][ T5910] usb 1-1: USB disconnect, device number 6 [ 288.266176][ T1203] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 288.926222][ T1203] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 288.941743][ T1203] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 288.959986][ T5940] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 289.136356][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 289.165905][ T5910] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 289.222903][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.266801][ T30] audit: type=1400 audit(1744698449.987:368): avc: denied { create } for pid=7068 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 289.266849][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 289.286367][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.293640][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.312320][ T1203] usb 3-1: USB disconnect, device number 9 [ 289.325463][ T1203] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 289.329745][ T5940] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 289.355229][ T1203] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 289.355775][ T1203] quatech2 3-1:0.51: device disconnected [ 289.462056][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.474582][ T5940] usb 5-1: config 0 descriptor?? [ 289.479622][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 289.486017][ T5910] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 289.498041][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.511141][ T5940] hub 5-1:0.0: USB hub found [ 289.523700][ T5910] usb 1-1: config 0 descriptor?? [ 289.757120][ T5910] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 289.786243][ T5940] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 289.892288][ T7110] siw: device registration error -23 [ 290.396519][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.412380][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.419401][ T1203] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 290.426530][ T5940] usbhid 5-1:0.0: can't add hid device: -71 [ 290.438330][ T5940] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 290.567513][ T5940] usb 5-1: USB disconnect, device number 10 [ 290.592916][ T1203] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.613258][ T1203] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 290.637827][ T1203] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 290.701134][ T1203] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 290.703059][ T5910] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 290.725254][ T5910] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 290.753765][ T1203] usb 2-1: config 1 interface 1 has no altsetting 0 [ 290.835636][ T1203] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.910080][ T1203] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.001577][ T1203] usb 2-1: Product: syz [ 291.043665][ T1203] usb 2-1: Manufacturer: syz [ 291.084431][ T1203] usb 2-1: SerialNumber: syz [ 291.132083][ T5910] asix 1-1:0.0: probe with driver asix failed with error -71 [ 291.218924][ T7111] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 291.351755][ T1203] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 291.405188][ T7114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.824389][ T1203] cdc_ncm 2-1:1.0: bind() failure [ 291.929972][ T5910] usb 1-1: USB disconnect, device number 7 [ 292.063145][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 292.072154][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 292.081718][ T7122] netlink: 'syz.3.309': attribute type 7 has an invalid length. [ 292.089964][ T7122] netlink: 'syz.3.309': attribute type 12 has an invalid length. [ 293.758591][ T30] audit: type=1400 audit(1744698454.487:369): avc: denied { module_load } for pid=7141 comm="syz.2.316" path="/sys/kernel/notes" dev="sysfs" ino=1401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 293.825914][ T30] audit: type=1400 audit(1744698454.537:370): avc: denied { setopt } for pid=7143 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 294.070568][ T7150] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.072958][ T7150] netlink: 'syz.3.319': attribute type 10 has an invalid length. [ 294.198762][ T7158] raw_sendmsg: syz.2.320 forgot to set AF_INET. Fix it! [ 294.597293][ T30] audit: type=1400 audit(1744698455.087:371): avc: denied { mounton } for pid=7144 comm="syz.4.318" path="/proc/225/task" dev="proc" ino=13190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 294.754208][ T5873] usb 2-1: USB disconnect, device number 10 [ 294.768179][ T30] audit: type=1400 audit(1744698455.237:372): avc: denied { execute } for pid=7136 comm="syz.0.313" path="/dev/dri/card7" dev="devtmpfs" ino=2864 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 294.830412][ T7167] IPVS: set_ctl: invalid protocol: 59 172.20.20.45:20000 [ 295.075023][ T30] audit: type=1400 audit(1744698455.557:373): avc: denied { setattr } for pid=7166 comm="syz.2.321" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 295.517419][ T30] audit: type=1400 audit(1744698455.837:374): avc: denied { ioctl } for pid=7169 comm="syz.2.322" path="socket:[13456]" dev="sockfs" ino=13456 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 296.066828][ T30] audit: type=1400 audit(1744698455.887:375): avc: denied { wake_alarm } for pid=7169 comm="syz.2.322" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 296.088245][ T30] audit: type=1400 audit(1744698455.907:376): avc: denied { write } for pid=7169 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 296.194561][ T30] audit: type=1400 audit(1744698455.907:377): avc: denied { read } for pid=7169 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 296.257949][ T1203] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 296.583036][ T7186] Failed to get privilege flags for destination (handle=0x2:0x0) [ 296.658898][ T7189] SELinux: policydb version 1197324667 does not match my version range 15-34 [ 296.668102][ T7189] SELinux: failed to load policy [ 296.788533][ T7190] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 296.798250][ T7190] SELinux: failed to load policy [ 296.848356][ T30] audit: type=1400 audit(1744698457.387:378): avc: denied { load_policy } for pid=7182 comm="syz.4.327" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 296.951540][ T1203] usb 2-1: Using ep0 maxpacket: 32 [ 296.958678][ T1203] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 296.966982][ T1203] usb 2-1: config 0 has no interface number 0 [ 296.973480][ T1203] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.984959][ T1203] usb 2-1: config 0 interface 85 has no altsetting 0 [ 296.994533][ T1203] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 297.003647][ T1203] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.011736][ T1203] usb 2-1: Product: syz [ 297.016018][ T1203] usb 2-1: Manufacturer: syz [ 297.020821][ T1203] usb 2-1: SerialNumber: syz [ 297.034584][ T1203] usb 2-1: config 0 descriptor?? [ 297.079507][ T5940] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 297.267771][ T5940] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 297.286155][ T5940] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 297.295351][ T7192] netlink: 60 bytes leftover after parsing attributes in process `syz.0.329'. [ 297.298185][ T5940] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 297.328476][ T5940] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 297.363164][ T5940] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 297.383644][ T5940] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 297.392898][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 297.431964][ T7195] syz.4.330 uses obsolete (PF_INET,SOCK_PACKET) [ 297.432503][ T5940] usb 3-1: Product: syz [ 297.444144][ T5940] usb 3-1: Manufacturer: syz [ 297.515934][ T5940] cdc_wdm 3-1:1.0: skipping garbage [ 297.521349][ T5940] cdc_wdm 3-1:1.0: skipping garbage [ 297.540841][ T5940] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 297.563593][ T5940] cdc_wdm 3-1:1.0: Unknown control protocol [ 297.696424][ T1203] appletouch 2-1:0.85: Geyser mode initialized. [ 297.737088][ T1203] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input7 [ 297.895338][ T5940] usb 2-1: USB disconnect, device number 11 [ 297.940966][ T5940] appletouch 2-1:0.85: input: appletouch disconnected [ 298.952696][ T7221] fuseblk: Unknown parameter 'discard' [ 299.240687][ T7224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.339'. [ 299.276396][ T7232] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.282615][ T7232] netlink: 'syz.4.342': attribute type 10 has an invalid length. [ 299.898305][ T1203] usb 3-1: USB disconnect, device number 10 [ 301.213006][ T7246] IPVS: set_ctl: invalid protocol: 59 172.20.20.45:20000 [ 301.349484][ T971] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 301.358247][ T7246] FAULT_INJECTION: forcing a failure. [ 301.358247][ T7246] name failslab, interval 1, probability 0, space 0, times 0 [ 301.370913][ T7246] CPU: 1 UID: 0 PID: 7246 Comm: syz.2.347 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 301.370934][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 301.370941][ T7246] Call Trace: [ 301.370945][ T7246] [ 301.370949][ T7246] dump_stack_lvl+0x16c/0x1f0 [ 301.370967][ T7246] should_fail_ex+0x512/0x640 [ 301.370978][ T7246] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 301.370991][ T7246] should_failslab+0xc2/0x120 [ 301.371003][ T7246] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 301.371013][ T7246] ? __alloc_skb+0x2b2/0x380 [ 301.371028][ T7246] __alloc_skb+0x2b2/0x380 [ 301.371039][ T7246] ? __pfx___alloc_skb+0x10/0x10 [ 301.371053][ T7246] ? genl_rcv_msg+0x4bb/0x800 [ 301.371073][ T7246] netlink_ack+0x15d/0xb80 [ 301.371087][ T7246] ? __lock_acquire+0xaa4/0x1ba0 [ 301.371100][ T7246] netlink_rcv_skb+0x347/0x440 [ 301.371114][ T7246] ? __pfx_genl_rcv_msg+0x10/0x10 [ 301.371130][ T7246] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 301.371151][ T7246] ? __pfx_down_read+0x10/0x10 [ 301.371168][ T7246] ? netlink_deliver_tap+0x1ae/0xd30 [ 301.371184][ T7246] genl_rcv+0x28/0x40 [ 301.371198][ T7246] netlink_unicast+0x53a/0x7f0 [ 301.371213][ T7246] ? __pfx_netlink_unicast+0x10/0x10 [ 301.371231][ T7246] netlink_sendmsg+0x8d1/0xdd0 [ 301.371248][ T7246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.371266][ T7246] ____sys_sendmsg+0xa95/0xc70 [ 301.371283][ T7246] ? copy_msghdr_from_user+0x10a/0x160 [ 301.371295][ T7246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.371317][ T7246] ___sys_sendmsg+0x134/0x1d0 [ 301.371330][ T7246] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.371358][ T7246] __sys_sendmsg+0x16d/0x220 [ 301.371371][ T7246] ? __pfx___sys_sendmsg+0x10/0x10 [ 301.371388][ T7246] ? rcu_is_watching+0x12/0xc0 [ 301.371404][ T7246] do_syscall_64+0xcd/0x260 [ 301.371420][ T7246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.371430][ T7246] RIP: 0033:0x7f1b2b78d169 [ 301.371439][ T7246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.371448][ T7246] RSP: 002b:00007f1b295f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.371458][ T7246] RAX: ffffffffffffffda RBX: 00007f1b2b9a5fa0 RCX: 00007f1b2b78d169 [ 301.371465][ T7246] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 301.371470][ T7246] RBP: 00007f1b295f6090 R08: 0000000000000000 R09: 0000000000000000 [ 301.371476][ T7246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.371481][ T7246] R13: 0000000000000000 R14: 00007f1b2b9a5fa0 R15: 00007ffc9cedcfe8 [ 301.371494][ T7246] [ 301.634303][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.727720][ T7250] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 302.094026][ T971] usb 2-1: unable to get BOS descriptor or descriptor too short [ 302.113158][ T971] usb 2-1: config 0 interface 0 has no altsetting 0 [ 302.124644][ T971] usb 2-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb [ 302.144473][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 302.144485][ T30] audit: type=1326 audit(1744698462.877:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7260 comm="syz.4.353" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9c7d8d169 code=0x0 [ 302.149840][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.337617][ T5912] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 302.350337][ T971] usb 2-1: Product: syz [ 302.356879][ T971] usb 2-1: Manufacturer: syz [ 302.363739][ T971] usb 2-1: SerialNumber: syz [ 302.378446][ T971] usb 2-1: config 0 descriptor?? [ 302.922782][ T971] snd_usb_podhd 2-1:0.0: Line 6 POD HDDESKTOP found [ 302.946028][ T971] snd_usb_podhd 2-1:0.0: set_interface failed [ 302.957429][ T971] snd_usb_podhd 2-1:0.0: Line 6 POD HDDESKTOP now disconnected [ 302.983900][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 302.998310][ T971] snd_usb_podhd 2-1:0.0: probe with driver snd_usb_podhd failed with error -71 [ 303.071527][ T5912] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c08, bcdDevice= 0.00 [ 303.140112][ T971] usb 2-1: USB disconnect, device number 12 [ 303.151025][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.314534][ T5912] usb 3-1: config 0 descriptor?? [ 303.365448][ T7254] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 304.050532][ T7288] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 304.161794][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 304.283331][ T30] audit: type=1400 audit(1744698465.007:381): avc: denied { listen } for pid=7252 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 304.532546][ T5912] usbhid 3-1:0.0: can't add hid device: -71 [ 304.545695][ T5912] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 304.558331][ T5912] usb 3-1: USB disconnect, device number 11 [ 304.561888][ T7295] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.571858][ T7295] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.699623][ T30] audit: type=1400 audit(1744698466.417:382): avc: denied { listen } for pid=7303 comm="syz.1.366" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 305.719940][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.749480][ T30] audit: type=1400 audit(1744698466.417:383): avc: denied { getopt } for pid=7303 comm="syz.1.366" laddr=172.20.20.10 lport=59590 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 305.774237][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.919281][ T7315] sctp: [Deprecated]: syz.1.367 (pid 7315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.919281][ T7315] Use struct sctp_sack_info instead [ 305.920100][ T5940] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 306.084894][ T30] audit: type=1400 audit(1744698466.817:384): avc: denied { ioctl } for pid=7311 comm="syz.1.367" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 306.670719][ T5940] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 306.684925][ T5940] usb 4-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 306.696768][ T5940] usb 4-1: config 0 has no interface number 0 [ 306.710821][ T5940] usb 4-1: too many endpoints for config 0 interface 89 altsetting 249: 226, using maximum allowed: 30 [ 306.722941][ T5940] usb 4-1: config 0 interface 89 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 226 [ 306.737631][ T5940] usb 4-1: config 0 interface 89 has no altsetting 0 [ 306.759394][ T5912] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 306.777108][ T5940] usb 4-1: New USB device found, idVendor=2294, idProduct=635b, bcdDevice=a2.8d [ 306.786738][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 306.838254][ T5940] usb 4-1: Product: syz [ 306.862598][ T5940] usb 4-1: Manufacturer: syz [ 306.883506][ T5940] usb 4-1: SerialNumber: syz [ 306.902758][ T7324] wireguard0: entered promiscuous mode [ 306.913708][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 306.928481][ T5940] usb 4-1: config 0 descriptor?? [ 306.944170][ T7324] wireguard0: entered allmulticast mode [ 306.952031][ T5912] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c08, bcdDevice= 0.00 [ 307.276605][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.394921][ T5912] usb 2-1: config 0 descriptor?? [ 307.829637][ T7315] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 308.119072][ T7331] kvm: MONITOR instruction emulated as NOP! [ 308.350550][ T30] audit: type=1400 audit(1744698469.057:385): avc: denied { bind } for pid=7311 comm="syz.1.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 308.350689][ T7335] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 308.379390][ T30] audit: type=1400 audit(1744698469.067:386): avc: denied { ioctl } for pid=7311 comm="syz.1.367" path="socket:[13896]" dev="sockfs" ino=13896 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 308.493804][ T7333] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2187840259 (4375680518 ns) > initial count (2011391858 ns). Using initial count to start timer. [ 308.515978][ T7333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.373'. [ 308.849506][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'. [ 308.862355][ T7342] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.869892][ T7342] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.213450][ T5940] usb 4-1: USB disconnect, device number 11 [ 310.223012][ T5912] usbhid 2-1:0.0: can't add hid device: -71 [ 310.228963][ T5912] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 310.241218][ T5912] usb 2-1: USB disconnect, device number 13 [ 310.333844][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.380'. [ 310.499396][ T971] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 311.076950][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 311.120117][ T971] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c08, bcdDevice= 0.00 [ 311.684032][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.697594][ T971] usb 3-1: config 0 descriptor?? [ 311.733796][ T7353] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 311.983086][ T30] audit: type=1400 audit(1744698472.717:387): avc: denied { ioctl } for pid=7368 comm="syz.1.384" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 312.188622][ T971] corsair-psu 0003:1B1C:1C08.0004: item fetching failed at offset 3/5 [ 312.198149][ T971] corsair-psu 0003:1B1C:1C08.0004: probe with driver corsair-psu failed with error -22 [ 312.312326][ T7376] siw: device registration error -23 [ 312.437186][ T971] usb 3-1: USB disconnect, device number 12 [ 314.284771][ T30] audit: type=1400 audit(1744698475.007:388): avc: denied { map } for pid=7379 comm="syz.1.387" path="socket:[14673]" dev="sockfs" ino=14673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 314.307894][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.477923][ T30] audit: type=1400 audit(1744698475.007:389): avc: denied { read } for pid=7379 comm="syz.1.387" path="socket:[14673]" dev="sockfs" ino=14673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 315.472659][ T30] audit: type=1400 audit(1744698476.197:390): avc: denied { ioctl } for pid=7379 comm="syz.1.387" path="socket:[14690]" dev="sockfs" ino=14690 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 315.539401][ T30] audit: type=1400 audit(1744698476.267:391): avc: denied { setopt } for pid=7456 comm="syz.4.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.199327][ T5872] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 316.414014][ T5872] usb 2-1: config 1 has an invalid interface number: 2 but max is 1 [ 316.508536][ T5872] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.595644][ T5872] usb 2-1: config 1 has no interface number 0 [ 316.619950][ T5872] usb 2-1: string descriptor 0 read error: -71 [ 316.626212][ T5872] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 316.635959][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.654531][ T7466] XFS (nullb0): Invalid superblock magic number [ 316.687762][ T5872] usb 2-1: can't set config #1, error -71 [ 316.688156][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.706688][ T5872] usb 2-1: USB disconnect, device number 14 [ 316.707240][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.995023][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.397'. [ 317.100539][ T5912] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 317.317036][ T5912] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 317.326826][ T5912] usb 4-1: config 0 has no interface number 0 [ 317.390094][ T5912] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 317.478441][ T5912] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.495869][ T5912] usb 4-1: config 0 interface 2 has no altsetting 0 [ 317.507491][ T5912] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 317.610129][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.650470][ T5912] usb 4-1: config 0 descriptor?? [ 318.798469][ T5912] usb 4-1: USB disconnect, device number 12 [ 319.727108][ T7509] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.154861][ T7524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.406'. [ 320.188930][ T7509] netlink: 'syz.2.402': attribute type 10 has an invalid length. [ 320.236840][ T7521] netlink: 'syz.1.407': attribute type 29 has an invalid length. [ 320.246405][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'. [ 320.255527][ T30] audit: type=1400 audit(1744698480.977:392): avc: denied { create } for pid=7515 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.297432][ T30] audit: type=1400 audit(1744698481.017:393): avc: denied { connect } for pid=7515 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.503486][ T30] audit: type=1400 audit(1744698481.067:394): avc: denied { shutdown } for pid=7515 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 321.948609][ T30] audit: type=1400 audit(1744698482.237:395): avc: denied { write } for pid=7535 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 322.616161][ T7549] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.889788][ T1203] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 323.049582][ T5872] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 323.069394][ T1203] usb 4-1: Using ep0 maxpacket: 8 [ 323.495842][ T1203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.530206][ T1203] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 323.579647][ T1203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.639426][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 323.646133][ T1203] usb 4-1: config 0 descriptor?? [ 323.657809][ T5872] usb 3-1: unable to get BOS descriptor or descriptor too short [ 323.667220][ T30] audit: type=1400 audit(1744698484.387:396): avc: denied { relabelfrom } for pid=7566 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 323.688793][ T7567] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 323.704113][ T5872] usb 3-1: config index 0 descriptor too short (expected 34347, got 43) [ 323.736031][ T5872] usb 3-1: config 31 has too many interfaces: 196, using maximum allowed: 32 [ 323.831179][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 323.894782][ T30] audit: type=1400 audit(1744698484.397:397): avc: denied { relabelto } for pid=7566 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 323.943008][ T5872] usb 3-1: config 31 has an invalid descriptor of length 0, skipping remainder of the config [ 324.001442][ T1203] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 324.019516][ T5872] usb 3-1: config 31 has 1 interface, different from the descriptor's value: 196 [ 324.032752][ T5872] usb 3-1: config 31 has no interface number 0 [ 324.039044][ T5872] usb 3-1: config 31 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 324.060751][ T30] audit: type=1400 audit(1744698484.417:398): avc: denied { ioctl } for pid=7566 comm="syz.1.419" path="/dev/sg0" dev="devtmpfs" ino=747 ioctlcmd=0x5309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 324.085895][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.127539][ T5872] usb 3-1: config 31 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 324.127678][ T5872] usb 3-1: config 31 interface 81 has no altsetting 0 [ 324.159438][ T5940] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 324.165068][ T5872] usb 3-1: string descriptor 0 read error: -22 [ 324.165144][ T5872] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 324.165157][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.175699][ T5872] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:31.81/input/input8 [ 324.193943][ T7576] xt_CT: You must specify a L4 protocol and not use inversions on it [ 324.325997][ T5940] usb 2-1: descriptor type invalid, skip [ 324.344060][ T5940] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 324.355725][ T5940] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.371757][ T5940] usb 2-1: config 1 interface 0 has no altsetting 0 [ 324.380874][ T5940] usb 2-1: string descriptor 0 read error: -22 [ 324.387071][ T5940] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.40 [ 324.397815][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.408212][ T7572] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 324.410907][ T7575] netlink: 'syz.0.422': attribute type 10 has an invalid length. [ 324.517734][ T5872] usb 3-1: USB disconnect, device number 13 [ 324.656471][ T5940] usbhid 2-1:1.0: can't add hid device: -71 [ 324.737445][ T5940] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 324.810332][ T5940] usb 2-1: USB disconnect, device number 15 [ 325.248426][ T30] audit: type=1400 audit(1744698485.977:399): avc: denied { ioctl } for pid=7587 comm="syz.2.427" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 325.750622][ T30] audit: type=1400 audit(1744698486.147:400): avc: denied { watch watch_reads } for pid=7585 comm="syz.0.425" path="/proc/286/fdinfo" dev="proc" ino=14944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 325.885954][ T5940] usb 4-1: USB disconnect, device number 13 [ 327.847595][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.429'. [ 328.221974][ T30] audit: type=1400 audit(1744698488.957:401): avc: denied { setopt } for pid=7608 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 328.584635][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.433'. [ 328.646026][ T30] audit: type=1400 audit(1744698489.317:402): avc: denied { setopt } for pid=7611 comm="syz.4.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 329.103988][ T30] audit: type=1400 audit(1744698489.477:403): avc: denied { setattr } for pid=7610 comm="syz.3.434" name="pagemap" dev="proc" ino=15509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 329.358722][ T7621] mmap: syz.2.436 (7621) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 329.369554][ T7633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.440'. [ 329.978087][ T7642] input: syz1 as /devices/virtual/input/input9 [ 330.492259][ T7659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.446'. [ 331.459717][ T7664] PKCS7: Unknown OID: [4] (bad) [ 331.465001][ T7664] PKCS7: Only support pkcs7_signedData type [ 331.537776][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 333.021136][ T30] audit: type=1400 audit(1744698493.757:404): avc: denied { ioctl } for pid=7691 comm="syz.1.456" path="socket:[15637]" dev="sockfs" ino=15637 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 333.081909][ T7692] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 333.093511][ T7696] syz.0.458 (7696): /proc/7695/oom_adj is deprecated, please use /proc/7695/oom_score_adj instead. [ 333.101484][ T30] audit: type=1400 audit(1744698493.807:405): avc: denied { read write } for pid=7691 comm="syz.1.456" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 333.132955][ T7696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.458'. [ 333.189531][ T5872] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 333.257588][ T7701] [ 333.259945][ T7701] ====================================================== [ 333.266951][ T7701] WARNING: possible circular locking dependency detected [ 333.267889][ T30] audit: type=1400 audit(1744698493.817:406): avc: denied { open } for pid=7691 comm="syz.1.456" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 333.273969][ T7701] 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 Not tainted [ 333.273982][ T7701] ------------------------------------------------------ [ 333.273987][ T7701] syz.0.459/7701 is trying to acquire lock: [ 333.273996][ T7701] ffffffff9012caa8 (rtnl_mutex){+.+.}-{4:4}, at: start_sync_thread+0x120/0x28b0 [ 333.274047][ T7701] [ 333.274047][ T7701] but task is already holding lock: [ 333.334487][ T7701] ffff88807f2f4428 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 333.344568][ T7701] [ 333.344568][ T7701] which lock already depends on the new lock. [ 333.344568][ T7701] [ 333.354950][ T7701] [ 333.354950][ T7701] the existing dependency chain (in reverse order) is: [ 333.363938][ T7701] [ 333.363938][ T7701] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 333.372518][ T7701] __mutex_lock+0x199/0xb90 [ 333.377535][ T7701] smc_switch_to_fallback+0x2d/0x9f0 [ 333.383323][ T7701] smc_sendmsg+0x13d/0x520 [ 333.388238][ T7701] __sys_sendto+0x495/0x510 [ 333.393246][ T7701] __x64_sys_sendto+0xe0/0x1c0 [ 333.398522][ T7701] do_syscall_64+0xcd/0x260 [ 333.403538][ T7701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.409939][ T7701] [ 333.409939][ T7701] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 333.417567][ T7701] lock_sock_nested+0x41/0xf0 [ 333.422753][ T7701] sockopt_lock_sock+0x54/0x70 [ 333.428024][ T7701] do_ip_setsockopt+0xfe/0x3240 [ 333.433380][ T7701] ip_setsockopt+0x59/0xf0 [ 333.438314][ T7701] udp_setsockopt+0x7d/0xd0 [ 333.443327][ T7701] do_sock_setsockopt+0x221/0x470 [ 333.448874][ T7701] __sys_setsockopt+0x1a0/0x230 [ 333.454226][ T7701] __x64_sys_setsockopt+0xbd/0x160 [ 333.459852][ T7701] do_syscall_64+0xcd/0x260 [ 333.464863][ T7701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.471256][ T7701] [ 333.471256][ T7701] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 333.478456][ T7701] __lock_acquire+0x1173/0x1ba0 [ 333.483805][ T7701] lock_acquire+0x179/0x350 [ 333.488804][ T7701] __mutex_lock+0x199/0xb90 [ 333.493828][ T7701] start_sync_thread+0x120/0x28b0 [ 333.499355][ T7701] do_ip_vs_set_ctl+0x451/0x11d0 [ 333.504798][ T7701] nf_setsockopt+0x8a/0xf0 [ 333.509719][ T7701] ip_setsockopt+0xcb/0xf0 [ 333.514632][ T7701] tcp_setsockopt+0xa4/0x100 [ 333.519725][ T7701] smc_setsockopt+0x1b3/0xa00 [ 333.524917][ T7701] do_sock_setsockopt+0x221/0x470 [ 333.530461][ T7701] __sys_setsockopt+0x1a0/0x230 [ 333.535834][ T7701] __x64_sys_setsockopt+0xbd/0x160 [ 333.541447][ T7701] do_syscall_64+0xcd/0x260 [ 333.546454][ T7701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.552848][ T7701] [ 333.552848][ T7701] other info that might help us debug this: [ 333.552848][ T7701] [ 333.563054][ T7701] Chain exists of: [ 333.563054][ T7701] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 333.563054][ T7701] [ 333.576594][ T7701] Possible unsafe locking scenario: [ 333.576594][ T7701] [ 333.584035][ T7701] CPU0 CPU1 [ 333.589380][ T7701] ---- ---- [ 333.594723][ T7701] lock(&smc->clcsock_release_lock); [ 333.600077][ T7701] lock(sk_lock-AF_INET); [ 333.606993][ T7701] lock(&smc->clcsock_release_lock); [ 333.614882][ T7701] lock(rtnl_mutex); [ 333.618847][ T7701] [ 333.618847][ T7701] *** DEADLOCK *** [ 333.618847][ T7701] [ 333.626968][ T7701] 1 lock held by syz.0.459/7701: [ 333.631894][ T7701] #0: ffff88807f2f4428 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 333.642401][ T7701] [ 333.642401][ T7701] stack backtrace: [ 333.648266][ T7701] CPU: 0 UID: 0 PID: 7701 Comm: syz.0.459 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 333.648283][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.648291][ T7701] Call Trace: [ 333.648296][ T7701] [ 333.648303][ T7701] dump_stack_lvl+0x116/0x1f0 [ 333.648321][ T7701] print_circular_bug+0x275/0x350 [ 333.648343][ T7701] check_noncircular+0x14c/0x170 [ 333.648362][ T7701] ? __lock_acquire+0x5ca/0x1ba0 [ 333.648376][ T7701] __lock_acquire+0x1173/0x1ba0 [ 333.648390][ T7701] lock_acquire+0x179/0x350 [ 333.648402][ T7701] ? start_sync_thread+0x120/0x28b0 [ 333.648420][ T7701] ? __pfx___might_resched+0x10/0x10 [ 333.648439][ T7701] ? __lock_acquire+0x5ca/0x1ba0 [ 333.648451][ T7701] __mutex_lock+0x199/0xb90 [ 333.648470][ T7701] ? start_sync_thread+0x120/0x28b0 [ 333.648486][ T7701] ? __kasan_check_byte+0x13/0x50 [ 333.648501][ T7701] ? start_sync_thread+0x120/0x28b0 [ 333.648517][ T7701] ? __pfx___mutex_lock+0x10/0x10 [ 333.648536][ T7701] ? is_bpf_text_address+0x8a/0x1a0 [ 333.648554][ T7701] ? start_sync_thread+0x120/0x28b0 [ 333.648570][ T7701] ? rtnl_lock+0x9/0x20 [ 333.648580][ T7701] start_sync_thread+0x120/0x28b0 [ 333.648597][ T7701] ? __lock_acquire+0xaa4/0x1ba0 [ 333.648609][ T7701] ? cred_has_capability.isra.0+0x193/0x2f0 [ 333.648629][ T7701] ? __pfx_start_sync_thread+0x10/0x10 [ 333.648647][ T7701] ? find_held_lock+0x2b/0x80 [ 333.648662][ T7701] ? __might_fault+0xe3/0x190 [ 333.648675][ T7701] ? __might_fault+0xe3/0x190 [ 333.648688][ T7701] ? __might_fault+0x13b/0x190 [ 333.648701][ T7701] ? read_word_at_a_time+0xe/0x20 [ 333.648723][ T7701] ? do_ip_vs_set_ctl+0x451/0x11d0 [ 333.648743][ T7701] do_ip_vs_set_ctl+0x451/0x11d0 [ 333.648764][ T7701] ? __mutex_trylock_common+0x90/0x250 [ 333.648777][ T7701] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 333.648797][ T7701] ? __pfx___mutex_trylock_common+0x10/0x10 [ 333.648810][ T7701] ? __pfx___might_resched+0x10/0x10 [ 333.648830][ T7701] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 333.648850][ T7701] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 333.648874][ T7701] ? nf_setsockopt+0x8a/0xf0 [ 333.648890][ T7701] nf_setsockopt+0x8a/0xf0 [ 333.648908][ T7701] ip_setsockopt+0xcb/0xf0 [ 333.648920][ T7701] tcp_setsockopt+0xa4/0x100 [ 333.648941][ T7701] smc_setsockopt+0x1b3/0xa00 [ 333.648953][ T7701] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 333.648974][ T7701] ? __pfx_smc_setsockopt+0x10/0x10 [ 333.648988][ T7701] ? selinux_socket_setsockopt+0x6a/0x80 [ 333.649004][ T7701] ? __pfx_smc_setsockopt+0x10/0x10 [ 333.649017][ T7701] do_sock_setsockopt+0x221/0x470 [ 333.649036][ T7701] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 333.649059][ T7701] __sys_setsockopt+0x1a0/0x230 [ 333.649075][ T7701] __x64_sys_setsockopt+0xbd/0x160 [ 333.649089][ T7701] ? do_syscall_64+0x91/0x260 [ 333.649107][ T7701] ? lockdep_hardirqs_on+0x7c/0x110 [ 333.649124][ T7701] do_syscall_64+0xcd/0x260 [ 333.649142][ T7701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.649156][ T7701] RIP: 0033:0x7fe50698d169 [ 333.649168][ T7701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.649182][ T7701] RSP: 002b:00007fe507879038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 333.649195][ T7701] RAX: ffffffffffffffda RBX: 00007fe506ba5fa0 RCX: 00007fe50698d169 [ 333.649203][ T7701] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 333.649212][ T7701] RBP: 00007fe506a0e990 R08: 0000000000000018 R09: 0000000000000000 [ 333.649220][ T7701] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.649228][ T7701] R13: 0000000000000000 R14: 00007fe506ba5fa0 R15: 00007ffebf4586d8 [ 333.649241][ T7701] [ 334.008794][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.037281][ T7704] IPVS: stopping master sync thread 7706 ... [ 334.039563][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 334.050774][ T5872] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 334.058764][ T5872] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 334.066837][ T5872] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 334.087304][ T7707] affs: No valid root block on device nullb0 [ 334.093351][ T30] audit: type=1400 audit(1744698494.817:407): avc: denied { ioctl } for pid=7702 comm="syz.1.460" path="socket:[15237]" dev="sockfs" ino=15237 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 334.121500][ T5872] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 334.130605][ T5872] usb 4-1: config 0 has no interface number 0 [ 334.136670][ T5872] usb 4-1: config 0 has no interface number 1 [ 334.145722][ T5872] usb 4-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 334.159578][ T5872] usb 4-1: too many endpoints for config 0 interface 3 altsetting 7: 74, using maximum allowed: 30 [ 334.179625][ T5872] usb 4-1: config 0 interface 3 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 74 [ 334.249402][ T5872] usb 4-1: config 0 interface 3 has no altsetting 0 [ 334.257499][ T5872] usb 4-1: New USB device found, idVendor=0582, idProduct=0047, bcdDevice=35.81 [ 334.266566][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.274567][ T5872] usb 4-1: Product: syz [ 334.278698][ T5872] usb 4-1: Manufacturer: syz [ 334.287311][ T5872] usb 4-1: SerialNumber: syz [ 334.540348][ T5872] usb 4-1: config 0 descriptor?? [ 334.754369][ T7689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.763304][ T7689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.185197][ T5872] hub 4-1:0.3: Invalid hub with more than one config or interface [ 336.209314][ T5872] hub 4-1:0.3: probe with driver hub failed with error -22 [ 336.227964][ T5872] usb 4-1: USB disconnect, device number 14 [ 336.243058][ T6745] udevd[6745]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory