last executing test programs: 11.547341186s ago: executing program 3 (id=785): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) preadv(r3, &(0x7f0000003540)=[{&(0x7f0000000180)=""/76, 0x4c}], 0x1, 0xfffffffe, 0x80) (fail_nth: 1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[], 0x0) r5 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 9.543950954s ago: executing program 3 (id=787): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10000, 0x190) symlinkat(&(0x7f0000000140)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x6, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}}) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)={0x5f87, 0xd2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 9.470953852s ago: executing program 4 (id=788): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x23, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) open_by_handle_at(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x90800, 0x0) kcmp(r0, 0x0, 0x4, r2, r5) r6 = socket$packet(0x11, 0x3, 0x300) ioperm(0x40, 0x101, 0x8) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0xaf, 0x6, 0x6, 0x1}, {0x80, 0xae, 0x10, 0xfffffbff}, {0x4, 0x5f, 0x2, 0x5}]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r6, @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000256000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="b8ff0f8ee8ba400066ed0f20c06635200000000f22c0660fd62b3e0f01f93e2e0fc7bb50720f20d86635200000000f22d8ba200066ed40fdf4bad80c66b8363f728666efbafc0cb8922eef", 0x4c}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r11) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0xfffffffffffffffc) r12 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x60000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) 8.459349714s ago: executing program 4 (id=791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmmsg(r0, &(0x7f0000004500)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000240)=""/101, 0x65}, {&(0x7f00000004c0)=""/79, 0x4f}], 0x6, &(0x7f00000005c0)=""/200, 0xc8}, 0x9}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/244, 0xf4}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/226, 0xe2}, {&(0x7f0000000940)=""/157, 0x9d}], 0x4, &(0x7f0000000a00)=""/189, 0xbd}, 0x8ee}, {{&(0x7f0000000ac0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/155, 0x9b}, {&(0x7f0000000c00)=""/187, 0xbb}, {&(0x7f0000000cc0)=""/85, 0x55}], 0x4}, 0x6}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000004000)=""/159, 0x9f}, {&(0x7f00000040c0)=""/226, 0xe2}, {&(0x7f00000041c0)=""/124, 0x7c}], 0x3}, 0x26a2}, {{&(0x7f0000004280)=@hci, 0x80, &(0x7f0000004400)=[{&(0x7f0000004300)=""/196, 0xc4}], 0x1, &(0x7f0000004440)=""/155, 0x9b}, 0x1000}], 0x5, 0x160, 0x0) 8.422196605s ago: executing program 3 (id=792): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000100), 0x120) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x7ffd) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f00000006c0)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000001e40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000200)="0b12", 0x2}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000070000004608ead0000000811100000000000000"], 0x30}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x2, 0xc004) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x40) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) 8.130180563s ago: executing program 2 (id=794): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"}) (fail_nth: 3) 7.563931555s ago: executing program 2 (id=796): setgroups(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0x708}], 0x1, 0x0, 0x0, 0x0) read$dsp(r5, &(0x7f0000001200)=""/4096, 0x1000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) readv(r4, &(0x7f0000000000), 0x0) setregid(0xffffffffffffffff, r2) syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x2701, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x2, "94c492eb0165203d36bec70800890100000000000000e1100a0000005900", 0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) setresuid(0x0, r1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0xff0c) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf372, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x64, 0x32, 0x9, 0x0, 0x0, {0x2}, [@nested={0x50, 0x1, 0x0, 0x1, [@typed={0x4b, 0x11, 0x0, 0x0, @str='\xcaU\xde\xa8\xc9% x\xa6\xa2\xcc\xc4\xab\x8c\xf1\xa59\xf1Aj\b0\xee\x11\xb49\x1e\xc6\x87\aN\xaf\x97\x9c]\xa5\xcdG: \x00P\xce\xfa\xfb\xd2\x03\xc1\xf9\x85\xabT\xe2bu\x1d\x9c\x16\xb3\xde\xf2\x06\xea\fM\x1bwq\x06\xf7\x87'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80c4}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x0, 0xd, 0x4, {0x4, 0x4, 'TQ'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.319108404s ago: executing program 1 (id=797): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@empty, @in=@private=0xa010101, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x80000000000004, 0x6, 0x1, 0x40000400000000}, {0x0, 0x1000000000, 0x53e5, 0x21}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4d3, 0x2b}, 0x0, @in=@empty, 0x1502, 0x4, 0x0, 0x0, 0x0, 0x40}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xfd, 0x0, 0x0, @empty}, 0x1c) 7.262607506s ago: executing program 4 (id=798): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) r1 = dup(r0) connect$802154_dgram(r1, &(0x7f0000000040)={0x24, @short={0x2, 0x2, 0x2}}, 0x14) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="35000e0080000000ffffffffffff08021100000050505050505040000000000000000000640007100006020202020202250300ab4b00000005ff7f00000602020202020204002a0008000c000001000008000d"], 0x74}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}}, 0xc000) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x27, 0x400) r3 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x8080) read(r6, &(0x7f0000000000)=""/170, 0xaa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r9, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setregid(0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x1848, 0xb576, 0x0, 0x0, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f00000015c0)={&(0x7f0000000480), 0xc, &(0x7f0000001580)={0x0}, 0x1, 0x0, 0x0, 0x24048004}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) 6.98407694s ago: executing program 1 (id=801): socket$kcm(0x11, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x0, 0x189102) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) syz_open_dev$MSR(&(0x7f00000001c0), 0x7, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000500)={[0x800000]}, 0x8, 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1, 0x4, 0x4}, 0x20) unshare(0x6a040000) syz_open_procfs(0x0, &(0x7f00000001c0)='net/nfsfs\x00') r1 = socket$phonet(0x23, 0x2, 0x1) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0xa0201, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000480)={{0x3, 0x3, 0x24000000, 0x3ff, '\x00', 0x6}, 0x1, [0x9, 0x11, 0xfffffffffffffff9, 0x5, 0xf, 0x1, 0x0, 0xff, 0xffffffffffffffff, 0x9, 0x1, 0x8, 0xfffffffffffffff7, 0x4, 0x3ff, 0x1, 0x36, 0x482, 0xc0010, 0x9, 0x1, 0x3ff, 0x7ff, 0x5, 0x80, 0x0, 0x4, 0x6, 0xffffffff, 0x9, 0x1, 0x71, 0xa, 0x2, 0x1ff, 0x7fffffff, 0x9, 0x4, 0x5, 0x10, 0xfffffffffffffff7, 0x16, 0x9db6, 0x7f, 0xfffffffffffffff2, 0x2, 0x5, 0x7, 0x0, 0x8, 0x3, 0x303, 0xa2, 0x8000, 0x3, 0x400, 0x9, 0x1fd, 0x3, 0x2, 0xc9a8, 0xffffffff, 0x3, 0x8, 0xffff, 0x0, 0x10000, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x9, 0xec, 0x7f, 0xffffffffffffffff, 0x100000000, 0x9f1a, 0xffffffffffffffff, 0xffffffff, 0x8, 0x0, 0x9, 0x3, 0x9, 0x1, 0x4, 0x3, 0xa, 0x8, 0x8, 0x1, 0x2, 0x4, 0xbf, 0xe70, 0xfffffffffffffff7, 0xb, 0x8000000000000000, 0x6, 0x9, 0x5, 0x639, 0x8000000000000000, 0x4, 0x400, 0x9a06, 0x9, 0xffffffff00000000, 0x3, 0xb3, 0x200080000001, 0x5, 0xd30, 0x7, 0x4, 0x256, 0x6ff, 0x3, 0x7, 0x1ff, 0x6, 0x9, 0x0, 0x1b485fe1, 0x7, 0x7, 0xfffffffffffffff7, 0x9]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x18, &(0x7f0000000800)={r3, 0x1, 0x6}, 0x10) sendto$packet(r4, &(0x7f0000000040)="02030007ffff0000000045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x9, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) 6.105033114s ago: executing program 3 (id=803): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0x20, &(0x7f0000001300)={&(0x7f0000000280)=""/90, 0x5a, 0x0, &(0x7f0000000300)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x12, 0x6, &(0x7f0000001600)=@raw=[@alu={0x0, 0x0, 0xd, 0x7, 0x2, 0xffffffffffffffff, 0x1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @jmp={0x5, 0x0, 0xd, 0x5, 0x2, 0xfffffffffffffff4, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0x0, 0xde, &(0x7f00000000c0)=""/222, 0x1f00, 0x0, '\x00', r6, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x1, 0x9, 0x4}, 0x10, r7, 0xffffffffffffffff, 0x2, &(0x7f0000001580)=[r4, r4, 0xffffffffffffffff], &(0x7f00000013c0)=[{0x2, 0x5, 0x1, 0x3}, {0x4, 0x2, 0x4, 0x8}], 0x10, 0x4, @void, @value}, 0x94) r8 = semget$private(0x0, 0x3, 0x4de) semctl$GETVAL(r8, 0xcc9f7c919fc54e9a, 0xc, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000080), 0x84800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001540)={r9, r6, 0x25, 0x0, @void}, 0x10) tee(r9, r9, 0x7ff, 0x0) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)=@generic={&(0x7f0000001380)='./file0\x00'}, 0x18) ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f0000001500)=r10) 6.083322407s ago: executing program 1 (id=804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000008000000000000000a34000000140a070300000000000000000200000908000340000000010900010073797a30000000000c0006"], 0x70}}, 0x0) 5.891079745s ago: executing program 0 (id=805): r0 = socket(0x2, 0x80805, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x320, 0x3d8, 0x3d8, 0x320, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@ecn={{0x28}, {0x10, 0x2, 0x7, 0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001800000000000000940000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000f00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 5.309846376s ago: executing program 1 (id=806): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001ec0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000001900], 0xff00, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="00000000000004000000000000000000000000000000000000000000000000000000000000000000feffffff0000080000000000000080000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x28000, 0x0) read$fb(r3, &(0x7f0000000100)=""/143, 0x8f) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "3f5453b6"}]}}, 0x0}, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000019980)=ANY=[], 0x90) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x11, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, 0x0, 0x0, 0xffffffff, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x6d}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) request_key(0x0, &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0) flock(r1, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01022abd7000fbdbdf2514fe16574f2759b1b39a00cbc394ea430000000100000274250901985f8b40000000001e19e2d5e4"], 0x20}, 0x1, 0x0, 0x0, 0x4040044}, 0x0) 4.957074878s ago: executing program 3 (id=807): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x12, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, @in6={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x59d2}, @in6={0xa, 0x4e20, 0xd5, @private1, 0xffffff73}]}, &(0x7f0000000240)=0x10) 4.830203871s ago: executing program 3 (id=808): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmmsg(r0, &(0x7f0000004500)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000240)=""/101, 0x65}, {&(0x7f00000004c0)=""/79, 0x4f}], 0x6, &(0x7f00000005c0)=""/200, 0xc8}, 0x9}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/244, 0xf4}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/226, 0xe2}, {&(0x7f0000000940)=""/157, 0x9d}], 0x4, &(0x7f0000000a00)=""/189, 0xbd}, 0x8ee}, {{&(0x7f0000000ac0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/155, 0x9b}, {&(0x7f0000000c00)=""/187, 0xbb}, {&(0x7f0000000cc0)=""/85, 0x55}], 0x4}, 0x6}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000004000)=""/159, 0x9f}, {&(0x7f00000040c0)=""/226, 0xe2}, {&(0x7f00000041c0)=""/124, 0x7c}], 0x3}, 0x26a2}, {{&(0x7f0000004280)=@hci, 0x80, &(0x7f0000004400)=[{&(0x7f0000004300)=""/196, 0xc4}], 0x1, &(0x7f0000004440)=""/155, 0x9b}, 0x1000}], 0x5, 0x160, 0x0) 4.828703961s ago: executing program 0 (id=809): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='kfree\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) 4.252076538s ago: executing program 2 (id=810): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_freeze_timeout', 0x141b82, 0x180) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r8, 0x0, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, &(0x7f00000008c0)) fsopen(&(0x7f00000000c0)='qnx4\x00', 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x9, 0x12) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r10, 0x4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r10, 0x7}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) r11 = msgget$private(0x0, 0x123) msgrcv(r11, 0x0, 0x0, 0x3, 0x3000) 3.721411634s ago: executing program 0 (id=811): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x4}]}}}]}, 0x3c}}, 0x0) 3.660538042s ago: executing program 0 (id=812): openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) fcntl$setown(r3, 0x8, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r7) r8 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r9, 0x0, r9) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r5) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r11, 0x0, 0xffffffffffffffdc, &(0x7f0000000280)='3Ud+IA\x1ey\xd4\x1f^\xe8\xccJ\xc7\xbfn\xa6<\x18G\x97\xdc\"\xd4H\xed\xe2\xe0\xe7\xfc6\x0e\xf1n\x19\xccu\xe9\x14\xc5\xfdW\'d\xd3\xf0\xb5\xccn?-\x80\xa8\xe7\xee\b\xc7'}, 0x30) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r13, r13, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40000042, 0x0) r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r14, 0xffffffffffffffff, 0x0) r15 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r15, 0x40046f41, &(0x7f0000000440)=0x20000) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) 3.630406785s ago: executing program 4 (id=813): r0 = socket(0x2, 0x80805, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x320, 0x3d8, 0x3d8, 0x320, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@ecn={{0x28}, {0x10, 0x2, 0x7, 0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001800000000000000940000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000f00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 2.731460514s ago: executing program 2 (id=814): r0 = socket(0x2, 0x80805, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x320, 0x3d8, 0x3d8, 0x320, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@ecn={{0x28}, {0x10, 0x2, 0x7, 0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001800000000000000940000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000f00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 2.145233176s ago: executing program 0 (id=815): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @random="2d76ebf67469", 'hsr0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PPPOEIOCSFWD(r0, 0x80047453, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'veth1_to_batadv\x00'}}) 2.143780552s ago: executing program 4 (id=816): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) semget$private(0x0, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @local}, 0x2}}, 0x26) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x4044000) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="01040a5cb97c40c6fd1a67ab4042518107", @ANYBLOB], 0x28}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.953228525s ago: executing program 2 (id=817): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0x20, &(0x7f0000001300)={&(0x7f0000000280)=""/90, 0x5a, 0x0, &(0x7f0000000300)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x12, 0x6, &(0x7f0000001600)=@raw=[@alu={0x0, 0x0, 0xd, 0x7, 0x2, 0xffffffffffffffff, 0x1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @jmp={0x5, 0x0, 0xd, 0x5, 0x2, 0xfffffffffffffff4, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0x0, 0xde, &(0x7f00000000c0)=""/222, 0x1f00, 0x0, '\x00', r6, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x1, 0x9, 0x4}, 0x10, r7, 0xffffffffffffffff, 0x2, &(0x7f0000001580)=[r4, r4, 0xffffffffffffffff], &(0x7f00000013c0)=[{0x2, 0x5, 0x1, 0x3}, {0x4, 0x2, 0x4, 0x8}], 0x10, 0x4, @void, @value}, 0x94) r8 = semget$private(0x0, 0x3, 0x4de) semctl$GETVAL(r8, 0xcc9f7c919fc54e9a, 0xc, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000080), 0x84800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001540)={r9, r6, 0x25, 0x0, @void}, 0x10) tee(r9, r9, 0x7ff, 0x0) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)=@generic={&(0x7f0000001380)='./file0\x00'}, 0x18) ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f0000001500)=r10) 1.392119161s ago: executing program 0 (id=818): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xa4000061) read(r0, 0x0, 0x0) close(r0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) 1.217993132s ago: executing program 1 (id=819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="b514b73a325412cdb62f9fcb46f816a2cfb0519cb7fd9f7a08b19e736b9250f3706e13043882df460526d487572100886285cbce1884d9f9e5ebf72c1240526695d51fd3f9f5ef5af0aaca648b1bc4c7effe1cadbb1a1bb11c85fc535fccdc0522c324d704eadd8eab7f0000fe2396d4c90ab9ec6ae2cc87af15a3fcae03cd4f353fc4a0d549c7fb0835fec9aa053dc1ad1cf0b28149363bfe2876b040d05f2931e07f942cd3e938ce858d0018b6c7c275af0eb2e024759fa948974a787a014b3a561c8782b96f9f54c25b2dbf06a208627fd374adb0048148dab79797671aab", 0xe0}], 0x1}, 0x4048080) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) (fail_nth: 1) 1.180515021s ago: executing program 4 (id=820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008050) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a3000000000080003"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 188.002245ms ago: executing program 2 (id=821): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0x4, r0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private2, @in6=@loopback}}, {{@in6=@private0}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00'}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=r2}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) acct(0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) set_mempolicy(0x1, 0x0, 0xff) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 0s ago: executing program 1 (id=822): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x4124, 0x1}, 0x18, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xc8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r3}, 0x10) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r4, 0x7}, 0x8) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=prefer']) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x515002, 0xc6) mkdir(&(0x7f00000000c0)='./file0\x00', 0x80) unshare(0x2040400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) shutdown(r5, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) kernel console output (not intermixed with test programs): #0, error -71 [ 143.354188][ T10] usb 4-1: USB disconnect, device number 13 [ 143.423278][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 143.423293][ T30] audit: type=1400 audit(1742266212.932:462): avc: denied { ioctl } for pid=6847 comm="syz.4.257" path="socket:[11534]" dev="sockfs" ino=11534 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 143.519594][ T972] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 143.662547][ T30] audit: type=1400 audit(1742266213.002:463): avc: denied { read write } for pid=6850 comm="syz.0.258" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 143.670726][ T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.698457][ T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.709602][ T972] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 143.718762][ T972] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 143.972824][ T5827] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 144.173822][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.244760][ T10] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 144.251742][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.264322][ T5827] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 144.273893][ T972] usb 2-1: Manufacturer: syz [ 144.274146][ T5827] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 144.291746][ T972] usb 2-1: config 0 descriptor?? [ 144.297421][ T5827] usb 5-1: Manufacturer: syz [ 144.400727][ T5827] usb 5-1: config 0 descriptor?? [ 144.422738][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.464203][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.482950][ T10] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 144.497527][ T10] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 144.505839][ T10] usb 4-1: Manufacturer: syz [ 144.515268][ T10] usb 4-1: config 0 descriptor?? [ 144.938412][ T5827] cougar 0003:060B:700A.0006: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 145.057576][ T972] cougar 0003:060B:700A.0005: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 145.268650][ T5827] usb 5-1: USB disconnect, device number 4 [ 145.359356][ T972] usb 2-1: USB disconnect, device number 11 [ 145.406458][ T10] cougar 0003:060B:700A.0007: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 146.096673][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 146.168737][ T5864] usb 4-1: USB disconnect, device number 14 [ 146.601351][ T6894] 9pnet_fd: Insufficient options for proto=fd [ 146.682764][ T6899] Can't find a SQUASHFS superblock on nullb0 [ 146.876343][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 147.279644][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 147.550165][ T10] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 147.599939][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.630757][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.275'. [ 147.644420][ T10] usb 1-1: config 0 has no interface number 0 [ 147.779629][ T10] usb 1-1: config 0 interface 175 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 147.781481][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 147.796257][ T10] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 147.823174][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.837486][ T10] usb 1-1: Product: syz [ 147.849839][ T10] usb 1-1: Manufacturer: syz [ 147.856566][ T10] usb 1-1: SerialNumber: syz [ 147.915264][ T10] usb 1-1: config 0 descriptor?? [ 148.070946][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 148.116828][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 148.197344][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 148.263272][ T10] symbolserial 1-1:0.175: required endpoints missing [ 148.480175][ T6911] ceph: No mds server is up or the cluster is laggy [ 148.786943][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 148.810590][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 149.182308][ T6899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.249866][ T6899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.337443][ T10] usb 1-1: USB disconnect, device number 7 [ 150.294176][ T972] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 150.469601][ T972] usb 4-1: Using ep0 maxpacket: 16 [ 150.486916][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 150.516902][ T6947] tipc: Started in network mode [ 150.522414][ T6947] tipc: Node identity 7f000001, cluster identity 4711 [ 150.529620][ T6947] tipc: Enabled bearer , priority 10 [ 150.529650][ T972] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 150.612877][ T6948] netlink: 56 bytes leftover after parsing attributes in process `syz.1.285'. [ 151.138864][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.419803][ T30] audit: type=1400 audit(1742266220.142:464): avc: denied { setopt } for pid=6941 comm="syz.1.285" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 151.440128][ T972] usb 4-1: Product: syz [ 151.440153][ T972] usb 4-1: Manufacturer: syz [ 151.440168][ T972] usb 4-1: SerialNumber: syz [ 151.451206][ T972] usb 4-1: config 0 descriptor?? [ 151.452292][ T972] hub 4-1:0.0: bad descriptor, ignoring hub [ 151.543800][ T972] hub 4-1:0.0: probe with driver hub failed with error -5 [ 151.565267][ T972] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 151.569550][ T5864] tipc: Node number set to 2130706433 [ 151.600884][ T6946] netlink: 16 bytes leftover after parsing attributes in process `syz.2.287'. [ 151.803231][ T30] audit: type=1400 audit(1742266221.312:465): avc: denied { write } for pid=6933 comm="syz.3.284" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 151.821308][ T6954] kvm: MWAIT instruction emulated as NOP! [ 152.107901][ T30] audit: type=1400 audit(1742266221.322:466): avc: denied { getopt } for pid=6933 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 152.130322][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'. [ 152.142368][ T6961] netlink: 44 bytes leftover after parsing attributes in process `syz.0.288'. [ 152.152866][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'. [ 152.191801][ T10] usb 4-1: USB disconnect, device number 15 [ 152.324581][ T6964] netlink: 'syz.2.291': attribute type 12 has an invalid length. [ 152.353975][ T30] audit: type=1400 audit(1742266221.702:467): avc: denied { name_bind } for pid=6959 comm="syz.2.290" path="socket:[12441]" dev="sockfs" ino=12441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.502394][ T30] audit: type=1400 audit(1742266221.872:468): avc: denied { ioctl } for pid=6963 comm="syz.2.291" path="socket:[11755]" dev="sockfs" ino=11755 ioctlcmd=0x5104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 152.631518][ T6952] syz.1.289 (6952): drop_caches: 2 [ 152.927341][ T5864] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 153.561914][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 153.590057][ T5864] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 153.599145][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.607741][ T5864] usb 3-1: Product: syz [ 153.612418][ T5864] usb 3-1: Manufacturer: syz [ 153.617092][ T5864] usb 3-1: SerialNumber: syz [ 153.630259][ T5864] usb 3-1: config 0 descriptor?? [ 153.637029][ T5864] rtl8150 3-1:0.0: couldn't find required endpoints [ 153.649877][ T5864] rtl8150 3-1:0.0: probe with driver rtl8150 failed with error -5 [ 153.682425][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 154.118793][ T6982] team0: Device gtp0 is of different type [ 154.127566][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.144469][ T10] usb 4-1: config 0 has no interface number 0 [ 154.159377][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.174114][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.186036][ T10] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 154.206263][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.228343][ T10] usb 4-1: config 0 descriptor?? [ 154.390628][ T30] audit: type=1400 audit(1742266223.892:469): avc: denied { mount } for pid=6987 comm="syz.0.299" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 154.400260][ T6988] overlay: ./file0 is not a directory [ 154.420558][ T5864] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.435039][ T5916] usb 3-1: USB disconnect, device number 17 [ 154.583877][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 154.592177][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 154.605533][ T5864] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 154.618453][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 154.630923][ T5864] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 154.643335][ T5864] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 154.740134][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.749080][ T5864] usb 5-1: Product: syz [ 154.798597][ T5864] usb 5-1: Manufacturer: syz [ 155.314641][ T6999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.303'. [ 155.341977][ T30] audit: type=1400 audit(1742266224.852:470): avc: denied { ioctl } for pid=6993 comm="syz.2.302" path="/dev/input/mouse0" dev="devtmpfs" ino=1005 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 155.373826][ T5864] usb 5-1: SerialNumber: syz [ 155.403314][ T10] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0008/input/input10 [ 155.403839][ T5864] usb 5-1: config 0 descriptor?? [ 155.518427][ T6984] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 155.528807][ C1] port100 5-1:0.0: NFC: Urb failure (status -71) [ 155.549816][ T5864] port100 5-1:0.0: NFC: Could not get supported command types [ 156.001201][ T10] holtek_kbd 0003:04D9:A055.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 156.024421][ T30] audit: type=1400 audit(1742266225.532:471): avc: denied { bind } for pid=6981 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 156.346394][ T10] usb 4-1: USB disconnect, device number 16 [ 156.398142][ T52] usb 5-1: USB disconnect, device number 5 [ 156.458758][ T1202] libceph: connect (1)[c::]:6789 error -101 [ 156.465048][ T1202] libceph: mon0 (1)[c::]:6789 connect error [ 156.555467][ T7002] syz.2.304 (7002): drop_caches: 2 [ 156.630531][ T5864] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 156.642304][ T7011] ceph: No mds server is up or the cluster is laggy [ 156.699226][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 156.731028][ T7021] netlink: 44 bytes leftover after parsing attributes in process `syz.2.310'. [ 156.741955][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.310'. [ 156.819512][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 156.828136][ T5864] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 156.849504][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 156.893487][ T5864] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 156.962588][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 156.973828][ T5864] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 156.987473][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.003159][ T5864] usb 2-1: Product: syz [ 157.013329][ T5864] usb 2-1: Manufacturer: syz [ 157.021353][ T5864] usb 2-1: SerialNumber: syz [ 157.034950][ T5864] usb 2-1: config 0 descriptor?? [ 157.159867][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 157.175335][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.191003][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.324606][ T5864] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 157.333751][ T5864] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 157.341283][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 157.370498][ T7029] ip6t_srh: unknown srh invflags 7D00 [ 157.384537][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 157.438770][ T10] usb 4-1: SerialNumber: syz [ 157.446241][ T30] audit: type=1400 audit(1742266226.952:472): avc: denied { ioctl } for pid=7008 comm="syz.1.307" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 157.503515][ T10] usb 4-1: 0:2 : does not exist [ 157.578075][ T5864] usb 2-1: USB disconnect, device number 12 [ 157.747090][ T10] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 157.762238][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 157.790902][ T30] audit: type=1400 audit(1742266227.302:473): avc: denied { ioctl } for pid=7032 comm="syz.0.313" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 157.866770][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 157.989870][ T10] usb 4-1: USB disconnect, device number 17 [ 158.909888][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.602211][ T7045] xt_TPROXY: Can be used only with -p tcp or -p udp [ 160.322898][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 160.721084][ T972] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 160.836158][ T1202] libceph: connect (1)[c::]:6789 error -101 [ 160.846737][ T1202] libceph: mon0 (1)[c::]:6789 connect error [ 160.889641][ T972] usb 3-1: Using ep0 maxpacket: 16 [ 160.924755][ T972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.953544][ T972] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 161.080718][ T7076] ceph: No mds server is up or the cluster is laggy [ 161.126342][ T972] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 161.134749][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 161.141054][ T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.160956][ T972] usb 3-1: config 0 descriptor?? [ 161.197884][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 161.901495][ T7075] syz.4.325 (7075): drop_caches: 2 [ 162.737450][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.329'. [ 162.796592][ T7090] netlink: 44 bytes leftover after parsing attributes in process `syz.0.329'. [ 162.904066][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.329'. [ 163.051249][ T972] usb 3-1: USB disconnect, device number 18 [ 163.110541][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.330'. [ 163.773517][ T1202] libceph: connect (1)[c::]:6789 error -101 [ 163.966975][ T1202] libceph: mon0 (1)[c::]:6789 connect error [ 164.385311][ T7103] ceph: No mds server is up or the cluster is laggy [ 164.809406][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 165.089631][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.335'. [ 165.395916][ T7133] x_tables: duplicate underflow at hook 2 [ 165.405998][ T7133] fuse: Unknown parameter '00000000000000000000003' [ 165.514011][ T972] libceph: connect (1)[c::]:6789 error -101 [ 165.529726][ T972] libceph: mon0 (1)[c::]:6789 connect error [ 165.660019][ T7135] ceph: No mds server is up or the cluster is laggy [ 165.848236][ T7145] process 'syz.1.340' launched '/dev/fd/3' with NULL argv: empty string added [ 165.957063][ T30] audit: type=1400 audit(1742266235.462:474): avc: denied { execute_no_trans } for pid=7144 comm="syz.1.340" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 165.995451][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.341'. [ 166.357879][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'. [ 166.764108][ T10] libceph: connect (1)[c::]:6789 error -101 [ 166.776049][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 167.160365][ T7160] ceph: No mds server is up or the cluster is laggy [ 167.249329][ T9] libceph: connect (1)[c::]:6789 error -101 [ 167.256282][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 167.558819][ T30] audit: type=1400 audit(1742266236.952:475): avc: denied { shutdown } for pid=7172 comm="syz.1.348" lport=40526 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.589809][ T5864] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 168.371325][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 168.394768][ T5864] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.528096][ T5864] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.578428][ T5864] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 169.099645][ T30] audit: type=1400 audit(1742266238.182:476): avc: denied { create } for pid=7183 comm="syz.4.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 169.138629][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 169.153112][ T30] audit: type=1400 audit(1742266238.202:477): avc: denied { connect } for pid=7183 comm="syz.4.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 169.206884][ T5864] usb 4-1: SerialNumber: syz [ 169.303921][ T5864] usb 4-1: 0:2 : does not exist [ 169.400604][ T1202] libceph: connect (1)[c::]:6789 error -101 [ 169.406808][ T1202] libceph: mon0 (1)[c::]:6789 connect error [ 169.430018][ T1202] libceph: connect (1)[c::]:6789 error -101 [ 169.454410][ T1202] libceph: mon0 (1)[c::]:6789 connect error [ 169.528830][ T5864] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 169.544959][ T5864] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 169.561832][ T7188] ceph: No mds server is up or the cluster is laggy [ 169.572414][ T5864] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 169.589330][ T5864] usb 4-1: USB disconnect, device number 18 [ 170.128643][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.352'. [ 170.505419][ T7200] FAULT_INJECTION: forcing a failure. [ 170.505419][ T7200] name failslab, interval 1, probability 0, space 0, times 0 [ 170.599556][ T7200] CPU: 0 UID: 0 PID: 7200 Comm: syz.4.353 Not tainted 6.14.0-rc7-syzkaller #0 [ 170.599582][ T7200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.599592][ T7200] Call Trace: [ 170.599598][ T7200] [ 170.599605][ T7200] dump_stack_lvl+0x16c/0x1f0 [ 170.599633][ T7200] should_fail_ex+0x50a/0x650 [ 170.599658][ T7200] ? fs_reclaim_acquire+0xae/0x150 [ 170.599683][ T7200] ? tomoyo_encode2+0x100/0x3e0 [ 170.599706][ T7200] should_failslab+0xc2/0x120 [ 170.599726][ T7200] __kmalloc_noprof+0xcb/0x510 [ 170.599742][ T7200] ? d_absolute_path+0x137/0x1b0 [ 170.599763][ T7200] ? rcu_is_watching+0x12/0xc0 [ 170.599782][ T7200] tomoyo_encode2+0x100/0x3e0 [ 170.599809][ T7200] tomoyo_encode+0x29/0x50 [ 170.599831][ T7200] tomoyo_realpath_from_path+0x19d/0x720 [ 170.599868][ T7200] tomoyo_path_number_perm+0x248/0x590 [ 170.599888][ T7200] ? tomoyo_path_number_perm+0x235/0x590 [ 170.599911][ T7200] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 170.599952][ T7200] ? __pfx_lock_release+0x10/0x10 [ 170.599974][ T7200] ? trace_lock_acquire+0x14e/0x1f0 [ 170.599995][ T7200] ? lock_acquire+0x2f/0xb0 [ 170.600019][ T7200] ? __fget_files+0x40/0x3a0 [ 170.600039][ T7200] ? __fget_files+0x206/0x3a0 [ 170.600057][ T7200] security_file_ioctl+0x9b/0x240 [ 170.600077][ T7200] __x64_sys_ioctl+0xb7/0x200 [ 170.600102][ T7200] do_syscall_64+0xcd/0x250 [ 170.600123][ T7200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.600142][ T7200] RIP: 0033:0x7f13f598d169 [ 170.600155][ T7200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.600168][ T7200] RSP: 002b:00007f13f6800038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.600184][ T7200] RAX: ffffffffffffffda RBX: 00007f13f5ba5fa0 RCX: 00007f13f598d169 [ 170.600195][ T7200] RDX: 0000400000000180 RSI: 0000000080085504 RDI: 0000000000000004 [ 170.600204][ T7200] RBP: 00007f13f6800090 R08: 0000000000000000 R09: 0000000000000000 [ 170.600213][ T7200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.600221][ T7200] R13: 0000000000000000 R14: 00007f13f5ba5fa0 R15: 00007ffd62fdcb08 [ 170.600243][ T7200] [ 170.600273][ T7200] ERROR: Out of memory at tomoyo_realpath_from_path. [ 170.825163][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.473531][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 171.643941][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.745845][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.917550][ T9] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 171.969525][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.980779][ T9] usb 4-1: config 0 descriptor?? [ 172.483881][ T7220] Can't find a SQUASHFS superblock on nullb0 [ 172.523534][ T30] audit: type=1400 audit(1742266242.032:478): avc: denied { read } for pid=7218 comm="syz.2.361" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 172.558394][ T30] audit: type=1400 audit(1742266242.032:479): avc: denied { open } for pid=7218 comm="syz.2.361" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 172.672440][ T9] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x0 [ 172.687036][ T7225] syz.0.362: attempt to access beyond end of device [ 172.687036][ T7225] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 172.700953][ T7225] syz.0.362: attempt to access beyond end of device [ 172.700953][ T7225] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 172.714513][ T7225] syz.0.362: attempt to access beyond end of device [ 172.714513][ T7225] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 172.728726][ T7225] syz.0.362: attempt to access beyond end of device [ 172.728726][ T7225] nbd0: rw=0, sector=18, nr_sectors = 2 limit=0 [ 172.743484][ T7225] syz.0.362: attempt to access beyond end of device [ 172.743484][ T7225] nbd0: rw=0, sector=30, nr_sectors = 2 limit=0 [ 172.758241][ T7225] syz.0.362: attempt to access beyond end of device [ 172.758241][ T7225] nbd0: rw=0, sector=36, nr_sectors = 2 limit=0 [ 172.781051][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 173.118960][ T1202] libceph: connect (1)[c::]:6789 error -101 [ 173.128841][ T1202] libceph: mon0 (1)[c::]:6789 connect error [ 173.151410][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 173.160691][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.170632][ T10] usb 5-1: config 0 descriptor?? [ 173.180474][ T10] cp210x 5-1:0.0: cp210x converter detected [ 173.239579][ T5916] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 173.263803][ T7228] ceph: No mds server is up or the cluster is laggy [ 173.389558][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 173.395907][ T5916] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 32 [ 173.409538][ T1202] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 173.417398][ T5916] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 173.430749][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.438798][ T5916] usb 3-1: Product: syz [ 173.450056][ T5916] usb 3-1: Manufacturer: syz [ 173.454706][ T5916] usb 3-1: SerialNumber: syz [ 173.470926][ T972] usb 4-1: USB disconnect, device number 19 [ 173.477596][ T5916] usb 3-1: config 0 descriptor?? [ 173.509603][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 173.569548][ T1202] usb 1-1: Using ep0 maxpacket: 8 [ 173.576647][ T1202] usb 1-1: config 0 has an invalid interface number: 151 but max is 1 [ 173.585220][ T1202] usb 1-1: config 0 has no interface number 1 [ 173.586609][ T7220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.591506][ T1202] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.605882][ T7220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.611753][ T1202] usb 1-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 173.630992][ T1202] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 173.636038][ T7220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.643291][ T1202] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 173.657392][ T7220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.661790][ T1202] usb 1-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.669641][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 173.682187][ T1202] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 173.708632][ T1202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 173.708696][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.718891][ T1202] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 173.733075][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.738799][ T7220] tmpfs: Unknown parameter 'm…ol' [ 173.754096][ T5916] usb 3-1: USB disconnect, device number 19 [ 173.767003][ T10] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 173.769149][ T1202] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 173.777035][ T10] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 173.791907][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 173.794208][ T1202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.805364][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 173.811578][ T1202] usb 1-1: Product: syz [ 173.822942][ T9] usb 2-1: SerialNumber: syz [ 173.826439][ T1202] usb 1-1: Manufacturer: syz [ 173.827669][ T10] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 173.832779][ T1202] usb 1-1: SerialNumber: syz [ 173.846597][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 173.855159][ T9] usb 2-1: 0:2 : does not exist [ 173.862274][ T1202] usb 1-1: config 0 descriptor?? [ 173.872863][ T7233] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 173.873786][ T10] usb 5-1: USB disconnect, device number 6 [ 173.892604][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 173.901060][ T10] cp210x 5-1:0.0: device disconnected [ 174.031203][ T7240] syz.3.365: attempt to access beyond end of device [ 174.031203][ T7240] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 174.044431][ T7240] syz.3.365: attempt to access beyond end of device [ 174.044431][ T7240] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 174.058806][ T7240] syz.3.365: attempt to access beyond end of device [ 174.058806][ T7240] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 174.076209][ T7240] syz.3.365: attempt to access beyond end of device [ 174.076209][ T7240] nbd3: rw=0, sector=18, nr_sectors = 2 limit=0 [ 174.183059][ T9] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 174.389650][ T9] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 174.415583][ T9] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 174.430135][ T9] usb 2-1: USB disconnect, device number 13 [ 174.465159][ T1202] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.511840][ T1202] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.904350][ T1202] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 175.354121][ T7249] syz.2.368 (7249): drop_caches: 2 [ 175.592367][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.856718][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 175.883275][ T7262] netlink: 44 bytes leftover after parsing attributes in process `syz.2.370'. [ 175.893939][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 175.912183][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 175.939094][ T7264] netlink: 44 bytes leftover after parsing attributes in process `syz.1.371'. [ 175.958431][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.371'. [ 176.272072][ T10] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 176.286139][ T9] usb 1-1: USB disconnect, device number 8 [ 176.460822][ T10] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 176.469395][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.488189][ T10] usb 4-1: config 0 has no interface number 0 [ 176.498114][ T10] usb 4-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 176.511833][ T10] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 176.523566][ T10] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 176.564635][ T10] usb 4-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 176.656187][ T10] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 176.665877][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.746864][ T10] usb 4-1: Product: syz [ 176.752842][ T10] usb 4-1: Manufacturer: syz [ 176.759525][ T10] usb 4-1: SerialNumber: syz [ 177.636058][ T10] usb 4-1: config 0 descriptor?? [ 177.646587][ T10] symbolserial 4-1:0.175: symbol converter detected [ 177.753569][ T10] usb 4-1: symbol converter now attached to ttyUSB0 [ 177.905146][ T7276] Can't find a SQUASHFS superblock on nullb0 [ 177.932192][ T10] usb 4-1: USB disconnect, device number 20 [ 177.940207][ T10] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 178.002271][ T10] symbolserial 4-1:0.175: device disconnected [ 178.238506][ T5827] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 178.384589][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 178.917084][ T7283] bio_check_eod: 8 callbacks suppressed [ 178.917116][ T7283] syz.1.378: attempt to access beyond end of device [ 178.917116][ T7283] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 178.936191][ T7283] syz.1.378: attempt to access beyond end of device [ 178.936191][ T7283] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 178.949372][ T7283] syz.1.378: attempt to access beyond end of device [ 178.949372][ T7283] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 178.970326][ T7283] syz.1.378: attempt to access beyond end of device [ 178.970326][ T7283] nbd1: rw=0, sector=18, nr_sectors = 2 limit=0 [ 178.985325][ T7283] syz.1.378: attempt to access beyond end of device [ 178.985325][ T7283] nbd1: rw=0, sector=30, nr_sectors = 2 limit=0 [ 178.999223][ T7283] syz.1.378: attempt to access beyond end of device [ 178.999223][ T7283] nbd1: rw=0, sector=36, nr_sectors = 2 limit=0 [ 179.025386][ T5827] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 179.054990][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.278732][ T5827] usb 5-1: config 0 descriptor?? [ 179.429274][ T5827] cp210x 5-1:0.0: cp210x converter detected [ 179.448647][ T30] audit: type=1400 audit(1742266248.952:480): avc: denied { read } for pid=7288 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 180.665645][ T30] audit: type=1400 audit(1742266250.172:481): avc: denied { mount } for pid=7285 comm="syz.0.379" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 180.793104][ T7294] syz.1.381 (7294): drop_caches: 2 [ 181.184400][ T30] audit: type=1400 audit(1742266250.262:482): avc: denied { ioctl } for pid=7288 comm="syz.3.382" path="socket:[13546]" dev="sockfs" ino=13546 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 181.210236][ T7276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.222762][ T30] audit: type=1400 audit(1742266250.302:483): avc: denied { read write } for pid=7288 comm="syz.3.382" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 181.246094][ T7276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.388775][ T7276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.453108][ T30] audit: type=1400 audit(1742266250.302:484): avc: denied { open } for pid=7288 comm="syz.3.382" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 181.507681][ T7276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.685249][ T7304] tmpfs: Unknown parameter 'm…ol' [ 181.696974][ T30] audit: type=1400 audit(1742266250.312:485): avc: denied { lock } for pid=7288 comm="syz.3.382" path="socket:[13546]" dev="sockfs" ino=13546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 181.871239][ T5827] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 181.879775][ T5827] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 181.887410][ T5827] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 181.893958][ T30] audit: type=1400 audit(1742266250.502:486): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 181.920594][ T5827] usb 5-1: cp210x converter now attached to ttyUSB0 [ 181.957012][ T5827] usb 5-1: USB disconnect, device number 7 [ 182.289997][ T5827] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 182.327114][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'. [ 182.355670][ T5827] cp210x 5-1:0.0: device disconnected [ 182.859645][ T30] audit: type=1400 audit(1742266252.352:487): avc: denied { write } for pid=7300 comm="syz.1.384" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 183.107385][ T30] audit: type=1400 audit(1742266252.442:488): avc: denied { append } for pid=7300 comm="syz.1.384" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.111514][ T7301] loop6: detected capacity change from 0 to 524287999 [ 183.172123][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.181568][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 183.216222][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.225452][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 183.302847][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.312085][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 183.324499][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.333701][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 183.342292][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.351483][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 183.378441][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 183.399119][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.408440][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 183.699712][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.389'. [ 184.117137][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.126411][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.234211][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 184.247535][ T7330] netlink: 44 bytes leftover after parsing attributes in process `syz.0.390'. [ 184.280808][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.290051][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.302134][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.390'. [ 184.329305][ T7301] ldm_validate_partition_table(): Disk read failed. [ 184.371860][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.381057][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.401988][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.411257][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.422459][ T30] audit: type=1400 audit(1742266253.912:489): avc: denied { ioctl } for pid=7300 comm="syz.1.384" path="socket:[13625]" dev="sockfs" ino=13625 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 184.453615][ T7301] Dev loop6: unable to read RDB block 0 [ 184.536467][ T7301] loop6: unable to read partition table [ 184.578167][ T7301] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 185.432208][ T7303] ldm_validate_partition_table(): Disk read failed. [ 185.558781][ T7303] Dev loop6: unable to read RDB block 0 [ 185.596392][ T7303] loop6: unable to read partition table [ 185.648214][ T7303] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 186.633549][ T7349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.396'. [ 186.677995][ T7349] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7349 comm=syz.4.396 [ 186.718708][ T7346] syz.3.394 (7346): drop_caches: 2 [ 186.740839][ T30] audit: type=1400 audit(1742266256.252:490): avc: denied { read } for pid=7348 comm="syz.4.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 187.015529][ T7356] Can't find a SQUASHFS superblock on nullb0 [ 187.937142][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 187.969481][ T7361] syz.0.397 (7361): drop_caches: 2 [ 188.293824][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 188.303507][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.325819][ T10] usb 5-1: config 0 descriptor?? [ 188.347708][ T10] cp210x 5-1:0.0: cp210x converter detected [ 189.212428][ T7356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.268737][ T7356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.304572][ T7356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.315118][ T7356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.342900][ T7356] tmpfs: Unknown parameter 'm…ol' [ 189.460994][ T10] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 190.202755][ T10] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 190.210552][ T10] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 190.237815][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 190.271812][ T10] usb 5-1: USB disconnect, device number 8 [ 190.360743][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 190.743869][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 190.853773][ T10] cp210x 5-1:0.0: device disconnected [ 191.435959][ T7385] Set syz1 is full, maxelem 65536 reached [ 192.147901][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.408'. [ 192.169088][ T7399] netlink: 44 bytes leftover after parsing attributes in process `syz.4.408'. [ 192.254570][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.408'. [ 192.884026][ T7409] syz.2.409 (7409): drop_caches: 2 [ 193.454794][ T7418] syz.3.412 (7418): drop_caches: 2 [ 194.013119][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.019679][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.210823][ T5827] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 194.441871][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'. [ 194.993429][ T7436] syz.2.419: attempt to access beyond end of device [ 194.993429][ T7436] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 195.014157][ T7436] XFS (loop2): SB validate failed with error -5. [ 195.425944][ T30] audit: type=1400 audit(1742266264.932:491): avc: denied { read write } for pid=7434 comm="syz.2.419" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 195.505945][ T30] audit: type=1400 audit(1742266264.932:492): avc: denied { open } for pid=7434 comm="syz.2.419" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 195.610992][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 195.637158][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.648666][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 195.662658][ T5827] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 195.677907][ T5827] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 195.695328][ T30] audit: type=1400 audit(1742266264.962:493): avc: denied { ioctl } for pid=7434 comm="syz.2.419" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 195.708495][ T5827] usb 5-1: Manufacturer: syz [ 195.775756][ T5827] usb 5-1: config 0 descriptor?? [ 196.055775][ T7454] dccp_invalid_packet: P.Data Offset(10) too large [ 196.201135][ T5827] cougar 0003:060B:700A.000A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 196.439574][ T30] audit: type=1400 audit(1742266265.912:494): avc: denied { append } for pid=7425 comm="syz.4.416" name="hidraw0" dev="devtmpfs" ino=2969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.056007][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'. [ 197.651384][ T52] libceph: connect (1)[c::]:6789 error -101 [ 197.657400][ T52] libceph: mon0 (1)[c::]:6789 connect error [ 197.725280][ T52] libceph: connect (1)[c::]:6789 error -101 [ 197.735335][ T52] libceph: mon0 (1)[c::]:6789 connect error [ 197.837332][ T30] audit: type=1400 audit(1742266267.342:495): avc: denied { shutdown } for pid=7467 comm="syz.3.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 197.984847][ T1202] libceph: connect (1)[c::]:6789 error -101 [ 198.158108][ T7476] syz.3.424 (7476): drop_caches: 2 [ 198.239581][ T1202] libceph: mon0 (1)[c::]:6789 connect error [ 198.289621][ T5869] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 198.419361][ T7478] syz.3.425 (7478): drop_caches: 2 [ 198.491274][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 198.520987][ T5869] usb 2-1: config 107 has an invalid interface number: 11 but max is 0 [ 198.529908][ T52] libceph: connect (1)[c::]:6789 error -101 [ 198.535835][ T5869] usb 2-1: config 107 has no interface number 0 [ 198.535949][ T52] libceph: mon0 (1)[c::]:6789 connect error [ 198.548102][ T5869] usb 2-1: config 107 interface 11 has no altsetting 0 [ 198.566991][ T5869] usb 2-1: string descriptor 0 read error: -22 [ 198.574772][ T5869] usb 2-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=83.77 [ 198.858045][ T52] libceph: connect (1)[c::]:6789 error -101 [ 198.864064][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.145224][ T5869] usb 2-1: Expected 3 endpoints, found: 0 [ 199.181902][ T52] libceph: mon0 (1)[c::]:6789 connect error [ 199.213758][ T52] libceph: connect (1)[c::]:6789 error -101 [ 199.250711][ T52] libceph: mon0 (1)[c::]:6789 connect error [ 199.319236][ T30] audit: type=1400 audit(1742266268.822:496): avc: denied { setopt } for pid=7488 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 199.704367][ T1202] usb 5-1: USB disconnect, device number 9 [ 200.236256][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 200.617402][ T7468] ceph: No mds server is up or the cluster is laggy [ 200.617485][ T7464] ceph: No mds server is up or the cluster is laggy [ 200.661480][ T52] libceph: connect (1)[c::]:6789 error -101 [ 200.679871][ T52] libceph: mon0 (1)[c::]:6789 connect error [ 200.686244][ T52] libceph: connect (1)[c::]:6789 error -101 [ 200.904073][ T52] libceph: mon0 (1)[c::]:6789 connect error [ 200.915482][ T52] libceph: connect (1)[c::]:6789 error -101 [ 200.922723][ T52] libceph: mon0 (1)[c::]:6789 connect error [ 202.101677][ T1202] usb 2-1: USB disconnect, device number 14 [ 203.705123][ T7528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.435'. [ 204.084495][ T7531] Set syz1 is full, maxelem 65536 reached [ 204.486293][ T5869] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 204.597924][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.441'. [ 204.910419][ T5869] usb 2-1: config 0 has an invalid interface number: 175 but max is 0 [ 204.929634][ T5869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.190365][ T5869] usb 2-1: config 0 has no interface number 0 [ 205.272171][ T5869] usb 2-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 205.290099][ T5869] usb 2-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 205.333277][ T5869] usb 2-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 205.354387][ T5869] usb 2-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 205.719138][ T5869] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 205.728545][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.739597][ T5869] usb 2-1: Product: syz [ 205.749683][ T5869] usb 2-1: Manufacturer: syz [ 205.754301][ T5869] usb 2-1: SerialNumber: syz [ 205.774830][ T5869] usb 2-1: config 0 descriptor?? [ 205.822269][ T5869] symbolserial 2-1:0.175: symbol converter detected [ 205.839583][ T5869] usb 2-1: symbol converter now attached to ttyUSB0 [ 206.149787][ T7559] tipc: Enabling of bearer rejected, already enabled [ 207.156815][ T7564] syz.0.446 (7564): drop_caches: 2 [ 207.316875][ T9] usb 2-1: USB disconnect, device number 15 [ 207.357542][ T9] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 207.388182][ T9] symbolserial 2-1:0.175: device disconnected [ 207.558771][ T30] audit: type=1400 audit(1742266277.062:497): avc: denied { create } for pid=7570 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 207.786327][ T30] audit: type=1400 audit(1742266277.252:498): avc: denied { sys_admin } for pid=7570 comm="syz.0.450" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 209.524280][ T7594] syz.2.456 (7594): drop_caches: 2 [ 210.152812][ T7600] syz.1.458 (7600): drop_caches: 2 [ 210.433177][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'. [ 210.923181][ T7611] Set syz1 is full, maxelem 65536 reached [ 212.203931][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 212.221738][ T7634] syz.4.467: attempt to access beyond end of device [ 212.221738][ T7634] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 212.280620][ T7634] syz.4.467: attempt to access beyond end of device [ 212.280620][ T7634] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 212.297125][ T7634] syz.4.467: attempt to access beyond end of device [ 212.297125][ T7634] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 212.324397][ T7615] netlink: 44 bytes leftover after parsing attributes in process `syz.0.462'. [ 212.333551][ T7634] syz.4.467: attempt to access beyond end of device [ 212.333551][ T7634] nbd4: rw=0, sector=18, nr_sectors = 2 limit=0 [ 212.421896][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.462'. [ 212.535549][ T7643] syz.3.470 (7643): drop_caches: 2 [ 212.610032][ T52] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 212.747862][ T7634] syz.4.467: attempt to access beyond end of device [ 212.747862][ T7634] nbd4: rw=0, sector=30, nr_sectors = 2 limit=0 [ 212.957898][ T52] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.037624][ T7634] syz.4.467: attempt to access beyond end of device [ 213.037624][ T7634] nbd4: rw=0, sector=36, nr_sectors = 2 limit=0 [ 213.047152][ T52] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.064583][ T52] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 213.076651][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 213.094887][ T52] usb 3-1: SerialNumber: syz [ 213.440352][ T52] usb 3-1: 0:2 : does not exist [ 213.823264][ T52] usb 3-1: USB disconnect, device number 20 [ 214.122764][ T30] audit: type=1804 audit(1742266283.612:499): pid=7658 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.474" name="/newroot/79/file0" dev="tmpfs" ino=429 res=1 errno=0 [ 214.447171][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 214.585100][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 214.881862][ T5869] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 215.280865][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.350068][ T5869] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 215.390609][ T5869] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 215.416034][ T5869] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 215.438699][ T5869] usb 5-1: Manufacturer: syz [ 215.470486][ T5869] usb 5-1: config 0 descriptor?? [ 216.475808][ T7669] Set syz1 is full, maxelem 65536 reached [ 216.719550][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 216.990058][ T9] usb 3-1: no configurations [ 217.001560][ T9] usb 3-1: can't read configurations, error -22 [ 217.149523][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 217.899974][ T9] usb 3-1: no configurations [ 218.011765][ T7690] syz.0.481 (7690): drop_caches: 2 [ 218.039657][ T9] usb 3-1: can't read configurations, error -22 [ 218.159786][ T9] usb usb3-port1: attempt power cycle [ 218.402323][ T1202] usb 5-1: USB disconnect, device number 10 [ 218.518976][ T7694] syz.3.483: attempt to access beyond end of device [ 218.518976][ T7694] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 218.532793][ T7694] syz.3.483: attempt to access beyond end of device [ 218.532793][ T7694] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 218.546019][ T7694] syz.3.483: attempt to access beyond end of device [ 218.546019][ T7694] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 218.559465][ T7694] syz.3.483: attempt to access beyond end of device [ 218.559465][ T7694] nbd3: rw=0, sector=18, nr_sectors = 2 limit=0 [ 218.572909][ T7694] syz.3.483: attempt to access beyond end of device [ 218.572909][ T7694] nbd3: rw=0, sector=30, nr_sectors = 2 limit=0 [ 218.586986][ T7694] syz.3.483: attempt to access beyond end of device [ 218.586986][ T7694] nbd3: rw=0, sector=36, nr_sectors = 2 limit=0 [ 218.879581][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 219.651468][ T9] usb 3-1: device not accepting address 23, error -71 [ 220.353000][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 220.476171][ T7715] syz.3.489 (7715): drop_caches: 2 [ 220.676686][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.906520][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.961404][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 221.004313][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 221.024431][ T10] usb 2-1: SerialNumber: syz [ 221.258722][ T10] usb 2-1: 0:2 : does not exist [ 221.278964][ T10] usb 2-1: USB disconnect, device number 16 [ 222.035411][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.075673][ T7732] netlink: 68 bytes leftover after parsing attributes in process `syz.4.494'. [ 222.241360][ T7737] 9pnet_fd: Insufficient options for proto=fd [ 222.331320][ T30] audit: type=1400 audit(1742266291.832:500): avc: denied { load_policy } for pid=7724 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 222.355483][ T7725] SELinux: policydb magic number 0x64697262 does not match expected magic number 0xf97cff8c [ 222.367685][ T7725] SELinux: failed to load policy [ 222.559616][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 222.783405][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.833670][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.885467][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 222.899601][ T9] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 222.925214][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.036982][ T10] usb 3-1: config 0 descriptor?? [ 223.204161][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.347575][ T7746] syz.3.497 (7746): drop_caches: 2 [ 223.398585][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 223.408806][ T9] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 223.422879][ T9] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 223.446154][ T9] usb 2-1: Manufacturer: syz [ 223.460129][ T9] usb 2-1: config 0 descriptor?? [ 223.467573][ T7735] netlink: 'syz.2.495': attribute type 1 has an invalid length. [ 224.342466][ T10] hid-led 0003:04D8:F372.000B: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.2-1/input0 [ 224.387568][ T10] hid-led 0003:04D8:F372.000B: Greynut Luxafor initialized [ 224.828721][ T7759] syz.3.500 (7759): drop_caches: 2 [ 225.406514][ T5864] usb 3-1: USB disconnect, device number 25 [ 225.500030][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 225.593736][ T13] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 225.995371][ T13] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 226.013997][ T2914] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 226.023891][ T2914] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 226.033060][ T2914] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 226.042309][ T2914] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 226.082612][ T13] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 226.416828][ T5916] usb 2-1: USB disconnect, device number 17 [ 226.417264][ T2914] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 226.636819][ T2914] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 226.647385][ T2914] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 226.724104][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 227.204500][ T5965] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 227.214118][ T4459] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 227.270728][ T4459] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 227.311365][ T2914] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 227.343699][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 227.530164][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'. [ 227.547069][ T5916] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 227.559708][ T4459] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 227.614097][ T4459] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 227.687096][ T4459] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 227.722539][ T4459] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 227.732071][ T5916] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.750813][ T5916] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.830807][ T5916] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 227.868344][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 227.893212][ T5916] usb 2-1: SerialNumber: syz [ 228.120101][ T5916] usb 2-1: 0:2 : does not exist [ 228.177782][ T5916] usb 2-1: USB disconnect, device number 18 [ 228.459237][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.569550][ T7792] syz.4.509 (7792): drop_caches: 2 [ 229.125377][ T7795] syz.3.512 (7795): drop_caches: 2 [ 230.090580][ T7802] IPVS: length: 149 != 8 [ 230.109607][ T30] audit: type=1400 audit(1742266299.602:501): avc: denied { getopt } for pid=7801 comm="syz.3.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 230.272034][ T7810] 9pnet_fd: Insufficient options for proto=fd [ 230.486920][ T7813] netlink: 48 bytes leftover after parsing attributes in process `syz.0.515'. [ 231.163926][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'. [ 231.471463][ T7783] Set syz1 is full, maxelem 65536 reached [ 231.948597][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.517'. [ 232.213708][ T30] audit: type=1400 audit(1742266301.722:502): avc: denied { map } for pid=7821 comm="syz.0.518" path="socket:[15201]" dev="sockfs" ino=15201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.388311][ T7829] syz.1.520 (7829): drop_caches: 2 [ 232.702380][ T7831] syz.2.521 (7831): drop_caches: 2 [ 233.256612][ T7839] netlink: 48 bytes leftover after parsing attributes in process `syz.0.524'. [ 233.732791][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 234.035306][ T7847] syz.1.525 (7847): drop_caches: 2 [ 234.708806][ T7858] netlink: 48 bytes leftover after parsing attributes in process `syz.2.527'. [ 235.376600][ T7865] syz.3.529 (7865): drop_caches: 2 [ 235.767615][ T7868] syz.2.530 (7868): drop_caches: 2 [ 236.460857][ T7875] syz.3.533 (7875): drop_caches: 2 [ 237.154189][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.532'. [ 237.514623][ T7883] FAULT_INJECTION: forcing a failure. [ 237.514623][ T7883] name failslab, interval 1, probability 0, space 0, times 0 [ 237.689153][ T7883] CPU: 0 UID: 0 PID: 7883 Comm: syz.2.535 Not tainted 6.14.0-rc7-syzkaller #0 [ 237.689174][ T7883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 237.689182][ T7883] Call Trace: [ 237.689195][ T7883] [ 237.689201][ T7883] dump_stack_lvl+0x16c/0x1f0 [ 237.689226][ T7883] should_fail_ex+0x50a/0x650 [ 237.689251][ T7883] ? fs_reclaim_acquire+0xae/0x150 [ 237.689275][ T7883] should_failslab+0xc2/0x120 [ 237.689294][ T7883] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 237.689311][ T7883] ? __alloc_skb+0x2b1/0x380 [ 237.689338][ T7883] __alloc_skb+0x2b1/0x380 [ 237.689361][ T7883] ? __pfx___alloc_skb+0x10/0x10 [ 237.689385][ T7883] ? __phys_addr_symbol+0x30/0x80 [ 237.689410][ T7883] pfkey_sendmsg+0x47f/0x840 [ 237.689430][ T7883] ____sys_sendmsg+0xaaf/0xc90 [ 237.689449][ T7883] ? copy_msghdr_from_user+0x10b/0x160 [ 237.689472][ T7883] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.689498][ T7883] ___sys_sendmsg+0x135/0x1e0 [ 237.689523][ T7883] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.689553][ T7883] ? __pfx_lock_release+0x10/0x10 [ 237.689573][ T7883] ? trace_lock_acquire+0x14e/0x1f0 [ 237.689597][ T7883] ? __fget_files+0x206/0x3a0 [ 237.689618][ T7883] __sys_sendmsg+0x16e/0x220 [ 237.689640][ T7883] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.689675][ T7883] do_syscall_64+0xcd/0x250 [ 237.689697][ T7883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.689718][ T7883] RIP: 0033:0x7fe69378d169 [ 237.689730][ T7883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.689745][ T7883] RSP: 002b:00007fe694554038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.689759][ T7883] RAX: ffffffffffffffda RBX: 00007fe6939a5fa0 RCX: 00007fe69378d169 [ 237.689769][ T7883] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000003 [ 237.689778][ T7883] RBP: 00007fe694554090 R08: 0000000000000000 R09: 0000000000000000 [ 237.689786][ T7883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.689795][ T7883] R13: 0000000000000000 R14: 00007fe6939a5fa0 R15: 00007ffcbf698bb8 [ 237.689814][ T7883] [ 237.951903][ T7885] netlink: 40 bytes leftover after parsing attributes in process `syz.3.536'. [ 238.212343][ T7895] 9pnet_fd: Insufficient options for proto=fd [ 238.362470][ T7899] tipc: Enabling of bearer rejected, already enabled [ 238.427008][ T7902] netlink: 56 bytes leftover after parsing attributes in process `syz.1.537'. [ 239.080113][ T30] audit: type=1400 audit(1742266308.592:503): avc: denied { read write } for pid=7897 comm="syz.3.540" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 239.111715][ T30] audit: type=1400 audit(1742266308.592:504): avc: denied { open } for pid=7897 comm="syz.3.540" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 239.173076][ T30] audit: type=1400 audit(1742266308.592:505): avc: denied { create } for pid=7904 comm="syz.4.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 239.192825][ T30] audit: type=1400 audit(1742266308.612:506): avc: denied { ioctl } for pid=7897 comm="syz.3.540" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 239.283928][ T7911] netlink: 108 bytes leftover after parsing attributes in process `syz.1.542'. [ 239.294314][ T7911] netlink: 108 bytes leftover after parsing attributes in process `syz.1.542'. [ 239.303462][ T7911] netlink: 108 bytes leftover after parsing attributes in process `syz.1.542'. [ 239.613848][ T30] audit: type=1400 audit(1742266308.672:507): avc: denied { connect } for pid=7904 comm="syz.4.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 239.704776][ T30] audit: type=1400 audit(1742266309.102:508): avc: denied { ioctl } for pid=7905 comm="syz.1.542" path="socket:[15656]" dev="sockfs" ino=15656 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 240.324750][ T7925] syz.1.546 (7925): drop_caches: 2 [ 240.842208][ T7930] syz.1.550 (7930): drop_caches: 2 [ 241.115458][ T7932] syz.4.549: attempt to access beyond end of device [ 241.115458][ T7932] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 241.159246][ T7932] syz.4.549: attempt to access beyond end of device [ 241.159246][ T7932] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 241.187825][ T7932] Mount JFS Failure: -5 [ 241.500286][ T7937] IPVS: length: 149 != 8 [ 241.537195][ T7940] tipc: Started in network mode [ 241.542226][ T7940] tipc: Node identity 7f000001, cluster identity 4711 [ 241.549547][ T7940] tipc: Enabled bearer , priority 10 [ 241.614135][ T7942] netlink: 56 bytes leftover after parsing attributes in process `syz.0.553'. [ 242.409956][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 242.847180][ T5916] tipc: Node number set to 2130706433 [ 242.932386][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 242.959626][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 243.000773][ T10] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 243.029665][ T10] usb 5-1: config 0 has no interface number 0 [ 243.050596][ T10] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 243.069501][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.098003][ T10] usb 5-1: Product: syz [ 243.125383][ T10] usb 5-1: Manufacturer: syz [ 243.135120][ T10] usb 5-1: SerialNumber: syz [ 243.145891][ T10] usb 5-1: config 0 descriptor?? [ 243.253221][ T7961] syz.2.559: attempt to access beyond end of device [ 243.253221][ T7961] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 243.267156][ T7961] syz.2.559: attempt to access beyond end of device [ 243.267156][ T7961] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 243.280824][ T7961] syz.2.559: attempt to access beyond end of device [ 243.280824][ T7961] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 243.295473][ T7961] syz.2.559: attempt to access beyond end of device [ 243.295473][ T7961] nbd2: rw=0, sector=18, nr_sectors = 2 limit=0 [ 243.318591][ T7961] syz.2.559: attempt to access beyond end of device [ 243.318591][ T7961] nbd2: rw=0, sector=30, nr_sectors = 2 limit=0 [ 243.334257][ T7961] syz.2.559: attempt to access beyond end of device [ 243.334257][ T7961] nbd2: rw=0, sector=36, nr_sectors = 2 limit=0 [ 243.604777][ T10] usb 5-1: USB disconnect, device number 11 [ 244.289794][ T5864] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 244.308837][ T7971] syz.2.562 (7971): drop_caches: 2 [ 244.494864][ T5864] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.559528][ T5864] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.582024][ T5864] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 244.601909][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 244.613253][ T5864] usb 1-1: SerialNumber: syz [ 244.925128][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.564'. [ 245.198186][ T7979] 9pnet_fd: Insufficient options for proto=fd [ 245.337947][ T5864] usb 1-1: 0:2 : does not exist [ 245.349479][ T5864] usb 1-1: unit 5 not found! [ 245.381012][ T5864] usb 1-1: USB disconnect, device number 9 [ 245.611323][ T7986] IPVS: length: 149 != 8 [ 245.759683][ T52] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 245.922511][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.035120][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.065239][ T7990] syz.4.567 (7990): drop_caches: 2 [ 246.134005][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.232753][ T52] usb 4-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 246.312148][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.387012][ T52] usb 4-1: config 0 descriptor?? [ 246.421127][ T7993] FAULT_INJECTION: forcing a failure. [ 246.421127][ T7993] name failslab, interval 1, probability 0, space 0, times 0 [ 246.439922][ T7993] CPU: 1 UID: 0 PID: 7993 Comm: syz.1.569 Not tainted 6.14.0-rc7-syzkaller #0 [ 246.439942][ T7993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 246.439951][ T7993] Call Trace: [ 246.439959][ T7993] [ 246.439965][ T7993] dump_stack_lvl+0x16c/0x1f0 [ 246.439991][ T7993] should_fail_ex+0x50a/0x650 [ 246.440013][ T7993] ? fs_reclaim_acquire+0xae/0x150 [ 246.440035][ T7993] ? tomoyo_encode2+0x100/0x3e0 [ 246.440054][ T7993] should_failslab+0xc2/0x120 [ 246.440072][ T7993] __kmalloc_noprof+0xcb/0x510 [ 246.440086][ T7993] ? d_absolute_path+0x137/0x1b0 [ 246.440106][ T7993] ? rcu_is_watching+0x12/0xc0 [ 246.440152][ T7993] tomoyo_encode2+0x100/0x3e0 [ 246.440177][ T7993] tomoyo_encode+0x29/0x50 [ 246.440198][ T7993] tomoyo_realpath_from_path+0x19d/0x720 [ 246.440224][ T7993] tomoyo_path_number_perm+0x248/0x590 [ 246.440241][ T7993] ? tomoyo_path_number_perm+0x235/0x590 [ 246.440262][ T7993] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 246.440303][ T7993] ? __pfx_lock_release+0x10/0x10 [ 246.440325][ T7993] ? trace_lock_acquire+0x14e/0x1f0 [ 246.440348][ T7993] ? lock_acquire+0x2f/0xb0 [ 246.440365][ T7993] ? __fget_files+0x40/0x3a0 [ 246.440382][ T7993] ? __fget_files+0x206/0x3a0 [ 246.440399][ T7993] security_file_ioctl+0x9b/0x240 [ 246.440422][ T7993] __x64_sys_ioctl+0xb7/0x200 [ 246.440447][ T7993] do_syscall_64+0xcd/0x250 [ 246.440468][ T7993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.440489][ T7993] RIP: 0033:0x7fb71378d169 [ 246.440502][ T7993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.440516][ T7993] RSP: 002b:00007fb71467e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.440531][ T7993] RAX: ffffffffffffffda RBX: 00007fb7139a5fa0 RCX: 00007fb71378d169 [ 246.440540][ T7993] RDX: 0000000000000001 RSI: 0000000040043d04 RDI: 0000000000000003 [ 246.440548][ T7993] RBP: 00007fb71467e090 R08: 0000000000000000 R09: 0000000000000000 [ 246.440556][ T7993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.440564][ T7993] R13: 0000000000000000 R14: 00007fb7139a5fa0 R15: 00007ffd38f4b6e8 [ 246.440584][ T7993] [ 246.440617][ T7993] ERROR: Out of memory at tomoyo_realpath_from_path. [ 246.679017][ T7977] netlink: 'syz.3.563': attribute type 1 has an invalid length. [ 246.691319][ T30] audit: type=1400 audit(1742266316.202:509): avc: denied { ioctl } for pid=7992 comm="syz.1.569" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 246.754880][ T30] audit: type=1400 audit(1742266316.262:510): avc: denied { search } for pid=7996 comm="syz.4.571" name="/" dev="configfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.778540][ T7997] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 246.835539][ T30] audit: type=1400 audit(1742266316.282:511): avc: denied { read } for pid=7996 comm="syz.4.571" name="/" dev="configfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.930099][ T52] hid-led 0003:04D8:F372.000C: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.3-1/input0 [ 246.930661][ T30] audit: type=1400 audit(1742266316.282:512): avc: denied { open } for pid=7996 comm="syz.4.571" path="/" dev="configfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 247.151908][ T8009] syz.4.574 (8009): drop_caches: 2 [ 247.360483][ T52] hid-led 0003:04D8:F372.000C: Greynut Luxafor initialized [ 247.523503][ T8016] syz.4.576 (8016): drop_caches: 2 [ 247.826139][ T8017] syz.0.575 (8017): drop_caches: 2 [ 248.312204][ T9] usb 4-1: USB disconnect, device number 21 [ 248.323525][ T8022] tipc: Started in network mode [ 248.328459][ T8022] tipc: Node identity 7f000001, cluster identity 4711 [ 248.335845][ T8022] tipc: Enabled bearer , priority 10 [ 248.343067][ T8022] netlink: 56 bytes leftover after parsing attributes in process `syz.2.577'. [ 248.361911][ T58] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 248.491874][ T12] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 248.688345][ T13] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 249.105886][ T12] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 249.218143][ T8027] IPVS: length: 149 != 8 [ 249.234873][ T12] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 249.255706][ T12] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 249.273296][ T58] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 249.293613][ T12] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 249.348810][ T5864] tipc: Node number set to 2130706433 [ 249.503711][ T8035] netlink: 40 bytes leftover after parsing attributes in process `syz.3.581'. [ 249.982945][ T12] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 250.198256][ T58] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 250.275837][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 250.690232][ T4459] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 250.717381][ T4459] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 250.744784][ T58] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 250.796844][ T58] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 250.871304][ T2914] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 250.886580][ T2914] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 250.896952][ T13] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 250.928628][ T8046] syz.3.585: attempt to access beyond end of device [ 250.928628][ T8046] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 250.944088][ T8046] syz.3.585: attempt to access beyond end of device [ 250.944088][ T8046] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 250.957224][ T8046] syz.3.585: attempt to access beyond end of device [ 250.957224][ T8046] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 250.987453][ T13] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 251.007287][ T8046] syz.3.585: attempt to access beyond end of device [ 251.007287][ T8046] nbd3: rw=0, sector=18, nr_sectors = 2 limit=0 [ 251.022544][ T8046] syz.3.585: attempt to access beyond end of device [ 251.022544][ T8046] nbd3: rw=0, sector=30, nr_sectors = 2 limit=0 [ 251.037480][ T8046] syz.3.585: attempt to access beyond end of device [ 251.037480][ T8046] nbd3: rw=0, sector=36, nr_sectors = 2 limit=0 [ 251.081206][ T1202] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 251.312499][ T1202] usb 2-1: config 0 has an invalid interface number: 175 but max is 0 [ 251.393283][ T1202] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.497533][ T1202] usb 2-1: config 0 has no interface number 0 [ 251.559607][ T1202] usb 2-1: config 0 interface 175 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 251.744738][ T1202] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 251.758320][ T1202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.766467][ T5864] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 251.777766][ T1202] usb 2-1: Product: syz [ 251.782601][ T1202] usb 2-1: Manufacturer: syz [ 251.787465][ T1202] usb 2-1: SerialNumber: syz [ 251.807961][ T1202] usb 2-1: config 0 descriptor?? [ 251.861364][ T1202] symbolserial 2-1:0.175: required endpoints missing [ 251.929842][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 251.973082][ T8065] syz.2.590 (8065): drop_caches: 2 [ 251.994912][ T5864] usb 5-1: unable to get BOS descriptor or descriptor too short [ 252.108548][ T5864] usb 5-1: config 8 has an invalid interface number: 121 but max is 0 [ 252.181249][ T5864] usb 5-1: config 8 has no interface number 0 [ 252.228364][ T5864] usb 5-1: config 8 interface 121 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 252.295758][ T5864] usb 5-1: config 8 interface 121 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 252.311577][ T5864] usb 5-1: config 8 interface 121 has no altsetting 0 [ 252.326025][ T5864] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=f0.98 [ 252.338879][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.349295][ T5864] usb 5-1: Product: syz [ 252.362720][ T5864] usb 5-1: Manufacturer: syz [ 252.363181][ T8067] 9pnet_fd: Insufficient options for proto=fd [ 252.367507][ T5864] usb 5-1: SerialNumber: syz [ 252.405169][ T5916] usb 2-1: USB disconnect, device number 19 [ 252.592574][ T5864] radio-si470x 5-1:8.121: could not find interrupt in endpoint [ 252.601069][ T5864] radio-si470x 5-1:8.121: probe with driver radio-si470x failed with error -5 [ 253.183775][ T5864] radio-raremono 5-1:8.121: this is not Thanko's Raremono. [ 253.195578][ T5864] usbhid 5-1:8.121: couldn't find an input interrupt endpoint [ 253.206492][ T5864] usb 5-1: USB disconnect, device number 12 [ 253.464133][ T8075] netlink: 32 bytes leftover after parsing attributes in process `syz.3.593'. [ 254.069536][ T8077] IPVS: length: 149 != 8 [ 254.393529][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'. [ 255.286048][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 255.559225][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.566392][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.024322][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.597'. [ 256.751649][ T8110] syz.1.602 (8110): drop_caches: 2 [ 256.756856][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 256.948248][ T8111] syz.0.603 (8111): drop_caches: 2 [ 257.191562][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.208407][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.220034][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 257.229295][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 257.249713][ T9] usb 5-1: SerialNumber: syz [ 257.285373][ T30] audit: type=1400 audit(1742266326.792:513): avc: denied { create } for pid=8115 comm="syz.0.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 257.334261][ T30] audit: type=1400 audit(1742266326.842:514): avc: denied { read } for pid=8117 comm="syz.3.606" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 257.389005][ T30] audit: type=1400 audit(1742266326.842:515): avc: denied { open } for pid=8117 comm="syz.3.606" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 257.490810][ T9] usb 5-1: 0:2 : does not exist [ 257.495775][ T9] usb 5-1: unit 5 not found! [ 258.102166][ T9] usb 5-1: USB disconnect, device number 13 [ 258.139525][ T5916] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 258.147296][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 258.307555][ T5916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.318634][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 258.334928][ T5916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.345475][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.356324][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.368568][ T5916] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 258.377931][ T8127] netlink: 'syz.1.608': attribute type 10 has an invalid length. [ 258.387903][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 258.406684][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.424575][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 258.449710][ T30] audit: type=1400 audit(1742266327.932:516): avc: denied { create } for pid=8122 comm="syz.4.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 258.475279][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 258.486158][ T30] audit: type=1400 audit(1742266327.932:517): avc: denied { read } for pid=8122 comm="syz.4.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 258.488372][ T5916] usb 4-1: SerialNumber: syz [ 258.519486][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.595185][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 259.040327][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 259.084469][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 259.100769][ T10] usb 1-1: Manufacturer: syz [ 259.404070][ T5916] usb 4-1: 0:2 : does not exist [ 259.408961][ T5916] usb 4-1: unit 5 not found! [ 259.421439][ T10] usb 1-1: config 0 descriptor?? [ 259.492321][ T5916] usb 4-1: USB disconnect, device number 22 [ 259.647980][ T8116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.660719][ T8116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.746607][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.612'. [ 260.300369][ T5972] udevd[5972]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.449766][ T10] rc_core: IR keymap rc-hauppauge not found [ 260.773547][ T10] Registered IR keymap rc-empty [ 260.882713][ T8145] syz.2.613 (8145): drop_caches: 2 [ 260.888572][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 260.910963][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 261.042640][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 261.065035][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 261.313530][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 261.355443][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 261.407849][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 261.468914][ T30] audit: type=1400 audit(1742266330.972:518): avc: denied { write } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.469658][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 261.549952][ T30] audit: type=1400 audit(1742266330.972:519): avc: denied { remove_name } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.563222][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 261.582250][ T30] audit: type=1400 audit(1742266330.972:520): avc: denied { add_name } for pid=5175 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.605289][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 261.637155][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 261.671428][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 261.710799][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 262.466454][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 262.497138][ T10] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 262.654325][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 262.669660][ T10] usb 1-1: USB disconnect, device number 10 [ 262.733539][ T8176] netlink: 'syz.3.616': attribute type 1 has an invalid length. [ 263.363013][ T30] audit: type=1400 audit(1742266332.862:521): avc: denied { bind } for pid=8186 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 263.411584][ T30] audit: type=1400 audit(1742266332.872:522): avc: denied { create } for pid=8186 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 263.513316][ T30] audit: type=1400 audit(1742266332.872:523): avc: denied { ioctl } for pid=8186 comm="syz.2.625" path="socket:[17017]" dev="sockfs" ino=17017 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 263.645173][ T30] audit: type=1326 audit(1742266333.142:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.2.625" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe69378d169 code=0x0 [ 264.349529][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 264.572930][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 264.618717][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.640104][ T10] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 264.649177][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.679470][ T10] usb 3-1: Product: syz [ 264.699701][ T10] usb 3-1: Manufacturer: syz [ 264.707999][ T10] usb 3-1: SerialNumber: syz [ 264.721724][ T10] usb 3-1: config 0 descriptor?? [ 264.751163][ T10] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 264.759632][ T10] usb 3-1: selecting invalid altsetting 1 [ 265.021698][ T5869] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 265.029607][ T5864] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 265.289735][ T10] gspca_stk014: reg_r err -110 [ 265.300476][ T10] stk014 3-1:0.0: probe with driver stk014 failed with error -110 [ 265.340352][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 265.348372][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 265.368687][ T5869] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 265.379674][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.394249][ T5869] usb 4-1: Product: syz [ 265.398850][ T5869] usb 4-1: Manufacturer: syz [ 265.408394][ T5869] usb 4-1: SerialNumber: syz [ 265.427975][ T5869] usb 4-1: config 0 descriptor?? [ 265.501226][ T5864] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 265.503408][ T5869] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 265.519286][ T5864] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.556849][ T5869] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 265.609221][ T5864] usb 1-1: config 0 has no interface number 0 [ 265.727703][ T5864] usb 1-1: config 0 interface 175 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 265.840917][ T5864] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 265.866490][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.889919][ T5864] usb 1-1: Product: syz [ 265.894162][ T5864] usb 1-1: Manufacturer: syz [ 265.898823][ T5864] usb 1-1: SerialNumber: syz [ 265.909047][ T5864] usb 1-1: config 0 descriptor?? [ 265.919192][ T5864] symbolserial 1-1:0.175: required endpoints missing [ 266.194041][ T8220] syz.1.635 (8220): drop_caches: 2 [ 266.338472][ T5908] usb 1-1: USB disconnect, device number 11 [ 266.346246][ T5869] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 266.397171][ T5864] usb 3-1: USB disconnect, device number 26 [ 267.540807][ T8229] syz.4.639 (8229): drop_caches: 2 [ 267.566481][ T8235] 9pnet_fd: Insufficient options for proto=fd [ 267.892400][ T30] audit: type=1400 audit(1742266337.402:525): avc: denied { map } for pid=8203 comm="syz.3.630" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 267.900867][ T5869] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 267.979277][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.643'. [ 268.184497][ T5869] em28xx 4-1:0.0: board has no eeprom [ 268.249587][ T5869] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 268.270490][ T5869] em28xx 4-1:0.0: dvb set to bulk mode. [ 268.289265][ T5916] em28xx 4-1:0.0: Binding DVB extension [ 268.299618][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 268.336833][ T5869] usb 4-1: USB disconnect, device number 23 [ 268.375647][ T5869] em28xx 4-1:0.0: Disconnecting em28xx [ 268.480902][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 268.489296][ T5916] em28xx 4-1:0.0: Registering input extension [ 268.530156][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 268.575803][ T5869] em28xx 4-1:0.0: Closing input extension [ 268.603218][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 268.716723][ T5869] em28xx 4-1:0.0: Freeing device [ 268.721943][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 268.758986][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.807249][ T9] usb 5-1: Product: syz [ 268.837787][ T9] usb 5-1: Manufacturer: syz [ 268.868768][ T9] usb 5-1: SerialNumber: syz [ 268.914503][ T9] usb 5-1: config 0 descriptor?? [ 268.940981][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 269.105326][ T8253] Set syz1 is full, maxelem 65536 reached [ 269.123727][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 269.615217][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 269.622235][ T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 270.909490][ T9] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 270.916486][ T9] em28xx 5-1:0.0: No AC97 audio processor [ 271.066863][ T9] usb 5-1: USB disconnect, device number 14 [ 271.138029][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 271.250346][ T9] em28xx 5-1:0.0: Freeing device [ 271.577032][ T8285] syz.4.654 (8285): drop_caches: 2 [ 271.889511][ T5864] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 272.059528][ T5864] usb 1-1: Using ep0 maxpacket: 16 [ 272.072572][ T5864] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.131057][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.214840][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 272.243657][ T5864] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 272.274667][ T5864] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.316055][ T5864] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 272.334994][ T5864] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 272.365471][ T5864] usb 1-1: Manufacturer: syz [ 272.385303][ T5864] usb 1-1: config 0 descriptor?? [ 272.659944][ T8281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.684006][ T8281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.839609][ T5864] rc_core: IR keymap rc-hauppauge not found [ 272.846370][ T5864] Registered IR keymap rc-empty [ 272.865565][ T5864] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 272.921583][ T5864] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 272.989961][ T5864] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 273.017789][ T5864] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14 [ 273.065316][ T5864] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 273.099498][ T5864] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 273.119703][ T5864] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 273.169853][ T5864] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 273.178000][ T8310] FAULT_INJECTION: forcing a failure. [ 273.178000][ T8310] name failslab, interval 1, probability 0, space 0, times 0 [ 273.199617][ T8310] CPU: 1 UID: 0 PID: 8310 Comm: syz.4.660 Not tainted 6.14.0-rc7-syzkaller #0 [ 273.199644][ T8310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.199654][ T8310] Call Trace: [ 273.199659][ T8310] [ 273.199665][ T8310] dump_stack_lvl+0x16c/0x1f0 [ 273.199706][ T8310] should_fail_ex+0x50a/0x650 [ 273.199732][ T8310] ? fs_reclaim_acquire+0xae/0x150 [ 273.199758][ T8310] should_failslab+0xc2/0x120 [ 273.199777][ T8310] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 273.199797][ T8310] ? vfs_parse_fs_string+0xc4/0x150 [ 273.199818][ T8310] kmemdup_nul+0x49/0xf0 [ 273.199843][ T8310] vfs_parse_fs_string+0xc4/0x150 [ 273.199861][ T8310] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 273.199878][ T8310] ? __kasan_kmalloc+0xaa/0xb0 [ 273.199899][ T8310] ? alloc_fs_context+0x59b/0x9c0 [ 273.199919][ T8310] path_mount+0x677/0x1f10 [ 273.199938][ T8310] ? kmem_cache_free+0x2e2/0x4d0 [ 273.199954][ T8310] ? __pfx_path_mount+0x10/0x10 [ 273.199974][ T8310] ? putname+0x13c/0x180 [ 273.199996][ T8310] __x64_sys_mount+0x28f/0x310 [ 273.200012][ T8310] ? __pfx___x64_sys_mount+0x10/0x10 [ 273.200039][ T8310] do_syscall_64+0xcd/0x250 [ 273.200064][ T8310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.200087][ T8310] RIP: 0033:0x7f13f598d169 [ 273.200100][ T8310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.200116][ T8310] RSP: 002b:00007f13f6800038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 273.200131][ T8310] RAX: ffffffffffffffda RBX: 00007f13f5ba5fa0 RCX: 00007f13f598d169 [ 273.200141][ T8310] RDX: 0000400000000080 RSI: 0000400000000100 RDI: 0000400000000040 [ 273.200151][ T8310] RBP: 00007f13f6800090 R08: 0000000000000000 R09: 0000000000000000 [ 273.200169][ T8310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.200178][ T8310] R13: 0000000000000000 R14: 00007f13f5ba5fa0 R15: 00007ffd62fdcb08 [ 273.200200][ T8310] [ 273.406067][ T5864] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 273.439555][ T5864] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 273.487026][ T5864] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 273.509506][ T5864] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 273.529873][ T5864] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 273.613635][ T5864] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 273.642767][ T5864] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 273.675474][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.662'. [ 273.679456][ T5864] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 274.194797][ T30] audit: type=1400 audit(1742266343.332:526): avc: denied { map } for pid=8315 comm="syz.4.662" path="/dev/sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 274.794893][ T30] audit: type=1400 audit(1742266343.332:527): avc: denied { execute } for pid=8315 comm="syz.4.662" path="/dev/sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 274.819225][ T30] audit: type=1400 audit(1742266343.582:528): avc: denied { setopt } for pid=8318 comm="syz.0.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 275.013280][ T5864] usb 1-1: USB disconnect, device number 12 [ 275.349570][ T5864] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 275.364975][ T10] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 275.561214][ T5864] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.647328][ T5864] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 275.791575][ T5864] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 275.819004][ T5864] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 275.850762][ T5864] usb 1-1: Manufacturer: syz [ 275.865276][ T5864] usb 1-1: config 0 descriptor?? [ 275.875113][ T5864] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 277.347454][ T30] audit: type=1400 audit(1742266346.292:529): avc: denied { connect } for pid=8349 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 277.716198][ T8358] syz.4.673 (8358): drop_caches: 2 [ 278.077763][ T5869] usb 1-1: USB disconnect, device number 13 [ 280.565893][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 280.727765][ T8388] No such timeout policy "syz1" [ 281.369668][ T5916] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 281.541376][ T5916] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 281.574039][ T5916] usb 4-1: config 0 has no interface number 0 [ 281.585892][ T5916] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 281.597591][ T5916] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 44, changing to 9 [ 281.616557][ T5916] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 281.626253][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.680015][ T5916] usb 4-1: Product: syz [ 281.684235][ T5916] usb 4-1: Manufacturer: syz [ 281.696685][ T5916] usb 4-1: SerialNumber: syz [ 281.847702][ T10] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 281.890428][ T5916] usb 4-1: config 0 descriptor?? [ 281.897125][ T8395] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 281.912566][ T5916] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 281.931044][ T5916] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 282.030977][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 282.380206][ T10] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 282.399545][ T10] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 282.407658][ T10] usb 1-1: Manufacturer: syz [ 282.433235][ T10] usb 1-1: config 0 descriptor?? [ 282.452239][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 283.117118][ T8427] warning: `syz.2.693' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 283.266343][ T8431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.695'. [ 283.619715][ T8436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.696'. [ 283.629773][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 284.012621][ T5869] usb 4-1: USB disconnect, device number 25 [ 284.023847][ T5869] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 284.053289][ T5869] cyberjack 4-1:0.69: device disconnected [ 284.484656][ T30] audit: type=1400 audit(1742266353.992:530): avc: denied { bind } for pid=8446 comm="syz.4.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 284.946564][ T5869] usb 1-1: USB disconnect, device number 14 [ 285.509876][ T8461] netlink: 56 bytes leftover after parsing attributes in process `syz.0.703'. [ 286.005671][ T30] audit: type=1400 audit(1742266355.512:531): avc: denied { watch_reads } for pid=8462 comm="syz.2.705" path="/130" dev="tmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 286.122201][ T30] audit: type=1400 audit(1742266355.622:532): avc: denied { setopt } for pid=8462 comm="syz.2.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 286.832338][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'. [ 287.242261][ T8479] [U] W!TÁÍ—Ž}Ý©ÏS…L^Ï=ÍÝ [ 287.694795][ T8471] [U] ' [ 288.009676][ T52] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 288.302982][ T52] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 288.328771][ T52] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 288.340218][ T52] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 288.349105][ T52] usb 3-1: Manufacturer: syz [ 288.361961][ T52] usb 3-1: config 0 descriptor?? [ 288.371319][ T52] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 288.902058][ T8507] netlink: 56 bytes leftover after parsing attributes in process `syz.0.717'. [ 289.529666][ T8515] netlink: 56 bytes leftover after parsing attributes in process `syz.1.718'. [ 290.802747][ T8526] syz.3.723 (8526): drop_caches: 2 [ 290.913131][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 291.778537][ T5869] usb 3-1: USB disconnect, device number 27 [ 292.549696][ T26] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 292.728349][ T26] usb 3-1: device descriptor read/64, error -71 [ 292.980034][ T8556] FAULT_INJECTION: forcing a failure. [ 292.980034][ T8556] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 292.993306][ T8556] CPU: 0 UID: 0 PID: 8556 Comm: syz.1.731 Not tainted 6.14.0-rc7-syzkaller #0 [ 292.993327][ T8556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 292.993336][ T8556] Call Trace: [ 292.993341][ T8556] [ 292.993345][ T8556] dump_stack_lvl+0x16c/0x1f0 [ 292.993364][ T8556] should_fail_ex+0x50a/0x650 [ 292.993382][ T8556] _copy_from_user+0x2e/0xd0 [ 292.993393][ T8556] move_addr_to_kernel+0x68/0x160 [ 292.993407][ T8556] __sys_bind+0x11c/0x260 [ 292.993419][ T8556] ? __pfx___sys_bind+0x10/0x10 [ 292.993438][ T8556] __x64_sys_bind+0x72/0xb0 [ 292.993450][ T8556] do_syscall_64+0xcd/0x250 [ 292.993465][ T8556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.993480][ T8556] RIP: 0033:0x7fb71378d169 [ 292.993490][ T8556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.993499][ T8556] RSP: 002b:00007fb71463c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 292.993509][ T8556] RAX: ffffffffffffffda RBX: 00007fb7139a6160 RCX: 00007fb71378d169 [ 292.993515][ T8556] RDX: 0000000000000010 RSI: 0000400000000080 RDI: 0000000000000007 [ 292.993521][ T8556] RBP: 00007fb71463c090 R08: 0000000000000000 R09: 0000000000000000 [ 292.993527][ T8556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.993532][ T8556] R13: 0000000000000000 R14: 00007fb7139a6160 R15: 00007ffd38f4b6e8 [ 292.993543][ T8556] [ 293.314897][ T26] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 293.809709][ T26] usb 3-1: device descriptor read/64, error -71 [ 293.920139][ T26] usb usb3-port1: attempt power cycle [ 294.289493][ T26] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 294.341418][ T26] usb 3-1: device descriptor read/8, error -71 [ 294.422086][ T30] audit: type=1400 audit(1742266363.922:533): avc: denied { write } for pid=8578 comm="syz.1.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 294.616307][ T26] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 294.734813][ T26] usb 3-1: device descriptor read/8, error -71 [ 294.881230][ T26] usb usb3-port1: unable to enumerate USB device [ 295.409650][ T26] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 295.616446][ T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.650911][ T26] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 295.660907][ T8596] FAULT_INJECTION: forcing a failure. [ 295.660907][ T8596] name failslab, interval 1, probability 0, space 0, times 0 [ 295.674499][ T26] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 295.697771][ T8596] CPU: 0 UID: 0 PID: 8596 Comm: syz.1.744 Not tainted 6.14.0-rc7-syzkaller #0 [ 295.697796][ T8596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 295.697807][ T8596] Call Trace: [ 295.697812][ T8596] [ 295.697819][ T8596] dump_stack_lvl+0x16c/0x1f0 [ 295.697846][ T8596] should_fail_ex+0x50a/0x650 [ 295.697873][ T8596] ? fs_reclaim_acquire+0xae/0x150 [ 295.697900][ T8596] should_failslab+0xc2/0x120 [ 295.697919][ T8596] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 295.697937][ T8596] ? __alloc_skb+0x2b1/0x380 [ 295.697964][ T8596] __alloc_skb+0x2b1/0x380 [ 295.697991][ T8596] ? __pfx___alloc_skb+0x10/0x10 [ 295.698017][ T8596] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 295.698045][ T8596] netlink_alloc_large_skb+0x69/0x130 [ 295.698066][ T8596] netlink_sendmsg+0x689/0xd70 [ 295.698089][ T8596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.698118][ T8596] ____sys_sendmsg+0xaaf/0xc90 [ 295.698134][ T8596] ? copy_msghdr_from_user+0x10b/0x160 [ 295.698155][ T8596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.698181][ T8596] ___sys_sendmsg+0x135/0x1e0 [ 295.698202][ T8596] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.698233][ T8596] ? __pfx_lock_release+0x10/0x10 [ 295.698254][ T8596] ? trace_lock_acquire+0x14e/0x1f0 [ 295.698278][ T8596] ? __fget_files+0x206/0x3a0 [ 295.698299][ T8596] __sys_sendmsg+0x16e/0x220 [ 295.698323][ T8596] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.698361][ T8596] do_syscall_64+0xcd/0x250 [ 295.698385][ T8596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.698407][ T8596] RIP: 0033:0x7fb71378d169 [ 295.698420][ T8596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.698435][ T8596] RSP: 002b:00007fb71467e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.698451][ T8596] RAX: ffffffffffffffda RBX: 00007fb7139a5fa0 RCX: 00007fb71378d169 [ 295.698462][ T8596] RDX: 0000000000044050 RSI: 0000400000000140 RDI: 0000000000000003 [ 295.698472][ T8596] RBP: 00007fb71467e090 R08: 0000000000000000 R09: 0000000000000000 [ 295.698481][ T8596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.698490][ T8596] R13: 0000000000000000 R14: 00007fb7139a5fa0 R15: 00007ffd38f4b6e8 [ 295.698511][ T8596] [ 295.709441][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.029142][ T26] usb 1-1: config 0 descriptor?? [ 297.279583][ T8615] 9pnet_fd: Insufficient options for proto=fd [ 297.381891][ T30] audit: type=1400 audit(1742266366.892:534): avc: denied { setopt } for pid=8588 comm="syz.0.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 298.144150][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.753'. [ 298.165123][ T8630] netlink: 44 bytes leftover after parsing attributes in process `syz.2.753'. [ 298.176512][ T8630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.753'. [ 299.010479][ T26] usb 1-1: USB disconnect, device number 15 [ 300.273193][ T8661] snd_dummy snd_dummy.0: control 1:0:0:syz0:-3 is already present [ 300.597172][ T8662] syz.3.761 (8662): drop_caches: 2 [ 300.634272][ T8657] syz.4.763 (8657): drop_caches: 2 [ 301.626652][ T30] audit: type=1400 audit(1742266371.132:535): avc: denied { setopt } for pid=8679 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 301.658971][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.741340][ T8704] 9pnet_fd: Insufficient options for proto=fd [ 303.491970][ T8708] xt_cgroup: path and classid specified [ 304.829277][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.779'. [ 304.913464][ T5820] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 305.640481][ T8742] netlink: 'syz.4.783': attribute type 2 has an invalid length. [ 305.655809][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.783'. [ 305.671489][ T8742] : entered promiscuous mode [ 305.907814][ T8745] FAULT_INJECTION: forcing a failure. [ 305.907814][ T8745] name failslab, interval 1, probability 0, space 0, times 0 [ 305.907873][ T8745] CPU: 0 UID: 0 PID: 8745 Comm: syz.3.785 Not tainted 6.14.0-rc7-syzkaller #0 [ 305.907891][ T8745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 305.907901][ T8745] Call Trace: [ 305.907906][ T8745] [ 305.907913][ T8745] dump_stack_lvl+0x16c/0x1f0 [ 305.907941][ T8745] should_fail_ex+0x50a/0x650 [ 305.907967][ T8745] ? fs_reclaim_acquire+0xae/0x150 [ 305.907995][ T8745] should_failslab+0xc2/0x120 [ 305.908014][ T8745] __kmalloc_node_noprof+0xd1/0x510 [ 305.908034][ T8745] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 305.908064][ T8745] __kvmalloc_node_noprof+0xad/0x1a0 [ 305.908091][ T8745] traverse.part.0.constprop.0+0x392/0x640 [ 305.908118][ T8745] ? hlock_class+0x4e/0x130 [ 305.908135][ T8745] ? __lock_acquire+0xcc5/0x3c40 [ 305.908163][ T8745] seq_read_iter+0x934/0x12b0 [ 305.908198][ T8745] proc_reg_read_iter+0x21d/0x310 [ 305.908218][ T8745] do_iter_readv_writev+0x737/0x950 [ 305.908245][ T8745] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 305.908268][ T8745] ? avc_policy_seqno+0x9/0x20 [ 305.908292][ T8745] ? rw_verify_area+0xcf/0x680 [ 305.908318][ T8745] vfs_readv+0x4d2/0x8a0 [ 305.908339][ T8745] ? __pfx___lock_acquire+0x10/0x10 [ 305.908361][ T8745] ? find_held_lock+0x2d/0x110 [ 305.908384][ T8745] ? __pfx_vfs_readv+0x10/0x10 [ 305.908413][ T8745] ? __fget_files+0x1fc/0x3a0 [ 305.908429][ T8745] ? __pfx_lock_release+0x10/0x10 [ 305.908462][ T8745] ? __fget_files+0x206/0x3a0 [ 305.908483][ T8745] ? do_preadv+0x1b1/0x270 [ 305.908506][ T8745] do_preadv+0x1b1/0x270 [ 305.908529][ T8745] ? __pfx_do_preadv+0x10/0x10 [ 305.908560][ T8745] do_syscall_64+0xcd/0x250 [ 305.908585][ T8745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.908608][ T8745] RIP: 0033:0x7fe11cb8d169 [ 305.908622][ T8745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.908638][ T8745] RSP: 002b:00007fe11d9a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 305.908661][ T8745] RAX: ffffffffffffffda RBX: 00007fe11cda6160 RCX: 00007fe11cb8d169 [ 305.908672][ T8745] RDX: 0000000000000001 RSI: 0000400000003540 RDI: 0000000000000008 [ 305.908681][ T8745] RBP: 00007fe11d9a8090 R08: 0000000000000080 R09: 0000000000000000 [ 305.908691][ T8745] R10: 00000000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 305.908701][ T8745] R13: 0000000000000000 R14: 00007fe11cda6160 R15: 00007ffdb5f85a68 [ 305.908724][ T8745] [ 307.585621][ T8754] xt_hashlimit: size too large, truncated to 1048576 [ 307.605053][ T30] audit: type=1400 audit(1742266377.112:536): avc: denied { mount } for pid=8756 comm="syz.4.788" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 307.627065][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.703637][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 307.748660][ T30] audit: type=1400 audit(1742266377.112:537): avc: denied { ioctl } for pid=8730 comm="syz.1.781" path="socket:[19133]" dev="sockfs" ino=19133 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 307.774407][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.805305][ T8760] netlink: 44 bytes leftover after parsing attributes in process `syz.0.786'. [ 307.835335][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.786'. [ 307.865744][ T30] audit: type=1326 audit(1742266377.112:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.4.788" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13f598d169 code=0x0 [ 308.093882][ T8768] syz.1.789 (8768): drop_caches: 2 [ 308.912148][ T8776] netlink: 452 bytes leftover after parsing attributes in process `syz.1.790'. [ 308.996881][ T30] audit: type=1400 audit(1742266378.502:539): avc: denied { ioctl } for pid=8774 comm="syz.1.790" path="socket:[19251]" dev="sockfs" ino=19251 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 309.042702][ T8781] FAULT_INJECTION: forcing a failure. [ 309.042702][ T8781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.128384][ T8781] CPU: 1 UID: 0 PID: 8781 Comm: syz.2.794 Not tainted 6.14.0-rc7-syzkaller #0 [ 309.128408][ T8781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.128417][ T8781] Call Trace: [ 309.128423][ T8781] [ 309.128429][ T8781] dump_stack_lvl+0x16c/0x1f0 [ 309.128456][ T8781] should_fail_ex+0x50a/0x650 [ 309.128484][ T8781] _copy_from_user+0x2e/0xd0 [ 309.128502][ T8781] wext_handle_ioctl+0xc5/0x2b0 [ 309.128524][ T8781] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 309.128548][ T8781] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 309.128577][ T8781] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 309.128607][ T8781] sock_ioctl+0x3a6/0x6c0 [ 309.128627][ T8781] ? __pfx_sock_ioctl+0x10/0x10 [ 309.128652][ T8781] ? selinux_file_ioctl+0x180/0x270 [ 309.128676][ T8781] ? selinux_file_ioctl+0xb4/0x270 [ 309.128702][ T8781] ? __pfx_sock_ioctl+0x10/0x10 [ 309.128722][ T8781] __x64_sys_ioctl+0x190/0x200 [ 309.128747][ T8781] do_syscall_64+0xcd/0x250 [ 309.128770][ T8781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.128793][ T8781] RIP: 0033:0x7fe69378d169 [ 309.128805][ T8781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.128821][ T8781] RSP: 002b:00007fe694554038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.128837][ T8781] RAX: ffffffffffffffda RBX: 00007fe6939a5fa0 RCX: 00007fe69378d169 [ 309.128848][ T8781] RDX: 0000400000000000 RSI: 0000000000008b14 RDI: 0000000000000003 [ 309.128863][ T8781] RBP: 00007fe694554090 R08: 0000000000000000 R09: 0000000000000000 [ 309.128872][ T8781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.128881][ T8781] R13: 0000000000000000 R14: 00007fe6939a5fa0 R15: 00007ffcbf698bb8 [ 309.128907][ T8781] [ 309.633530][ T8788] 9pnet_fd: Insufficient options for proto=fd [ 309.671375][ T30] audit: type=1400 audit(1742266379.182:540): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 309.815108][ T30] audit: type=1400 audit(1742266379.322:541): avc: denied { create } for pid=8791 comm="syz.4.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 309.823377][ T8792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.885636][ T30] audit: type=1400 audit(1742266379.332:542): avc: denied { bind } for pid=8791 comm="syz.4.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 309.918321][ T30] audit: type=1400 audit(1742266379.332:543): avc: denied { connect } for pid=8791 comm="syz.4.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 310.339432][ T30] audit: type=1400 audit(1742266379.842:544): avc: denied { read } for pid=8791 comm="syz.4.798" path="socket:[19278]" dev="sockfs" ino=19278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 310.392253][ T30] audit: type=1400 audit(1742266379.872:545): avc: denied { write } for pid=8791 comm="syz.4.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 310.609585][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 311.069848][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 311.076441][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 311.088811][ T9] usb 5-1: config 0 has no interface number 0 [ 311.586134][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 311.597261][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.605445][ T9] usb 5-1: Product: syz [ 311.611809][ T9] usb 5-1: Manufacturer: syz [ 311.616495][ T9] usb 5-1: SerialNumber: syz [ 311.631372][ T9] usb 5-1: config 0 descriptor?? [ 311.638176][ T9] smsc95xx v2.0.0 [ 313.337655][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 313.388867][ T9] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 313.430768][ T9] usb 5-1: USB disconnect, device number 15 [ 314.206488][ T5869] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 314.451175][ T30] audit: type=1326 audit(1742266383.962:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8839 comm="syz.0.812" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cd798d169 code=0x0 [ 314.660235][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 314.822669][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.839556][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.877829][ T5869] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 315.019463][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.037885][ T5869] usb 2-1: config 0 descriptor?? [ 315.111763][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.816'. [ 315.610949][ T5869] usb 2-1: can't set config #0, error -71 [ 315.624995][ T5869] usb 2-1: USB disconnect, device number 20 [ 316.391801][ T8868] FAULT_INJECTION: forcing a failure. [ 316.391801][ T8868] name failslab, interval 1, probability 0, space 0, times 0 [ 316.404943][ T8868] CPU: 0 UID: 0 PID: 8868 Comm: syz.1.819 Not tainted 6.14.0-rc7-syzkaller #0 [ 316.404965][ T8868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 316.404975][ T8868] Call Trace: [ 316.404981][ T8868] [ 316.404988][ T8868] dump_stack_lvl+0x16c/0x1f0 [ 316.405015][ T8868] should_fail_ex+0x50a/0x650 [ 316.405039][ T8868] ? fs_reclaim_acquire+0xae/0x150 [ 316.405063][ T8868] should_failslab+0xc2/0x120 [ 316.405077][ T8868] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 316.405091][ T8868] ? __pfx_tcp_current_mss+0x10/0x10 [ 316.405105][ T8868] ? __alloc_skb+0x2b1/0x380 [ 316.405125][ T8868] __alloc_skb+0x2b1/0x380 [ 316.405142][ T8868] ? __pfx___alloc_skb+0x10/0x10 [ 316.405166][ T8868] tcp_stream_alloc_skb+0x34/0x570 [ 316.405180][ T8868] tcp_sendmsg_locked+0xf13/0x37c0 [ 316.405196][ T8868] ? __pfx___lock_acquire+0x10/0x10 [ 316.405213][ T8868] ? __pfx_avc_has_perm+0x10/0x10 [ 316.405232][ T8868] ? mark_held_locks+0x9f/0xe0 [ 316.405249][ T8868] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 316.405260][ T8868] ? irqentry_exit+0x3b/0x90 [ 316.405276][ T8868] ? lockdep_hardirqs_on+0x7c/0x110 [ 316.405293][ T8868] ? tcp_sendmsg+0x20/0x50 [ 316.405309][ T8868] ? __local_bh_enable_ip+0xac/0x120 [ 316.405330][ T8868] tcp_sendmsg+0x2e/0x50 [ 316.405340][ T8868] ? __pfx_tcp_sendmsg+0x10/0x10 [ 316.405352][ T8868] inet_sendmsg+0xb9/0x140 [ 316.405372][ T8868] __sys_sendto+0x42a/0x4f0 [ 316.405390][ T8868] ? __pfx___sys_sendto+0x10/0x10 [ 316.405422][ T8868] ? ksys_write+0x1ba/0x250 [ 316.405433][ T8868] ? __pfx_ksys_write+0x10/0x10 [ 316.405446][ T8868] __x64_sys_sendto+0xe0/0x1c0 [ 316.405462][ T8868] ? do_syscall_64+0x91/0x250 [ 316.405478][ T8868] ? lockdep_hardirqs_on+0x7c/0x110 [ 316.405492][ T8868] do_syscall_64+0xcd/0x250 [ 316.405510][ T8868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.405528][ T8868] RIP: 0033:0x7fb71378d169 [ 316.405538][ T8868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.405550][ T8868] RSP: 002b:00007fb71463c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 316.405563][ T8868] RAX: ffffffffffffffda RBX: 00007fb7139a6160 RCX: 00007fb71378d169 [ 316.405571][ T8868] RDX: 00000000000020c8 RSI: 00004000000012c0 RDI: 0000000000000005 [ 316.405583][ T8868] RBP: 00007fb71463c090 R08: 0000000000000000 R09: 0000000000000027 [ 316.405590][ T8868] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 316.405598][ T8868] R13: 0000000000000000 R14: 00007fb7139a6160 R15: 00007ffd38f4b6e8 [ 316.405615][ T8868] [ 316.963858][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.975925][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.192555][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 317.205355][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 317.213752][ C1] CPU: 1 UID: 0 PID: 5805 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller #0 [ 317.222840][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 317.232879][ C1] RIP: 0010:bpf_get_local_storage+0x17b/0x260 [ 317.238937][ C1] Code: 48 8d 7b 10 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bb 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5b 10 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 a6 00 00 00 48 8b 1b e8 93 7e 73 09 83 f8 07 89 [ 317.258531][ C1] RSP: 0018:ffffc90000a28038 EFLAGS: 00010246 [ 317.264579][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff81e40d02 [ 317.272536][ C1] RDX: 0000000000000000 RSI: ffffffff81e40db8 RDI: ffff8880326090a0 [ 317.280486][ C1] RBP: ffffc90000a28058 R08: 0000000000000005 R09: 0000000000000015 [ 317.288440][ C1] R10: 0000000000000015 R11: 0000000000000002 R12: ffff8880292ce780 [ 317.296391][ C1] R13: ffffc9000caad002 R14: 0000000000000000 R15: ffff8880292ce7b0 [ 317.304341][ C1] FS: 000055557a4c4500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 317.313254][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.319818][ C1] CR2: 00007f045aa02000 CR3: 0000000036428000 CR4: 00000000003526f0 [ 317.327772][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 317.335724][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 317.343674][ C1] Call Trace: [ 317.346932][ C1] [ 317.350712][ C1] ? die_addr+0x3b/0xa0 [ 317.354855][ C1] ? exc_general_protection+0x155/0x230 [ 317.360391][ C1] ? asm_exc_general_protection+0x26/0x30 [ 317.366098][ C1] ? bpf_get_local_storage+0x42/0x260 [ 317.371454][ C1] ? bpf_get_local_storage+0xf8/0x260 [ 317.376810][ C1] ? bpf_get_local_storage+0x17b/0x260 [ 317.382251][ C1] ? bpf_get_local_storage+0xf8/0x260 [ 317.387626][ C1] bpf_prog_3647604f6c8667e9+0x2e/0x41 [ 317.393089][ C1] __bpf_prog_run_save_cb+0x11f/0x330 [ 317.398458][ C1] ? __pfx___bpf_prog_run_save_cb+0x10/0x10 [ 317.404342][ C1] ? __cgroup_bpf_run_filter_skb+0x341/0xe60 [ 317.410311][ C1] __cgroup_bpf_run_filter_skb+0x470/0xe60 [ 317.416104][ C1] ? __pfx___cgroup_bpf_run_filter_skb+0x10/0x10 [ 317.422417][ C1] ? tcp_do_parse_auth_options+0x137/0x2e0 [ 317.428224][ C1] sk_filter_trim_cap+0x234/0xac0 [ 317.433237][ C1] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 317.438596][ C1] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 317.444129][ C1] tcp_v4_rcv+0x28fd/0x4380 [ 317.448621][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 317.453454][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 317.458894][ C1] ? rcu_is_watching+0x12/0xc0 [ 317.463640][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 317.468469][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 317.473823][ C1] ip_local_deliver_finish+0x316/0x570 [ 317.479263][ C1] ip_local_deliver+0x18e/0x1f0 [ 317.484096][ C1] ip_sublist_rcv_finish+0x2c1/0x620 [ 317.489362][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 317.494720][ C1] ip_list_rcv_finish+0x559/0x720 [ 317.499726][ C1] ? __pfx_ip_list_rcv_finish+0x10/0x10 [ 317.505251][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 317.510346][ C1] ip_list_rcv+0x339/0x450 [ 317.514747][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 317.519682][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 317.524865][ C1] ? __pfx_eth_type_trans+0x10/0x10 [ 317.530047][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 317.534965][ C1] __netif_receive_skb_list_core+0x755/0x950 [ 317.540943][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 317.547439][ C1] ? rcu_is_watching+0x12/0xc0 [ 317.552188][ C1] ? lock_acquire+0x2f/0xb0 [ 317.556675][ C1] ? netif_receive_skb_list_internal+0x359/0xdb0 [ 317.562986][ C1] netif_receive_skb_list_internal+0x753/0xdb0 [ 317.569122][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 317.575782][ C1] ? vring_unmap_one_split+0x153/0x2f0 [ 317.581343][ C1] ? __pfx_receive_buf+0x10/0x10 [ 317.586273][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 317.591550][ C1] napi_complete_done+0x218/0x940 [ 317.596561][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 317.602104][ C1] ? virtqueue_get_buf_ctx+0x8f/0xb0 [ 317.607372][ C1] virtnet_poll+0x1c03/0x39f0 [ 317.612034][ C1] ? lock_acquire+0x2f/0xb0 [ 317.616524][ C1] ? virtqueue_poll+0x1b0/0x290 [ 317.621366][ C1] ? virtnet_poll_tx+0x8cf/0x14f0 [ 317.626372][ C1] ? __pfx_virtnet_poll+0x10/0x10 [ 317.631378][ C1] ? mark_lock+0xb5/0xc60 [ 317.635691][ C1] ? hlock_class+0x4e/0x130 [ 317.640192][ C1] ? __pfx_mark_lock+0x10/0x10 [ 317.644973][ C1] ? __pfx_mark_lock+0x10/0x10 [ 317.649734][ C1] ? __pfx_virtnet_poll_tx+0x10/0x10 [ 317.655022][ C1] ? __pfx_lock_release+0x10/0x10 [ 317.660120][ C1] ? rcu_is_watching+0x12/0xc0 [ 317.664864][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 317.670223][ C1] net_rx_action+0xa94/0x1010 [ 317.674886][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 317.679982][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 317.685162][ C1] ? sched_clock+0x38/0x60 [ 317.689564][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 317.694411][ C1] handle_softirqs+0x213/0x8f0 [ 317.699164][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 317.704436][ C1] __irq_exit_rcu+0x109/0x170 [ 317.709096][ C1] irq_exit_rcu+0x9/0x30 [ 317.713324][ C1] common_interrupt+0xbf/0xe0 [ 317.717997][ C1] [ 317.720909][ C1] [ 317.723821][ C1] asm_common_interrupt+0x26/0x40 [ 317.728829][ C1] RIP: 0010:do_syscall_64+0x9a/0x250 [ 317.734099][ C1] Code: 00 48 8b 7d 08 e8 26 52 00 00 0f 1f 44 00 00 0f 1f 44 00 00 90 e8 66 88 6a f6 90 90 e8 ef 89 6a f6 fb 65 48 8b 05 d6 b8 ac 74 <48> 8b 50 08 f6 c2 3f 0f 85 3c 01 00 00 90 90 41 81 fc d2 01 00 00 [ 317.753687][ C1] RSP: 0018:ffffc900031e7f28 EFLAGS: 00000202 [ 317.759735][ C1] RAX: ffff88802a1e4880 RBX: ffffc900031e7f58 RCX: 1ffffffff20c4491 [ 317.767686][ C1] RDX: 0000000000000000 RSI: ffffffff8b6cfbe0 RDI: ffffffff8bd36aa0 [ 317.775660][ C1] RBP: ffffc900031e7f48 R08: 0000000000000001 R09: 0000000000000001 [ 317.783612][ C1] R10: ffffffff90626817 R11: 0000000000000000 R12: 000000000000010e [ 317.791564][ C1] R13: 000000000000010e R14: 0000000000000000 R15: 0000000000000000 [ 317.799517][ C1] ? do_syscall_64+0x91/0x250 [ 317.804179][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.810055][ C1] RIP: 0033:0x7f045cf8cf2c [ 317.814449][ C1] Code: 29 44 24 30 80 3d 2b 06 1f 00 00 4c 89 4c 24 40 4c 8d 4c 24 40 48 c7 44 24 48 08 00 00 00 74 2e 4c 89 ea b8 0e 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7c 48 8b 54 24 58 64 48 2b 14 25 28 00 00 00 [ 317.834047][ C1] RSP: 002b:00007ffc24b93100 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 317.842439][ C1] RAX: ffffffffffffffda RBX: 00007ffc24b93230 RCX: 00007f045cf8cf2c [ 317.850390][ C1] RDX: 0000000000000000 RSI: 00007ffc24b93230 RDI: 0000000000000023 [ 317.858342][ C1] RBP: 00007ffc24b93470 R08: 00007ffc24b93130 R09: 00007ffc24b93140 [ 317.866307][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc24b934d0 [ 317.874256][ C1] R13: 0000000000000000 R14: 00007ffc24b93680 R15: 00007ffc24b932c0 [ 317.882212][ C1] [ 317.885224][ C1] Modules linked in: [ 317.889192][ C1] ---[ end trace 0000000000000000 ]--- [ 317.894676][ C1] RIP: 0010:bpf_get_local_storage+0x17b/0x260 [ 317.900773][ C1] Code: 48 8d 7b 10 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bb 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5b 10 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 a6 00 00 00 48 8b 1b e8 93 7e 73 09 83 f8 07 89 [ 317.920395][ C1] RSP: 0018:ffffc90000a28038 EFLAGS: 00010246 [ 317.926440][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff81e40d02 [ 317.934402][ C1] RDX: 0000000000000000 RSI: ffffffff81e40db8 RDI: ffff8880326090a0 [ 317.942369][ C1] RBP: ffffc90000a28058 R08: 0000000000000005 R09: 0000000000000015 [ 317.950325][ C1] R10: 0000000000000015 R11: 0000000000000002 R12: ffff8880292ce780 [ 317.958270][ C1] R13: ffffc9000caad002 R14: 0000000000000000 R15: ffff8880292ce7b0 [ 317.966232][ C1] FS: 000055557a4c4500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 317.975145][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.981727][ C1] CR2: 00007f045aa02000 CR3: 0000000036428000 CR4: 00000000003526f0 [ 317.989684][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 317.997640][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 318.005626][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 318.013023][ C1] Kernel Offset: disabled [ 318.017327][ C1] Rebooting in 86400 seconds..