last executing test programs: 2m43.043481205s ago: executing program 0 (id=263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000010000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m42.952128029s ago: executing program 0 (id=265): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r1 = socket(0x2, 0x80805, 0x0) socket$rxrpc(0x21, 0x2, 0xa) close(0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) close(0x4) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000001c0)=0x10000) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x101, 0x4, 0x1f4bf1ba, 0x0, r6}, 0x10) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000040)=""/79, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) socket$kcm(0x10, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0xa, 0x1, 0x5, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4, r8}) syz_emit_ethernet(0x1f, &(0x7f0000000140)=ANY=[@ANYBLOB="2105000b1e85b11c60b11300001142"], 0x0) 2m42.189044147s ago: executing program 0 (id=269): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x200440d5) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0xfffffffffffffff5, r4, {0x7, 0x29, 0x5, 0x20040, 0x1, 0x61, 0x1, 0xffffffff, 0x0, 0x0, 0x10, 0x1ff}}, 0x50) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x200440d5) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020) (async) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0xfffffffffffffff5, r4, {0x7, 0x29, 0x5, 0x20040, 0x1, 0x61, 0x1, 0xffffffff, 0x0, 0x0, 0x10, 0x1ff}}, 0x50) (async) 2m41.75864011s ago: executing program 0 (id=272): r0 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x4100400, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0xb101a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r4, &(0x7f000000ae80)={0x2020}, 0x2020) pread64(r4, &(0x7f00000002c0)=""/220, 0xdc, 0x0) read$FUSE(r4, &(0x7f0000004b80)={0x2020}, 0x2020) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x85, 0x0, &(0x7f0000005e80)) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a00"], 0x38}}, 0x20004000) 2m40.756597921s ago: executing program 0 (id=275): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xa) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f580000000c0a010200000000000000000100000008000440000000000900010073797a3000000000300003802c00008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) clock_gettime(0x0, &(0x7f0000000140)) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, &(0x7f00000001c0)) connect$netrom(r5, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@null, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x48) 2m40.504624759s ago: executing program 0 (id=276): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) close(0x3) accept$alg(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001440), 0x46, 0x42, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x20000, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005200010000000100000000000a"], 0x28}}, 0x0) 2m40.428493997s ago: executing program 32 (id=276): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) close(0x3) accept$alg(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001440), 0x46, 0x42, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x20000, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005200010000000100000000000a"], 0x28}}, 0x0) 46.694209214s ago: executing program 1 (id=717): openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) 46.622783289s ago: executing program 1 (id=719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) 46.560624935s ago: executing program 1 (id=720): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x801, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)) (fail_nth: 4) 45.472944324s ago: executing program 1 (id=725): syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_setup(0xc20, &(0x7f0000002000)) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000}) io_uring_enter(r2, 0x4d1a, 0x0, 0x0, 0x0, 0x0) 44.150257571s ago: executing program 1 (id=734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x28000000) r3 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87}, './file0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000680)={{0x1, 0x2000, 0xa, 0x4, 0x7, 0x59, 0x4, 0x90, 0x3, 0x4, 0x8, 0x3}, {0x3000, 0xd000, 0x9, 0xd9, 0x7, 0xc6, 0x1, 0x0, 0x9, 0x4, 0x1}, {0xeeef0000, 0xf000, 0xe, 0x7, 0x6, 0xe, 0x3, 0xf, 0x6, 0x40, 0x8, 0x9}, {0x4, 0x1, 0xa, 0x7f, 0x40, 0xc8, 0x2, 0x2, 0x10, 0x9, 0x75, 0x4}, {0x8000000, 0x8000000, 0x4, 0x8, 0x6b, 0x0, 0xf4, 0x3e, 0x84, 0x8d, 0x24, 0x81}, {0x3000, 0xdddd0000, 0x4, 0x2, 0x4, 0x7, 0xa8, 0x0, 0x53, 0xdf, 0xe7, 0x10}, {0xdddd1000, 0x1000, 0x10, 0x2, 0x1, 0xd, 0x40, 0x9e, 0xa9, 0xc, 0xff, 0xff}, {0x100000, 0x5000, 0x8, 0x81, 0x9, 0xfc, 0x7, 0x4, 0xc3, 0xc, 0x2, 0x3}, {0x10000, 0x9}, {0x2000, 0xd4e}, 0x40000004, 0x0, 0xeeee8000, 0x11, 0x5, 0x0, 0xd000, [0x40, 0x3, 0x1, 0x42]}) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') preadv(r8, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000040)=""/99, 0x63}], 0x2, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000001c0)={0x60, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r8, 0xc1205531, &(0x7f0000000880)={0x0, 0x4, 0x9, 0x401, '\x00', '\x00', '\x00', 0x4, 0x9, 0x4, 0x7, "8738110aa82178b9126cb9230e10f5d4"}) syz_usb_control_io(r7, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="00cb0062535d4c46000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 40.484998374s ago: executing program 1 (id=746): r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x400400, 0x0) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000000d72", @ANYRES64], &(0x7f00000003c0)='GPL\x00', 0x0, 0xffffffffffffff49, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0), 0x4) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f00000010c0)=[{r5, 0xad0}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1a, 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0x40186f40, 0x20000502) sendmsg$AUDIT_GET(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000240)={0x0, 0x8, 0x0, 0x0, 0x1d}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000cc0)={{0x3, 0x3, 0x1, 0x1, 0x9}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_cmd={0x9, 0x1, 0xfffffffe, 0x510, 0xc0, 0x3, 0x7, 0x4, 0x5, 0xff, 0x5, 0x9, 0x8, 0x6, 0x6a, 0x0, [0x3, 0x6]}}) 25.491490846s ago: executing program 33 (id=746): r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x400400, 0x0) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000000d72", @ANYRES64], &(0x7f00000003c0)='GPL\x00', 0x0, 0xffffffffffffff49, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0), 0x4) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f00000010c0)=[{r5, 0xad0}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1a, 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0x40186f40, 0x20000502) sendmsg$AUDIT_GET(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000240)={0x0, 0x8, 0x0, 0x0, 0x1d}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000cc0)={{0x3, 0x3, 0x1, 0x1, 0x9}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_cmd={0x9, 0x1, 0xfffffffe, 0x510, 0xc0, 0x3, 0x7, 0x4, 0x5, 0xff, 0x5, 0x9, 0x8, 0x6, 0x6a, 0x0, [0x3, 0x6]}}) 8.482535997s ago: executing program 4 (id=879): syz_open_dev$swradio(&(0x7f00000019c0), 0x1, 0x2) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) sched_getattr(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 6.649598468s ago: executing program 6 (id=884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2040084) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}}, 0x0) (fail_nth: 5) 6.177283127s ago: executing program 5 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010000000080007000300000018000180140002006e657464657673696d300000000000000800060000000000080008"], 0x44}}, 0x0) 6.16234084s ago: executing program 6 (id=887): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000002940)={0x18, 0x3}, 0x18) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0xe9, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "d77b5d2898"}]}}]}}]}}]}}, 0x0) 5.973171544s ago: executing program 5 (id=889): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x3c00}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x47ba, 0x0, 0xf00000000000000, 0x0, 0x0) 5.145308916s ago: executing program 3 (id=891): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 5.110521196s ago: executing program 3 (id=892): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000004c0)=[{&(0x7f00000001c0)="f9a7566fa89e3cfb56109e0354eb02d0cd6a66f48f2ceeb12b47c63897221be18fb89e56286970e9bb81c6d97e83ab4f374c60a496a3ad772df9bf1b4b7c87cfea46d3f3337d3299249a0c2c308d98aab6612b40819628f0a8e53674d1a905fa3a5723b73c1b61d96ce6b7ff420dc39db860ff404d9ea2b62415592a46025ef10189fe2755c1d7670e39bc8439681de7262f8c7755487dab364dace89ca05570c7fbef9d226f8ab1341e1706a895a04b933045a6cbf1b0daa4d8531ea0b5a56e88791b13cf3ab0c556344f713f083fec", 0xd0}, {&(0x7f0000000080)="2d69c74fd74b0489b302204ef5f29609fa7546f708be8d8dce723c3f5804", 0x1e}], 0x2) sendmsg(0xffffffffffffffff, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() eventfd(0x7) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1}) r6 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {0x0}], 0x2}}], 0x1, 0x2, 0x0) 4.993009612s ago: executing program 5 (id=893): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000004c0)=[{&(0x7f00000001c0)="f9a7566fa89e3cfb56109e0354eb02d0cd6a66f48f2ceeb12b47c63897221be18fb89e56286970e9bb81c6d97e83ab4f374c60a496a3ad772df9bf1b4b7c87cfea46d3f3337d3299249a0c2c308d98aab6612b40819628f0a8e53674d1a905fa3a5723b73c1b61d96ce6b7ff420dc39db860ff404d9ea2b62415592a46025ef10189fe2755c1d7670e39bc8439681de7262f8c7755487dab364dace89ca05570c7fbef9d226f8ab1341e1706a895a04b933045a6cbf1b0daa4d8531ea0b5a56e88791b13cf3ab0c556344f713f083fec", 0xd0}, {&(0x7f0000000080)="2d69c74fd74b0489b302204ef5f29609fa7546f708be8d8dce723c3f5804", 0x1e}], 0x2) sendmsg(0xffffffffffffffff, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() eventfd(0x7) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1}) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {0x0}], 0x2}}], 0x1, 0x2, 0x0) 3.598395969s ago: executing program 3 (id=894): syz_open_dev$swradio(&(0x7f00000019c0), 0x1, 0x2) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) sched_getattr(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3.536402756s ago: executing program 5 (id=895): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, 0x0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000080)=""/57, &(0x7f00000000c0)=0x39) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) quotactl$Q_QUOTAON(0xf11a0da8af4766ba, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) r4 = syz_io_uring_setup(0x235, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x2b1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}}, 0x40808c4) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) write$FUSE_LK(r2, &(0x7f0000000380)={0x28, 0x0, 0x0, {{0x2bf57389, 0x72, 0x1}}}, 0x28) 3.329575989s ago: executing program 3 (id=897): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000900)={0x2f, 0x0, 0x2, 0x5}, 0x8) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) 3.159479043s ago: executing program 2 (id=898): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f00000047c0), &(0x7f0000004880)=@udp}, 0x20) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}], 0x1}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) (fail_nth: 4) 2.268819568s ago: executing program 6 (id=899): openat(0xffffffffffffff9c, 0x0, 0xd19000, 0x35) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESTART(r0, 0x1274, 0xfdfdffffffffffff) 2.268570768s ago: executing program 2 (id=900): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005040)=[{{&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x3c, 0x1000000, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x43, 0x3, 0xf, [{@rand_addr=0x64010100}, {@loopback, 0x6}, {@rand_addr=0x64010101, 0x18}]}, @cipso={0x86, 0xd, 0x3, [{0x5, 0x7, "43d85c700d"}]}]}}}], 0x40}}], 0x1, 0x200448d4) 2.244110315s ago: executing program 5 (id=901): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.110733865s ago: executing program 6 (id=902): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r1 = accept(r0, 0x0, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 2.033129575s ago: executing program 6 (id=903): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000180)=0x1400200bd2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0x0, 0x0, &(0x7f00000000c0), 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070601020100000000000000000000000500010007000000"], 0x1c}}, 0x0) (fail_nth: 5) 2.032859159s ago: executing program 2 (id=904): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r0, &(0x7f0000000480)=""/177, 0xb1, 0xe0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f00000000c0)=@framed={{}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8}]}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.369784763s ago: executing program 3 (id=905): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000004c0)=[{&(0x7f00000001c0)="f9a7566fa89e3cfb56109e0354eb02d0cd6a66f48f2ceeb12b47c63897221be18fb89e56286970e9bb81c6d97e83ab4f374c60a496a3ad772df9bf1b4b7c87cfea46d3f3337d3299249a0c2c308d98aab6612b40819628f0a8e53674d1a905fa3a5723b73c1b61d96ce6b7ff420dc39db860ff404d9ea2b62415592a46025ef10189fe2755c1d7670e39bc8439681de7262f8c7755487dab364dace89ca05570c7fbef9d226f8ab1341e1706a895a04b933045a6cbf1b0daa4d8531ea0b5a56e88791b13cf3ab0c556344f713f083fec", 0xd0}, {&(0x7f0000000080)="2d69c74fd74b0489b302204ef5f29609fa7546f708be8d8dce723c3f5804", 0x1e}], 0x2) sendmsg(0xffffffffffffffff, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() eventfd(0x7) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1}) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {0x0}], 0x2}}], 0x1, 0x2, 0x0) 1.31121796s ago: executing program 4 (id=906): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000084a280000e80300000000000000c8cc42", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x14, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd5f3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @generic={0x6, 0x3, 0xd, 0x4, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x6, 0x32, &(0x7f0000000140)=""/50, 0x40f00, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0x9, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r1, r1, r2, r1], 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='btrfs_writepage_end_io_hook\x00', r3, 0x0, 0x6}, 0x18) lsm_list_modules(0x0, 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, 0x0) 1.14335805s ago: executing program 4 (id=907): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0xd0, 0x0, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3], 0x64}}, 0x0) 864.593075ms ago: executing program 2 (id=908): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$TCFLSH(r0, 0xc0384707, 0x20000000) 393.856797ms ago: executing program 3 (id=909): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000100404df0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x39, 0x800, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xf) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(&(0x7f00000004c0), 0x1, 0x1e9880) 357.739172ms ago: executing program 2 (id=910): r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0xfffffdf7, 0x0, &(0x7f0000000040), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x102c864, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0xffffffd1, 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 281.088318ms ago: executing program 4 (id=911): r0 = userfaultfd(0x92a3ab891d264777) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000003900)={0x12}) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000150000/0x1000)=nil, 0x1000}}) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000c12000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) 200.507234ms ago: executing program 5 (id=912): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x99, 0x51, 0xd4, 0x40, 0x17ef, 0x304b, 0xdf52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000020000000000000000000000850000005300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNGETFILTER(r5, 0x801054db, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) 99.547711ms ago: executing program 2 (id=913): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_vhci(&(0x7f00000012c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc9, "0d24b2002987f91c"}}}, 0xe) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) close(r4) 99.341152ms ago: executing program 4 (id=914): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r1 = accept(r0, 0x0, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 32.872626ms ago: executing program 6 (id=915): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000004dd793786ca840000000000000000004000000300"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='contention_begin\x00', r0}, 0x18) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc07}}, 0x120) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000000)) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) r4 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x3c}}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r5}, 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f00000005c0)={0x3, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000400)=""/232, 0xe8}, {&(0x7f0000000500)=""/7, 0x7}], &(0x7f0000000580)=[0x9, 0xfffffffffffffffd, 0xa, 0x2], 0x3}, 0x20) read$FUSE(r5, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r7, 0x0) r8 = getegid() fchown(r3, r7, r8) r9 = syz_open_dev$loop(&(0x7f0000007600), 0xd75, 0x80000) openat$uinput(0xffffffffffffff9c, &(0x7f0000001640), 0x802, 0x0) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000600)=""/4096, &(0x7f0000001600)=0x1000) ioctl$BLKGETDISKSEQ(r9, 0x80081280, &(0x7f0000007640)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x20050800) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=916): r0 = socket(0x1d, 0x3, 0x1) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f00000006c0)) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3400c082) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000003e80), 0x800) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x65, 0x7, 0x0, 0x20000000) kernel console output (not intermixed with test programs): e number 7 [ 204.004120][ T29] audit: type=1326 audit(1733357834.550:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7654 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7c8af7ff19 code=0x7ffc0000 [ 204.057755][ T971] usb 4-1: USB disconnect, device number 37 [ 204.076279][ T29] audit: type=1326 audit(1733357834.550:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7654 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8af7ff19 code=0x7ffc0000 [ 204.108883][ T29] audit: type=1326 audit(1733357834.550:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7654 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8af7ff19 code=0x7ffc0000 [ 204.150659][ T29] audit: type=1326 audit(1733357834.550:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7654 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c8af7e880 code=0x7ffc0000 [ 204.323085][ T29] audit: type=1326 audit(1733357834.550:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7654 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c8af7ff19 code=0x7ffc0000 [ 205.630618][ T971] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 206.229675][ T5869] usb 3-1: USB disconnect, device number 18 [ 206.706684][ T971] usb 4-1: New USB device found, idVendor=17ef, idProduct=304b, bcdDevice=df.52 [ 206.721375][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.736521][ T971] usb 4-1: Product: syz [ 206.765553][ T971] usb 4-1: Manufacturer: syz [ 206.770249][ T971] usb 4-1: SerialNumber: syz [ 207.175087][ T971] usb 4-1: config 0 descriptor?? [ 207.202368][ T971] ax88179_178a 4-1:0.0: probe with driver ax88179_178a failed with error -22 [ 208.316044][ T7696] bond0: entered promiscuous mode [ 208.321479][ T7696] bond_slave_0: entered promiscuous mode [ 208.335728][ T7696] bond_slave_1: entered promiscuous mode [ 208.347035][ T7696] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 208.359556][ T7696] bond0: left promiscuous mode [ 208.426728][ T7696] bond_slave_0: left promiscuous mode [ 208.443862][ T7696] bond_slave_1: left promiscuous mode [ 209.061583][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 209.061619][ T29] audit: type=1400 audit(1733357839.740:413): avc: denied { name_connect } for pid=7708 comm="syz.1.463" dest=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1 [ 209.441755][ T7714] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 209.920213][ T971] usb 4-1: USB disconnect, device number 38 [ 210.312766][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 210.452255][ T971] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 211.415826][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 211.428879][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 211.439200][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 211.448285][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 211.459917][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 211.499842][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 211.570149][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 211.578581][ T9] usb 3-1: Product: syz [ 211.582893][ T9] usb 3-1: Manufacturer: syz [ 211.591424][ T971] usb 4-1: New USB device found, idVendor=17ef, idProduct=304b, bcdDevice=df.52 [ 211.600818][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.609024][ T971] usb 4-1: Product: syz [ 211.613282][ T971] usb 4-1: Manufacturer: syz [ 211.617863][ T971] usb 4-1: SerialNumber: syz [ 211.626250][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 211.631563][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 211.641364][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 211.647443][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 211.654934][ T971] usb 4-1: config 0 descriptor?? [ 211.666060][ T971] ax88179_178a 4-1:0.0: probe with driver ax88179_178a failed with error -22 [ 211.970517][ T7745] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 212.670010][ T7719] netlink: 'syz.2.467': attribute type 4 has an invalid length. [ 214.576087][ T7777] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 214.584316][ T971] usb 4-1: USB disconnect, device number 39 [ 214.617076][ T5868] usb 3-1: USB disconnect, device number 19 [ 215.423620][ T7786] ubi: mtd0 is already attached to ubi0 [ 216.862903][ T5818] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 216.992961][ T29] audit: type=1400 audit(1733357847.670:414): avc: denied { set_context_mgr } for pid=7799 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 216.997910][ T7800] binder_alloc: 7799: binder_alloc_buf, no vma [ 217.059304][ T5818] usb 3-1: config index 0 descriptor too short (expected 1572, got 36) [ 217.067975][ T5818] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 217.108455][ T5818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 217.127745][ T29] audit: type=1400 audit(1733357847.680:415): avc: denied { call } for pid=7799 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 217.128365][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 217.290805][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.302914][ T5818] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 217.321219][ T5818] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 217.401005][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.424032][ T5818] usb 3-1: config 0 descriptor?? [ 218.051308][ T5818] logitech 0003:046D:C50C.0018: unknown main item tag 0x0 [ 218.193868][ T5818] logitech 0003:046D:C50C.0018: report_id 0 is invalid [ 218.259597][ T5818] logitech 0003:046D:C50C.0018: item 0 2 1 8 parsing failed [ 218.271942][ T5818] logitech 0003:046D:C50C.0018: parse failed [ 218.284344][ T5818] logitech 0003:046D:C50C.0018: probe with driver logitech failed with error -22 [ 218.825548][ T29] audit: type=1400 audit(1733357849.300:416): avc: denied { write } for pid=7791 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 219.173591][ T971] usb 3-1: USB disconnect, device number 20 [ 219.240315][ T29] audit: type=1400 audit(1733357849.920:417): avc: denied { ioctl } for pid=7829 comm="syz.1.495" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 219.307634][ T7834] netlink: 40 bytes leftover after parsing attributes in process `syz.4.497'. [ 219.652591][ T971] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 220.006015][ T5866] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 220.035293][ T971] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.045691][ T971] usb 2-1: config 0 has no interfaces? [ 220.163341][ T971] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 220.172404][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.203496][ T971] usb 2-1: Product: syz [ 220.207742][ T971] usb 2-1: Manufacturer: syz [ 220.212351][ T971] usb 2-1: SerialNumber: syz [ 220.223981][ T5866] usb 6-1: Using ep0 maxpacket: 32 [ 220.231077][ T971] usb 2-1: config 0 descriptor?? [ 220.239930][ T5866] usb 6-1: config 0 has an invalid interface number: 215 but max is 0 [ 220.251242][ T5866] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.261865][ T5866] usb 6-1: config 0 has no interface number 0 [ 220.268166][ T5866] usb 6-1: config 0 interface 215 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 220.285888][ T5866] usb 6-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 220.295255][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.340449][ T5866] usb 6-1: Product: syz [ 220.345247][ T5866] usb 6-1: Manufacturer: syz [ 220.350619][ T5866] usb 6-1: SerialNumber: syz [ 220.361032][ T5866] usb 6-1: config 0 descriptor?? [ 220.368765][ T5866] io_ti 6-1:0.215: required endpoints missing [ 220.432412][ T29] audit: type=1400 audit(1733357851.110:418): avc: denied { append } for pid=7859 comm="syz.3.504" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 220.582028][ T29] audit: type=1400 audit(1733357851.260:419): avc: denied { connect } for pid=7835 comm="syz.5.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 220.586535][ T5868] usb 6-1: USB disconnect, device number 8 [ 220.614817][ T7860] netlink: 'syz.3.504': attribute type 1 has an invalid length. [ 220.761006][ T7867] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 221.251287][ T7860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.189481][ T7883] FAULT_INJECTION: forcing a failure. [ 222.189481][ T7883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.230073][ T7883] CPU: 0 UID: 0 PID: 7883 Comm: syz.5.510 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 222.240690][ T7883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 222.250728][ T7883] Call Trace: [ 222.253989][ T7883] [ 222.256905][ T7883] dump_stack_lvl+0x16c/0x1f0 [ 222.261567][ T7883] should_fail_ex+0x497/0x5b0 [ 222.266227][ T7883] _copy_from_user+0x2e/0xd0 [ 222.270808][ T7883] copy_msghdr_from_user+0x99/0x160 [ 222.276001][ T7883] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 222.281812][ T7883] ___sys_sendmsg+0xff/0x1e0 [ 222.286380][ T7883] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.291560][ T7883] ? __pfx_lock_release+0x10/0x10 [ 222.296584][ T7883] ? trace_lock_acquire+0x14e/0x1f0 [ 222.301773][ T7883] ? __fget_files+0x206/0x3a0 [ 222.306447][ T7883] __sys_sendmsg+0x16e/0x220 [ 222.311023][ T7883] ? __pfx___sys_sendmsg+0x10/0x10 [ 222.316125][ T7883] do_syscall_64+0xcd/0x250 [ 222.320619][ T7883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.326500][ T7883] RIP: 0033:0x7fa66297ff19 [ 222.330895][ T7883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.350486][ T7883] RSP: 002b:00007fa6607f6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.358882][ T7883] RAX: ffffffffffffffda RBX: 00007fa662b45fa0 RCX: 00007fa66297ff19 [ 222.366847][ T7883] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000005 [ 222.374801][ T7883] RBP: 00007fa6607f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 222.382763][ T7883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.390726][ T7883] R13: 0000000000000000 R14: 00007fa662b45fa0 R15: 00007fff51b025e8 [ 222.398724][ T7883] [ 222.422102][ T29] audit: type=1400 audit(1733357853.100:420): avc: denied { write } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.522654][ T29] audit: type=1400 audit(1733357853.100:421): avc: denied { remove_name } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.545679][ T29] audit: type=1400 audit(1733357853.100:422): avc: denied { add_name } for pid=5172 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.711114][ T5866] usb 2-1: USB disconnect, device number 23 [ 223.007266][ T5869] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 223.293989][ T5869] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 223.329491][ T7910] netlink: 24 bytes leftover after parsing attributes in process `syz.5.518'. [ 223.332149][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.384250][ T5869] usb 5-1: config 0 descriptor?? [ 223.836621][ T5869] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 223.843794][ T5869] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 224.262708][ T5866] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 224.401327][ T5869] IPVS: starting estimator thread 0... [ 224.412710][ T5866] usb 6-1: Using ep0 maxpacket: 32 [ 224.420564][ T5866] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 224.429087][ T5866] usb 6-1: config 0 has no interface number 0 [ 224.437440][ T5866] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 224.448097][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.456399][ T5866] usb 6-1: Product: syz [ 224.461468][ T5866] usb 6-1: Manufacturer: syz [ 224.470721][ T5866] usb 6-1: SerialNumber: syz [ 224.477244][ T5866] usb 6-1: config 0 descriptor?? [ 224.484318][ T5866] smsc95xx v2.0.0 [ 224.493516][ T7932] IPVS: using max 32 ests per chain, 76800 per kthread [ 224.582633][ T5868] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 225.033745][ T5868] usb 2-1: New USB device found, idVendor=17ef, idProduct=304b, bcdDevice=df.52 [ 225.043143][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.051245][ T5868] usb 2-1: Product: syz [ 225.055653][ T5868] usb 2-1: Manufacturer: syz [ 225.072601][ T5868] usb 2-1: SerialNumber: syz [ 225.081133][ T5868] usb 2-1: config 0 descriptor?? [ 225.088746][ T5868] ax88179_178a 2-1:0.0: probe with driver ax88179_178a failed with error -22 [ 226.793630][ T7921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.802342][ T7921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.814435][ T7921] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 226.852896][ T29] audit: type=1400 audit(1733357857.490:423): avc: denied { setopt } for pid=7919 comm="syz.5.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.899552][ T5866] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 226.910346][ T5866] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 226.921168][ T5866] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 226.932247][ T5866] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 226.934838][ T47] usb 5-1: USB disconnect, device number 24 [ 227.062769][ T5866] usb 6-1: USB disconnect, device number 9 [ 227.285312][ T7960] capability: warning: `syz.3.532' uses deprecated v2 capabilities in a way that may be insecure [ 227.406758][ T29] audit: type=1400 audit(1733357858.090:424): avc: denied { create } for pid=7962 comm="syz.5.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 227.552608][ T5869] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 227.594449][ T29] audit: type=1400 audit(1733357858.280:425): avc: denied { write } for pid=7952 comm="syz.2.530" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 227.617147][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.704112][ T5869] usb 4-1: unable to get BOS descriptor or descriptor too short [ 227.715287][ T5869] usb 4-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice= 0.40 [ 227.724832][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.737292][ T5869] usb 4-1: Product: syz [ 227.741452][ T5869] usb 4-1: Manufacturer: syz [ 227.755900][ T5869] usb 4-1: SerialNumber: syz [ 227.823011][ T47] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 228.014348][ T7960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.031841][ T47] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.044703][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 228.060735][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 228.075623][ T7960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.161058][ T5866] usb 2-1: USB disconnect, device number 24 [ 228.269109][ T47] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.366001][ T47] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.375231][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.405888][ T5869] ldusb 4-1:3.0: Interrupt in endpoint not found [ 228.413291][ T47] usb 6-1: config 0 descriptor?? [ 228.430438][ T7970] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 228.499956][ T5869] usb 4-1: USB disconnect, device number 40 [ 228.629417][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 229.003188][ T5818] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 229.013932][ T47] plantronics 0003:047F:FFFF.0019: unknown main item tag 0xd [ 229.028289][ T47] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 229.042350][ T47] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 229.044221][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.087763][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 229.108276][ T9] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 229.119532][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.130180][ T9] usb 3-1: Product: syz [ 229.137376][ T9] usb 3-1: Manufacturer: syz [ 229.141976][ T9] usb 3-1: SerialNumber: syz [ 229.149820][ T9] usb 3-1: config 0 descriptor?? [ 229.185312][ T5818] usb 5-1: Using ep0 maxpacket: 8 [ 229.196025][ T5818] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 229.207637][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.215891][ T5818] usb 5-1: Product: syz [ 229.220220][ T5818] usb 5-1: Manufacturer: syz [ 229.225963][ T5818] usb 5-1: SerialNumber: syz [ 229.242776][ T7970] tmpfs: Unknown parameter 'usrquotaP' [ 229.253063][ T5818] usb 5-1: config 0 descriptor?? [ 229.264866][ T5818] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 229.398153][ T47] usb 6-1: USB disconnect, device number 10 [ 229.404399][ T5869] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 229.553148][ T29] audit: type=1400 audit(1733357860.230:426): avc: denied { read } for pid=7983 comm="syz.4.538" path="socket:[15180]" dev="sockfs" ino=15180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 229.693235][ T5869] usb 4-1: New USB device found, idVendor=17ef, idProduct=304b, bcdDevice=df.52 [ 229.703681][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.711828][ T5869] usb 4-1: Product: syz [ 229.716665][ T5869] usb 4-1: Manufacturer: syz [ 229.721427][ T5869] usb 4-1: SerialNumber: syz [ 229.858789][ T5869] usb 4-1: config 0 descriptor?? [ 229.909907][ T5869] ax88179_178a 4-1:0.0: probe with driver ax88179_178a failed with error -22 [ 230.512219][ T5818] gspca_vc032x: reg_r err -71 [ 230.517468][ T5818] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 230.795014][ T5818] usb 5-1: USB disconnect, device number 25 [ 231.443348][ T5868] usb 3-1: USB disconnect, device number 21 [ 231.543613][ T29] audit: type=1400 audit(1733357862.230:427): avc: denied { nlmsg_read } for pid=8017 comm="syz.4.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 231.913289][ T5868] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 232.096980][ T5868] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 232.107408][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.120101][ T5868] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 232.132626][ T5868] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 232.140672][ T5868] usb 3-1: Manufacturer: syz [ 232.166804][ T5868] usb 3-1: config 0 descriptor?? [ 232.242696][ T5868] rc_core: IR keymap rc-hauppauge not found [ 232.255086][ T25] usb 4-1: USB disconnect, device number 41 [ 232.256651][ T5868] Registered IR keymap rc-empty [ 232.296139][ T5868] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 232.338244][ T5868] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19 [ 232.340663][ T8047] kAFS: Can only specify source 'none' with -o dyn [ 232.515580][ T8020] FAULT_INJECTION: forcing a failure. [ 232.515580][ T8020] name failslab, interval 1, probability 0, space 0, times 0 [ 232.542829][ T8020] CPU: 1 UID: 0 PID: 8020 Comm: syz.2.548 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 232.553453][ T8020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 232.563520][ T8020] Call Trace: [ 232.566804][ T8020] [ 232.569741][ T8020] dump_stack_lvl+0x16c/0x1f0 [ 232.574439][ T8020] should_fail_ex+0x497/0x5b0 [ 232.579137][ T8020] ? fs_reclaim_acquire+0xae/0x150 [ 232.584277][ T8020] should_failslab+0xc2/0x120 [ 232.588971][ T8020] __kmalloc_noprof+0xcb/0x510 [ 232.593747][ T8020] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 232.599400][ T8020] tomoyo_realpath_from_path+0xb9/0x720 [ 232.604961][ T8020] ? tomoyo_path_number_perm+0x235/0x590 [ 232.610605][ T8020] ? tomoyo_path_number_perm+0x235/0x590 [ 232.616243][ T8020] tomoyo_path_number_perm+0x248/0x590 [ 232.621707][ T8020] ? tomoyo_path_number_perm+0x235/0x590 [ 232.627352][ T8020] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 232.633356][ T8020] ? __pfx_lock_release+0x10/0x10 [ 232.638376][ T8020] ? trace_lock_acquire+0x14e/0x1f0 [ 232.643575][ T8020] ? lock_acquire+0x2f/0xb0 [ 232.648067][ T8020] ? __fget_files+0x40/0x3a0 [ 232.652653][ T8020] ? __fget_files+0x206/0x3a0 [ 232.657329][ T8020] security_file_ioctl+0x9b/0x240 [ 232.662343][ T8020] __x64_sys_ioctl+0xb7/0x200 [ 232.667012][ T8020] do_syscall_64+0xcd/0x250 [ 232.671505][ T8020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.677384][ T8020] RIP: 0033:0x7f002317ff19 [ 232.681869][ T8020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.701465][ T8020] RSP: 002b:00007f0023ff7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.709864][ T8020] RAX: ffffffffffffffda RBX: 00007f0023345fa0 RCX: 00007f002317ff19 [ 232.717821][ T8020] RDX: 0000000020000300 RSI: 0000000040084504 RDI: 0000000000000005 [ 232.725775][ T8020] RBP: 00007f0023ff70a0 R08: 0000000000000000 R09: 0000000000000000 [ 232.733728][ T8020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.741682][ T8020] R13: 0000000000000000 R14: 00007f0023345fa0 R15: 00007ffd4aa75c08 [ 232.749644][ T8020] [ 232.807900][ T29] audit: type=1400 audit(1733357863.490:428): avc: denied { setopt } for pid=8046 comm="syz.3.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 232.838564][ T8020] ERROR: Out of memory at tomoyo_realpath_from_path. [ 232.893297][ T25] usb 3-1: USB disconnect, device number 22 [ 234.343243][ T8071] netlink: 'syz.1.559': attribute type 10 has an invalid length. [ 234.395070][ T8071] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 234.883718][ T8078] FAULT_INJECTION: forcing a failure. [ 234.883718][ T8078] name failslab, interval 1, probability 0, space 0, times 0 [ 235.202632][ T8078] CPU: 0 UID: 0 PID: 8078 Comm: syz.3.563 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 235.213257][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 235.223293][ T8078] Call Trace: [ 235.226562][ T8078] [ 235.229472][ T8078] dump_stack_lvl+0x16c/0x1f0 [ 235.234147][ T8078] should_fail_ex+0x497/0x5b0 [ 235.238811][ T8078] ? fs_reclaim_acquire+0xae/0x150 [ 235.243935][ T8078] should_failslab+0xc2/0x120 [ 235.248606][ T8078] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 235.253973][ T8078] ? __pfx_lock_release+0x10/0x10 [ 235.258980][ T8078] ? trace_lock_acquire+0x14e/0x1f0 [ 235.264159][ T8078] ? getname_flags.part.0+0x4c/0x550 [ 235.269423][ T8078] getname_flags.part.0+0x4c/0x550 [ 235.274522][ T8078] getname_flags+0x93/0xf0 [ 235.278924][ T8078] __getname_maybe_null+0x69/0x130 [ 235.284009][ T8078] vfs_fstatat+0x53/0xf0 [ 235.288235][ T8078] __do_sys_newfstatat+0xa2/0x130 [ 235.293235][ T8078] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 235.298845][ T8078] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 235.304809][ T8078] ? ksys_write+0x1ba/0x250 [ 235.309296][ T8078] ? __pfx_ksys_write+0x10/0x10 [ 235.314132][ T8078] do_syscall_64+0xcd/0x250 [ 235.318611][ T8078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.324496][ T8078] RIP: 0033:0x7f2f1537ff19 [ 235.328886][ T8078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.348471][ T8078] RSP: 002b:00007f2f161e0058 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 235.356863][ T8078] RAX: ffffffffffffffda RBX: 00007f2f15545fa0 RCX: 00007f2f1537ff19 [ 235.364808][ T8078] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 235.372754][ T8078] RBP: 00007f2f161e00a0 R08: 0000000000000000 R09: 0000000000000000 [ 235.380697][ T8078] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 235.388642][ T8078] R13: 0000000000000000 R14: 00007f2f15545fa0 R15: 00007fffc3ccdc48 [ 235.396593][ T8078] [ 236.693424][ T5818] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 236.791246][ T8099] 9pnet_fd: Insufficient options for proto=fd [ 237.045276][ T5818] usb 5-1: New USB device found, idVendor=17ef, idProduct=304b, bcdDevice=df.52 [ 237.054511][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.062884][ T5818] usb 5-1: Product: syz [ 237.067057][ T5818] usb 5-1: Manufacturer: syz [ 237.071654][ T5818] usb 5-1: SerialNumber: syz [ 237.086977][ T5818] usb 5-1: config 0 descriptor?? [ 237.095498][ T5818] ax88179_178a 5-1:0.0: probe with driver ax88179_178a failed with error -22 [ 237.524346][ T5868] usb 5-1: USB disconnect, device number 26 [ 237.762198][ T29] audit: type=1400 audit(1733357868.440:429): avc: denied { ioctl } for pid=8131 comm="syz.2.580" path="socket:[17424]" dev="sockfs" ino=17424 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 237.819685][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 239.165523][ T29] audit: type=1400 audit(1733357869.830:430): avc: denied { getopt } for pid=8150 comm="syz.1.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 239.483338][ T5818] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 239.510942][ T29] audit: type=1400 audit(1733357869.970:431): avc: denied { bind } for pid=8139 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 239.601717][ T8154] FAULT_INJECTION: forcing a failure. [ 239.601717][ T8154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.657722][ T8154] CPU: 0 UID: 0 PID: 8154 Comm: syz.1.585 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 239.668341][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 239.678392][ T8154] Call Trace: [ 239.681680][ T8154] [ 239.684611][ T8154] dump_stack_lvl+0x16c/0x1f0 [ 239.689304][ T8154] should_fail_ex+0x497/0x5b0 [ 239.694000][ T8154] _copy_from_user+0x2e/0xd0 [ 239.698595][ T8154] do_sock_getsockopt+0x5f6/0x800 [ 239.704058][ T8154] ? trace_lock_acquire+0x50/0x1f0 [ 239.709180][ T8154] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 239.714728][ T8154] ? lock_acquire+0x2f/0xb0 [ 239.719231][ T8154] ? __fget_files+0x40/0x3a0 [ 239.722557][ T5818] usb 6-1: device descriptor read/64, error -71 [ 239.723817][ T8154] ? __fget_files+0x206/0x3a0 [ 239.723845][ T8154] __sys_getsockopt+0x12f/0x260 [ 239.723870][ T8154] __x64_sys_getsockopt+0xbd/0x160 [ 239.744653][ T8154] ? do_syscall_64+0x91/0x250 [ 239.749343][ T8154] ? lockdep_hardirqs_on+0x7c/0x110 [ 239.754555][ T8154] do_syscall_64+0xcd/0x250 [ 239.759077][ T8154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.764982][ T8154] RIP: 0033:0x7f7c8af7ff19 [ 239.769399][ T8154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.789015][ T8154] RSP: 002b:00007f7c8be12058 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 239.797447][ T8154] RAX: ffffffffffffffda RBX: 00007f7c8b145fa0 RCX: 00007f7c8af7ff19 [ 239.805425][ T8154] RDX: 0000000000000480 RSI: 0000000000000000 RDI: 0000000000000004 [ 239.813392][ T8154] RBP: 00007f7c8be120a0 R08: 0000000000000000 R09: 0000000000000000 [ 239.821348][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.829301][ T8154] R13: 0000000000000000 R14: 00007f7c8b145fa0 R15: 00007ffd7fc5a178 [ 239.837264][ T8154] [ 239.982541][ T5818] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 240.057425][ T47] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 240.111186][ T29] audit: type=1400 audit(1733357870.790:432): avc: denied { setopt } for pid=8167 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 240.144818][ T5818] usb 6-1: device descriptor read/64, error -71 [ 240.213212][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 240.225898][ T47] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.245118][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 240.251924][ T47] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 240.262839][ T5818] usb usb6-port1: attempt power cycle [ 240.330670][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.430512][ T47] usb 5-1: config 0 descriptor?? [ 240.435998][ T5869] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 240.619668][ T5818] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 240.632538][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 240.658418][ T5869] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 240.677627][ T5818] usb 6-1: device descriptor read/8, error -71 [ 240.689491][ T5869] usb 3-1: config 0 has no interface number 0 [ 240.707810][ T5869] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 240.725732][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.743904][ T5869] usb 3-1: Product: syz [ 240.748332][ T5869] usb 3-1: Manufacturer: syz [ 240.758152][ T5869] usb 3-1: SerialNumber: syz [ 240.785314][ T5869] usb 3-1: config 0 descriptor?? [ 240.827111][ T5869] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 240.895695][ T47] usbhid 5-1:0.0: can't add hid device: -71 [ 240.922059][ T47] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 240.952674][ T5896] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 240.966576][ T47] usb 5-1: USB disconnect, device number 27 [ 241.005592][ T5869] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 241.066076][ T5869] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 241.143559][ T5896] usb 2-1: New USB device found, idVendor=17ef, idProduct=304b, bcdDevice=df.52 [ 241.182217][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.217546][ T8170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.232556][ T5868] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 241.252725][ T5896] usb 2-1: Product: syz [ 241.263414][ T8170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.271925][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 18 [ 241.292074][ T29] audit: type=1400 audit(1733357871.950:433): avc: denied { recv } for pid=8173 comm="syz.1.593" saddr=10.128.0.169 src=30006 daddr=10.128.0.53 dest=37040 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 241.327079][ T5896] usb 2-1: Manufacturer: syz [ 241.334991][ T5896] usb 2-1: SerialNumber: syz [ 241.348959][ T5896] usb 2-1: config 0 descriptor?? [ 241.363596][ T5896] ax88179_178a 2-1:0.0: probe with driver ax88179_178a failed with error -22 [ 241.462860][ T5868] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 241.483142][ T8170] netlink: 36 bytes leftover after parsing attributes in process `syz.2.592'. [ 241.494364][ T5868] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 241.506165][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 241.510267][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.522022][ T9] usb 3-1: USB disconnect, device number 23 [ 241.564893][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 241.578192][ T5868] usb 4-1: Product: syz [ 241.582383][ T5868] usb 4-1: Manufacturer: syz [ 241.600740][ T5868] usb 4-1: SerialNumber: syz [ 241.644388][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 241.656730][ T5868] usb 4-1: config 0 descriptor?? [ 241.669829][ T8187] : renamed from bond0 (while UP) [ 241.718245][ T9] quatech2 3-1:0.51: device disconnected [ 241.785231][ T5868] usb 2-1: USB disconnect, device number 25 [ 241.894723][ T8190] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 241.906549][ T8190] overlayfs: missing 'lowerdir' [ 242.152613][ T971] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 242.282628][ T971] usb 6-1: device descriptor read/64, error -71 [ 242.605514][ T971] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 243.247114][ T5868] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 243.464324][ T971] usb 6-1: device descriptor read/64, error -71 [ 243.608568][ T5818] usb 4-1: USB disconnect, device number 42 [ 243.639698][ T971] usb usb6-port1: attempt power cycle [ 243.775809][ T5868] usb 2-1: New USB device found, idVendor=17ef, idProduct=304b, bcdDevice=df.52 [ 243.784965][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.793283][ T5868] usb 2-1: Product: syz [ 243.797610][ T5868] usb 2-1: Manufacturer: syz [ 243.802204][ T5868] usb 2-1: SerialNumber: syz [ 243.809227][ T5868] usb 2-1: config 0 descriptor?? [ 243.816288][ T5868] ax88179_178a 2-1:0.0: probe with driver ax88179_178a failed with error -22 [ 244.144898][ T971] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 244.168295][ T5818] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 244.183936][ T971] usb 6-1: device descriptor read/8, error -71 [ 244.201796][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 244.897261][ T5818] usb 4-1: device descriptor read/64, error -71 [ 245.162826][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 245.252589][ T5818] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 245.288196][ T8239] vivid-003: disconnect [ 245.333045][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=304b, bcdDevice=df.52 [ 245.403071][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.418530][ T8241] vivid-003: reconnect [ 245.423736][ T9] usb 3-1: Product: syz [ 245.428013][ T9] usb 3-1: Manufacturer: syz [ 245.438032][ T9] usb 3-1: SerialNumber: syz [ 245.445547][ T9] usb 3-1: config 0 descriptor?? [ 245.452634][ T5818] usb 4-1: device descriptor read/64, error -71 [ 245.455494][ T9] ax88179_178a 3-1:0.0: probe with driver ax88179_178a failed with error -22 [ 245.516745][ T29] audit: type=1400 audit(1733357876.200:434): avc: denied { module_request } for pid=8243 comm="syz.4.614" kmod=6E65742D70662D31362D70726F746F2D31362D66616D696C792D03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 245.562879][ T5818] usb usb4-port1: attempt power cycle [ 245.605784][ T29] audit: type=1400 audit(1733357876.290:435): avc: denied { mounton } for pid=8243 comm="syz.4.614" path="/proc/435/ns/mnt" dev="proc" ino=16837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lnk_file permissive=1 [ 245.903050][ T5818] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 245.952780][ T5818] usb 4-1: device descriptor read/8, error -71 [ 246.193123][ T5818] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 246.567079][ T5896] usb 2-1: USB disconnect, device number 26 [ 246.581349][ T5818] usb 4-1: device descriptor read/8, error -71 [ 246.693205][ T5818] usb usb4-port1: unable to enumerate USB device [ 246.814832][ T29] audit: type=1400 audit(1733357877.500:436): avc: denied { write } for pid=8264 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 246.902611][ T47] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 247.032571][ T47] usb 6-1: device descriptor read/64, error -71 [ 247.112578][ T5869] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 247.182600][ T5896] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 247.262682][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 247.270537][ T5869] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 247.279967][ T47] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 247.287694][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.295867][ T5869] usb 2-1: Product: syz [ 247.300104][ T5869] usb 2-1: Manufacturer: syz [ 247.307098][ T5869] usb 2-1: SerialNumber: syz [ 247.319145][ T5869] usb 2-1: config 0 descriptor?? [ 247.335542][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.349174][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 247.360476][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 247.372048][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.393080][ T5896] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.402178][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.470855][ T47] usb 6-1: device descriptor read/64, error -71 [ 247.519777][ T5896] usb 4-1: config 0 descriptor?? [ 247.552419][ T8269] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 247.562016][ T5869] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 247.614739][ T47] usb usb6-port1: attempt power cycle [ 247.894952][ T9] usb 3-1: USB disconnect, device number 24 [ 247.969012][ T29] audit: type=1400 audit(1733357878.650:437): avc: denied { connect } for pid=8273 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 247.993028][ T47] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 248.026154][ T47] usb 6-1: device descriptor read/8, error -71 [ 248.052000][ T5896] plantronics 0003:047F:FFFF.001A: unknown main item tag 0xd [ 248.076857][ T5896] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 248.110996][ T5896] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 248.293080][ T47] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 248.335782][ T47] usb 6-1: device descriptor read/8, error -71 [ 248.453536][ T8269] tmpfs: Unknown parameter 'usrquotaX' [ 248.478203][ T47] usb usb6-port1: unable to enumerate USB device [ 248.500103][ T8280] ebt_among: dst integrity fail: 200 [ 248.564907][ T29] audit: type=1400 audit(1733357879.250:438): avc: denied { read } for pid=8283 comm="syz.2.629" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 248.590985][ T29] audit: type=1400 audit(1733357879.250:439): avc: denied { open } for pid=8283 comm="syz.2.629" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 248.614226][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.624548][ T47] usb 4-1: USB disconnect, device number 47 [ 248.678874][ T8284] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.685533][ T8284] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 248.699205][ T8284] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 248.772560][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 248.922610][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 248.928964][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 248.940589][ T9] usb 5-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 248.950973][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.960243][ T9] usb 5-1: Product: syz [ 248.965812][ T9] usb 5-1: Manufacturer: syz [ 248.970414][ T9] usb 5-1: SerialNumber: syz [ 248.976876][ T9] usb 5-1: config 0 descriptor?? [ 248.984657][ T9] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 249.000100][ T8268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.011400][ T8268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.037648][ T5869] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 249.054789][ T5869] usb 2-1: USB disconnect, device number 27 [ 249.199632][ T9] usb 5-1: USB disconnect, device number 28 [ 249.229228][ T8295] ALSA: seq fatal error: cannot create timer (-19) [ 249.402614][ T5869] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 249.627607][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 249.703760][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 249.755736][ T5869] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 249.797493][ T5869] usb 2-1: config 0 has no interface number 0 [ 249.830676][ T5869] usb 2-1: config 0 interface 119 has no altsetting 0 [ 249.889754][ T5869] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=64.3a [ 249.953935][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.996886][ T5869] usb 2-1: Product: syz [ 250.012761][ T5869] usb 2-1: Manufacturer: syz [ 250.022602][ T5869] usb 2-1: SerialNumber: syz [ 250.035547][ T5869] usb 2-1: config 0 descriptor?? [ 250.322807][ T47] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 250.497591][ T47] usb 5-1: New USB device found, idVendor=17ef, idProduct=304b, bcdDevice=df.52 [ 250.507732][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.546308][ T5869] usb 2-1: USB disconnect, device number 28 [ 250.582262][ T47] usb 5-1: Product: syz [ 250.600321][ T6057] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.609570][ T47] usb 5-1: Manufacturer: syz [ 250.636462][ T47] usb 5-1: SerialNumber: syz [ 250.654807][ T47] usb 5-1: config 0 descriptor?? [ 250.672390][ T47] ax88179_178a 5-1:0.0: probe with driver ax88179_178a failed with error -22 [ 250.702790][ T5817] Bluetooth: hci2: command 0x0c1a tx timeout [ 250.725840][ T6057] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.952658][ T971] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 251.049028][ T6057] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.155607][ T971] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 251.201533][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.241364][ T971] usb 4-1: config 0 descriptor?? [ 251.263349][ T971] cp210x 4-1:0.0: cp210x converter detected [ 251.300151][ T6057] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.428140][ T8331] nftables ruleset with unbound chain [ 251.548561][ T6057] bridge_slave_1: left allmulticast mode [ 251.577922][ T6057] bridge_slave_1: left promiscuous mode [ 251.603127][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.871177][ T6057] bridge_slave_0: left allmulticast mode [ 251.884930][ T6057] bridge_slave_0: left promiscuous mode [ 252.013327][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.420154][ T29] audit: type=1400 audit(1733357883.100:440): avc: denied { write } for pid=8351 comm="syz.1.646" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 252.641890][ T29] audit: type=1400 audit(1733357883.310:441): avc: denied { listen } for pid=8351 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 252.771946][ T29] audit: type=1400 audit(1733357883.320:442): avc: denied { ioctl } for pid=8351 comm="syz.1.646" path="socket:[17965]" dev="sockfs" ino=17965 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 252.805790][ T5817] Bluetooth: hci2: command 0x0c1a tx timeout [ 253.114040][ T5869] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 253.146718][ T6057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.158155][ T6057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.169210][ T6057] bond0 (unregistering): Released all slaves [ 253.183982][ T971] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 253.202690][ T971] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 253.217877][ T971] usb 4-1: cp210x converter now attached to ttyUSB0 [ 253.261840][ T971] usb 4-1: USB disconnect, device number 48 [ 253.267304][ T5869] usb 6-1: device descriptor read/64, error -71 [ 253.277537][ T971] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 253.369435][ T971] cp210x 4-1:0.0: device disconnected [ 253.376273][ T6577] usb 5-1: USB disconnect, device number 29 [ 253.480642][ T8373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8373 comm=syz.1.651 [ 253.700398][ T5869] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 253.714210][ T6057] hsr_slave_0: left promiscuous mode [ 253.730769][ T6057] hsr_slave_1: left promiscuous mode [ 253.744351][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.838830][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.849021][ T5869] usb 6-1: device descriptor read/64, error -71 [ 254.044404][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.068734][ T5869] usb usb6-port1: attempt power cycle [ 254.208116][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.256852][ T6577] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 254.298609][ T6057] veth1_macvtap: left promiscuous mode [ 254.306927][ T6057] veth0_macvtap: left promiscuous mode [ 254.318837][ T6057] veth1_vlan: left promiscuous mode [ 254.479734][ T6057] veth0_vlan: left promiscuous mode [ 254.495000][ T6577] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.506656][ T6577] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 254.512592][ T5869] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 254.520785][ T6577] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 254.595891][ T5869] usb 6-1: device descriptor read/8, error -71 [ 255.036732][ T5817] Bluetooth: hci2: command 0x0c1a tx timeout [ 255.212151][ T6577] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 255.225180][ T6577] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 255.234278][ T6577] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.254646][ T6577] usb 5-1: config 0 descriptor?? [ 255.267667][ T8371] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 255.303026][ T5869] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 255.336129][ T5869] usb 6-1: device descriptor read/8, error -71 [ 255.343878][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.350191][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.448697][ T5869] usb usb6-port1: unable to enumerate USB device [ 255.714468][ T8417] netlink: 16 bytes leftover after parsing attributes in process `syz.1.658'. [ 255.748077][ T8417] netlink: 228 bytes leftover after parsing attributes in process `syz.1.658'. [ 255.753279][ T6577] plantronics 0003:047F:FFFF.001B: unknown main item tag 0xd [ 255.767009][ T6577] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 255.802712][ T6577] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 256.101482][ T8426] tmpfs: Unknown parameter 'usrquotaD' [ 256.233824][ T5869] usb 5-1: USB disconnect, device number 30 [ 256.243060][ T29] audit: type=1400 audit(1733357886.920:443): avc: denied { ioctl } for pid=8428 comm="syz.5.662" path="socket:[18034]" dev="sockfs" ino=18034 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 256.267478][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.338168][ T29] audit: type=1400 audit(1733357887.020:444): avc: denied { create } for pid=8428 comm="syz.5.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 256.440662][ T6057] team0 (unregistering): Port device team_slave_1 removed [ 256.468553][ T29] audit: type=1400 audit(1733357887.150:445): avc: denied { bind } for pid=8428 comm="syz.5.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 256.524854][ T6057] team0 (unregistering): Port device team_slave_0 removed [ 257.586153][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.654'. [ 258.204417][ T29] audit: type=1400 audit(1733357888.890:446): avc: denied { create } for pid=8449 comm="syz.4.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 258.372829][ T29] audit: type=1400 audit(1733357888.910:447): avc: denied { bind } for pid=8449 comm="syz.4.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 258.531328][ T8469] bridge_slave_0: left allmulticast mode [ 258.599338][ T29] audit: type=1400 audit(1733357889.240:448): avc: denied { egress } for pid=47 comm="kworker/1:1" saddr=fe80::1b daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 258.880791][ T5869] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 258.906693][ T8469] bridge_slave_0: left promiscuous mode [ 258.920844][ T29] audit: type=1400 audit(1733357889.240:449): avc: denied { sendto } for pid=47 comm="kworker/1:1" saddr=fe80::1b daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 258.943969][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.972866][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.005301][ T8469] bridge_slave_1: left allmulticast mode [ 259.082001][ T8469] bridge_slave_1: left promiscuous mode [ 259.088026][ T29] audit: type=1400 audit(1733357889.770:450): avc: denied { name_bind } for pid=8483 comm="syz.1.672" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 259.113852][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.121557][ T5869] usb 4-1: device descriptor read/64, error -71 [ 259.132799][ T8469] bond0: (slave bond_slave_0): Releasing backup interface [ 259.180420][ T8476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8476 comm=syz.2.671 [ 259.237884][ T8469] bond0: (slave bond_slave_1): Releasing backup interface [ 259.321488][ T8469] team0: Port device team_slave_0 removed [ 259.374531][ T8469] team0: Port device team_slave_1 removed [ 259.382883][ T5869] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 259.412899][ T8469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.430632][ T8469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.437929][ T5896] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 259.471756][ T8469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.480524][ T8469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.502147][ T8469] bond0: (slave wlan1): Releasing backup interface [ 259.533421][ T5869] usb 4-1: device descriptor read/64, error -71 [ 259.576160][ T29] audit: type=1400 audit(1733357890.240:451): avc: denied { write } for pid=8495 comm="syz.4.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 259.595372][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.631854][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.646689][ T5869] usb usb4-port1: attempt power cycle [ 259.673873][ T6057] IPVS: stop unused estimator thread 0... [ 259.684979][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 259.727417][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 259.760127][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.779624][ T8504] 9pnet_virtio: no channels available for device 127.0.0.1 [ 259.789686][ T5896] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.799328][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.838912][ T5896] usb 6-1: config 0 descriptor?? [ 259.852611][ T8488] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 260.033214][ T5869] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 260.065761][ T5869] usb 4-1: device descriptor read/8, error -71 [ 260.432715][ T5869] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 260.470358][ T5869] usb 4-1: device descriptor read/8, error -71 [ 260.635355][ T5896] plantronics 0003:047F:FFFF.001C: unknown main item tag 0xd [ 260.662967][ T5869] usb usb4-port1: unable to enumerate USB device [ 260.697180][ T5896] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 260.770521][ T5896] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 260.794722][ T8488] tmpfs: Unknown parameter 'usrquotaX' [ 261.100297][ T6577] usb 6-1: USB disconnect, device number 27 [ 262.017201][ T8556] netlink: 60 bytes leftover after parsing attributes in process `syz.5.685'. [ 262.276366][ T29] audit: type=1400 audit(1733357892.950:452): avc: denied { sys_chroot } for pid=8571 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 262.348279][ T29] audit: type=1400 audit(1733357892.950:453): avc: denied { setgid } for pid=8571 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 262.506295][ T29] audit: type=1400 audit(1733357892.950:454): avc: denied { setrlimit } for pid=8571 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 262.883139][ T8595] tmpfs: Unknown parameter 'usrquotaX' [ 263.232932][ T6577] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 263.504062][ T6577] usb 5-1: Using ep0 maxpacket: 16 [ 263.688358][ T6577] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 263.704894][ T6577] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 263.722199][ T6577] usb 5-1: Product: syz [ 263.733803][ T6577] usb 5-1: Manufacturer: syz [ 263.752727][ T6577] usb 5-1: SerialNumber: syz [ 263.777410][ T6577] usb 5-1: config 0 descriptor?? [ 263.903574][ T8629] netlink: 60 bytes leftover after parsing attributes in process `syz.1.701'. [ 264.328748][ T8602] netlink: 'syz.4.698': attribute type 10 has an invalid length. [ 264.342615][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 264.369488][ T8602] team0: Port device wlan1 added [ 264.422614][ T6577] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 264.424443][ T5818] usb 5-1: USB disconnect, device number 31 [ 264.510816][ T29] audit: type=1400 audit(1733357895.190:455): avc: denied { create } for pid=8653 comm="syz.3.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 264.514080][ T9] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 264.551346][ T8654] netlink: 'syz.3.705': attribute type 33 has an invalid length. [ 264.556390][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.568500][ T9] usb 2-1: Product: syz [ 264.569525][ T8654] netlink: 152 bytes leftover after parsing attributes in process `syz.3.705'. [ 264.577983][ T9] usb 2-1: Manufacturer: syz [ 264.586071][ T29] audit: type=1400 audit(1733357895.230:456): avc: denied { write } for pid=8653 comm="syz.3.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 264.591396][ T9] usb 2-1: SerialNumber: syz [ 264.612944][ T8657] netdevsim0: mtu less than device minimum [ 264.613817][ T29] audit: type=1400 audit(1733357895.230:457): avc: denied { nlmsg_read } for pid=8653 comm="syz.3.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 264.647207][ T9] usb 2-1: config 0 descriptor?? [ 264.663453][ T6577] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 264.672780][ T6577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.689719][ T6577] usb 3-1: Product: syz [ 264.697540][ T9] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 029 [ 264.715340][ T6577] usb 3-1: Manufacturer: syz [ 264.720089][ T6577] usb 3-1: SerialNumber: syz [ 264.727979][ T6577] usb 3-1: config 0 descriptor?? [ 264.740200][ T6577] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 025 [ 264.942965][ T5896] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 265.012752][ T5868] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 265.104409][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 265.112085][ T5896] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.133034][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.134394][ T9] (null): failure reading functionality [ 265.165407][ T5896] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 265.175651][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.186347][ T5896] usb 6-1: Product: syz [ 265.190562][ T5896] usb 6-1: Manufacturer: syz [ 265.195767][ T5896] usb 6-1: SerialNumber: syz [ 265.202229][ T5896] usb 6-1: config 0 descriptor?? [ 265.209225][ T5896] rndis_host 6-1:0.0: skipping garbage [ 265.229995][ T5896] rndis_host 6-1:0.0: skipping garbage [ 265.240500][ T5896] usb 6-1: bad CDC descriptors [ 265.245867][ T5896] cdc_acm 6-1:0.0: skipping garbage [ 265.251365][ T5896] cdc_acm 6-1:0.0: skipping garbage [ 265.317462][ T6577] (null): failure reading functionality [ 265.338682][ T9] i2c i2c-1: failure reading functionality [ 265.345112][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 265.352191][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 265.362302][ T9] usb 2-1: USB disconnect, device number 29 [ 265.373119][ T5868] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 265.381271][ T5868] usb 4-1: config 0 has no interface number 0 [ 265.393439][ T5868] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 265.419685][ T5868] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 265.435409][ T5868] usb 4-1: config 0 interface 41 has no altsetting 0 [ 265.490867][ T5868] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 265.508435][ T6577] i2c i2c-2: failure reading functionality [ 265.517393][ T6577] i2c i2c-2: connected i2c-tiny-usb device [ 265.544160][ T971] usb 6-1: USB disconnect, device number 28 [ 265.555113][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.563348][ T5868] usb 4-1: Product: syz [ 266.144859][ T5868] usb 4-1: Manufacturer: syz [ 266.149501][ T5868] usb 4-1: SerialNumber: syz [ 266.160685][ T6577] usb 3-1: USB disconnect, device number 25 [ 266.168843][ T5868] usb 4-1: config 0 descriptor?? [ 266.175647][ T8667] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 266.191022][ T8667] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 266.456144][ T8667] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 266.488796][ T8667] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 266.971658][ T8667] netlink: 20 bytes leftover after parsing attributes in process `syz.3.707'. [ 266.992374][ T8667] netlink: 40 bytes leftover after parsing attributes in process `syz.3.707'. [ 267.207154][ T29] audit: type=1400 audit(1733357897.880:458): avc: denied { ioctl } for pid=8704 comm="syz.1.714" path="socket:[18516]" dev="sockfs" ino=18516 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 267.237904][ T8706] FAULT_INJECTION: forcing a failure. [ 267.237904][ T8706] name failslab, interval 1, probability 0, space 0, times 0 [ 267.250824][ T8706] CPU: 1 UID: 0 PID: 8706 Comm: syz.5.713 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 267.261414][ T8706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 267.271480][ T8706] Call Trace: [ 267.274755][ T8706] [ 267.277682][ T8706] dump_stack_lvl+0x16c/0x1f0 [ 267.282366][ T8706] should_fail_ex+0x497/0x5b0 [ 267.287060][ T8706] ? fs_reclaim_acquire+0xae/0x150 [ 267.292195][ T8706] should_failslab+0xc2/0x120 [ 267.296879][ T8706] __kmalloc_noprof+0xcb/0x510 [ 267.301656][ T8706] tomoyo_realpath_from_path+0xb9/0x720 [ 267.307236][ T8706] tomoyo_mount_acl+0x66d/0x880 [ 267.312116][ T8706] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 267.317503][ T8706] ? lockdep_hardirqs_on+0x7c/0x110 [ 267.322726][ T8706] ? trace_lock_acquire+0x14e/0x1f0 [ 267.327931][ T8706] ? tomoyo_mount_permission+0x149/0x420 [ 267.333566][ T8706] ? lock_acquire+0x2f/0xb0 [ 267.338067][ T8706] ? tomoyo_mount_permission+0x149/0x420 [ 267.343701][ T8706] tomoyo_mount_permission+0x16e/0x420 [ 267.349159][ T8706] ? tomoyo_mount_permission+0x149/0x420 [ 267.354792][ T8706] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 267.360784][ T8706] ? get_current_fs_domain+0x184/0x1f0 [ 267.366243][ T8706] security_sb_mount+0x9b/0x260 [ 267.371094][ T8706] path_mount+0x129/0x1f20 [ 267.375514][ T8706] ? kmem_cache_free+0x152/0x4c0 [ 267.380448][ T8706] ? __pfx_path_mount+0x10/0x10 [ 267.385303][ T8706] ? putname+0x13c/0x180 [ 267.389550][ T8706] __x64_sys_mount+0x294/0x320 [ 267.394320][ T8706] ? __pfx___x64_sys_mount+0x10/0x10 [ 267.399614][ T8706] do_syscall_64+0xcd/0x250 [ 267.404131][ T8706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.410025][ T8706] RIP: 0033:0x7fa66297ff19 [ 267.414439][ T8706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.434050][ T8706] RSP: 002b:00007fa6607b4058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 267.442546][ T8706] RAX: ffffffffffffffda RBX: 00007fa662b46160 RCX: 00007fa66297ff19 [ 267.450535][ T8706] RDX: 0000000020000040 RSI: 00000000200001c0 RDI: 0000000020000000 [ 267.458508][ T8706] RBP: 00007fa6607b40a0 R08: 0000000000000000 R09: 0000000000000000 [ 267.466492][ T8706] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 267.474464][ T8706] R13: 0000000000000000 R14: 00007fa662b46160 R15: 00007fff51b025e8 [ 267.482449][ T8706] [ 267.485796][ T8706] ERROR: Out of memory at tomoyo_realpath_from_path. [ 267.530813][ T8667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.562746][ T8667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.586378][ T5868] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 267.590461][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.714'. [ 267.604097][ T8705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.611555][ T8705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.667308][ T8705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.682807][ T5868] usb 4-1: USB disconnect, device number 53 [ 267.687769][ T8705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.690416][ T8713] tmpfs: Bad value for 'mpol' [ 267.741661][ T8713] syzkaller1: entered promiscuous mode [ 267.751055][ T8713] syzkaller1: entered allmulticast mode [ 267.907201][ T29] audit: type=1400 audit(1733357898.590:459): avc: denied { read } for pid=8717 comm="syz.5.718" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 267.957931][ T29] audit: type=1400 audit(1733357898.590:460): avc: denied { open } for pid=8717 comm="syz.5.718" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 267.994116][ T8722] FAULT_INJECTION: forcing a failure. [ 267.994116][ T8722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.026224][ T29] audit: type=1400 audit(1733357898.620:461): avc: denied { ioctl } for pid=8717 comm="syz.5.718" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 268.026275][ T8722] CPU: 0 UID: 0 PID: 8722 Comm: syz.1.720 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 268.061815][ T29] audit: type=1400 audit(1733357898.670:462): avc: denied { write } for pid=8721 comm="syz.1.720" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 268.062218][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 268.094834][ T8722] Call Trace: [ 268.098117][ T8722] [ 268.101050][ T8722] dump_stack_lvl+0x16c/0x1f0 [ 268.105761][ T8722] should_fail_ex+0x497/0x5b0 [ 268.110451][ T8722] _copy_from_user+0x2e/0xd0 [ 268.115042][ T8722] binder_ioctl+0x1f9a/0x6fc0 [ 268.119746][ T8722] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 268.125643][ T8722] ? __pfx_binder_ioctl+0x10/0x10 [ 268.130672][ T8722] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 268.135709][ T8722] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 268.142214][ T8722] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 268.148723][ T8722] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 268.155581][ T8722] ? __pfx_lock_release+0x10/0x10 [ 268.160614][ T8722] ? selinux_file_ioctl+0x180/0x270 [ 268.165813][ T8722] ? selinux_file_ioctl+0xb4/0x270 [ 268.170931][ T8722] ? __pfx_binder_ioctl+0x10/0x10 [ 268.175974][ T8722] __x64_sys_ioctl+0x190/0x200 [ 268.180756][ T8722] do_syscall_64+0xcd/0x250 [ 268.185263][ T8722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.191165][ T8722] RIP: 0033:0x7f7c8af7ff19 [ 268.195577][ T8722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.215185][ T8722] RSP: 002b:00007f7c8be12058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.223600][ T8722] RAX: ffffffffffffffda RBX: 00007f7c8b145fa0 RCX: 00007f7c8af7ff19 [ 268.231567][ T8722] RDX: 0000000020000080 RSI: 0000000040046210 RDI: 0000000000000003 [ 268.239531][ T8722] RBP: 00007f7c8be120a0 R08: 0000000000000000 R09: 0000000000000000 [ 268.247507][ T8722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.255489][ T8722] R13: 0000000000000000 R14: 00007f7c8b145fa0 R15: 00007ffd7fc5a178 [ 268.263477][ T8722] [ 268.422398][ T8726] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 268.594492][ T8722] binder: 8721:8722 ioctl 40046210 20000080 returned -14 [ 269.259477][ T29] audit: type=1400 audit(1733357899.940:463): avc: denied { getopt } for pid=8739 comm="syz.4.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 269.312801][ T29] audit: type=1400 audit(1733357899.970:464): avc: denied { ioctl } for pid=8739 comm="syz.4.727" path="socket:[18586]" dev="sockfs" ino=18586 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 269.744226][ T29] audit: type=1400 audit(1733357900.430:465): avc: denied { ioctl } for pid=8751 comm="syz.4.729" path="socket:[18638]" dev="sockfs" ino=18638 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 269.845175][ T8752] xt_addrtype: ipv6 does not support BROADCAST matching [ 270.429422][ T29] audit: type=1400 audit(1733357901.110:466): avc: denied { ioctl } for pid=8767 comm="syz.1.734" path="socket:[19662]" dev="sockfs" ino=19662 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 270.568747][ T8774] netlink: 60 bytes leftover after parsing attributes in process `syz.5.735'. [ 270.705369][ T29] audit: type=1400 audit(1733357901.390:467): avc: denied { read } for pid=8767 comm="syz.1.734" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 270.873278][ T8780] ubi0: detaching mtd0 [ 270.889601][ T8780] ubi0: mtd0 is detached [ 270.922315][ T29] audit: type=1400 audit(1733357901.390:468): avc: denied { open } for pid=8767 comm="syz.1.734" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 271.236592][ T29] audit: type=1400 audit(1733357901.390:469): avc: denied { mounton } for pid=8767 comm="syz.1.734" path="/155/file1/file0" dev="autofs" ino=18679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 271.349766][ T29] audit: type=1400 audit(1733357901.650:470): avc: denied { ioctl } for pid=8767 comm="syz.1.734" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 271.632683][ T5896] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 272.942554][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 272.950897][ T5896] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 273.022530][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.362577][ T5896] usb 2-1: Product: syz [ 273.373119][ T5896] usb 2-1: Manufacturer: syz [ 273.392603][ T5896] usb 2-1: SerialNumber: syz [ 273.424519][ T5896] usb 2-1: config 0 descriptor?? [ 273.848357][ T5896] usb 2-1: can't set config #0, error -71 [ 273.861520][ T5896] usb 2-1: USB disconnect, device number 30 [ 273.972839][ T29] audit: type=1400 audit(1733357904.640:471): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 275.965411][ T29] audit: type=1400 audit(1733357906.650:472): avc: denied { ioctl } for pid=8856 comm="syz.5.757" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 276.094708][ T8863] netlink: 'syz.3.759': attribute type 1 has an invalid length. [ 276.104777][ T29] audit: type=1400 audit(1733357906.790:473): avc: denied { map } for pid=8860 comm="syz.5.758" path="socket:[19846]" dev="sockfs" ino=19846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 276.163523][ T8864] FAULT_INJECTION: forcing a failure. [ 276.163523][ T8864] name failslab, interval 1, probability 0, space 0, times 0 [ 276.176374][ T8864] CPU: 0 UID: 0 PID: 8864 Comm: syz.5.758 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 276.176393][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.759'. [ 276.186955][ T8864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.186972][ T8864] Call Trace: [ 276.186979][ T8864] [ 276.186987][ T8864] dump_stack_lvl+0x16c/0x1f0 [ 276.187017][ T8864] should_fail_ex+0x497/0x5b0 [ 276.187042][ T8864] ? fs_reclaim_acquire+0xae/0x150 [ 276.187070][ T8864] should_failslab+0xc2/0x120 [ 276.231184][ T8864] __kmalloc_cache_noprof+0x68/0x410 [ 276.236532][ T8864] ? find_held_lock+0x2d/0x110 [ 276.241285][ T8864] rtnl_newlink+0x109/0x1c50 [ 276.245859][ T8864] ? hlock_class+0x4e/0x130 [ 276.250342][ T8864] ? __lock_acquire+0xcc5/0x3c40 [ 276.255267][ T8864] ? __pfx_rtnl_newlink+0x10/0x10 [ 276.260289][ T8864] ? __pfx___lock_acquire+0x10/0x10 [ 276.265468][ T8864] ? cred_has_capability.isra.0+0x192/0x2f0 [ 276.271338][ T8864] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 276.277553][ T8864] ? find_held_lock+0x2d/0x110 [ 276.282400][ T8864] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 276.287497][ T8864] ? __pfx_lock_release+0x10/0x10 [ 276.292501][ T8864] ? trace_lock_acquire+0x14e/0x1f0 [ 276.297677][ T8864] ? __pfx_rtnl_newlink+0x10/0x10 [ 276.302695][ T8864] rtnetlink_rcv_msg+0x95b/0xea0 [ 276.307612][ T8864] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 276.313082][ T8864] netlink_rcv_skb+0x16b/0x440 [ 276.317832][ T8864] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 276.323302][ T8864] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 276.328679][ T8864] ? rcu_is_watching+0x12/0xc0 [ 276.333447][ T8864] netlink_unicast+0x53c/0x7f0 [ 276.338209][ T8864] ? __pfx_netlink_unicast+0x10/0x10 [ 276.343480][ T8864] netlink_sendmsg+0x8b8/0xd70 [ 276.348234][ T8864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.353501][ T8864] ____sys_sendmsg+0xaaf/0xc90 [ 276.358243][ T8864] ? copy_msghdr_from_user+0x10b/0x160 [ 276.363680][ T8864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.368942][ T8864] ? __lock_acquire+0xcc5/0x3c40 [ 276.373862][ T8864] ___sys_sendmsg+0x135/0x1e0 [ 276.378525][ T8864] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.383701][ T8864] ? trace_lock_acquire+0x14e/0x1f0 [ 276.388884][ T8864] __sys_sendmmsg+0x201/0x420 [ 276.393547][ T8864] ? __pfx___sys_sendmmsg+0x10/0x10 [ 276.398722][ T8864] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.404683][ T8864] ? fput+0x67/0x440 [ 276.408556][ T8864] ? ksys_write+0x1ba/0x250 [ 276.413032][ T8864] ? __pfx_ksys_write+0x10/0x10 [ 276.417856][ T8864] __x64_sys_sendmmsg+0x9c/0x100 [ 276.422781][ T8864] ? lockdep_hardirqs_on+0x7c/0x110 [ 276.427975][ T8864] do_syscall_64+0xcd/0x250 [ 276.432486][ T8864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.438404][ T8864] RIP: 0033:0x7fa66297ff19 [ 276.442809][ T8864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.462433][ T8864] RSP: 002b:00007fa6607d5058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 276.470859][ T8864] RAX: ffffffffffffffda RBX: 00007fa662b46080 RCX: 00007fa66297ff19 [ 276.478819][ T8864] RDX: 0492492492492627 RSI: 00000000200000c0 RDI: 0000000000000006 [ 276.486784][ T8864] RBP: 00007fa6607d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 276.494753][ T8864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.502713][ T8864] R13: 0000000000000000 R14: 00007fa662b46080 R15: 00007fff51b025e8 [ 276.510682][ T8864] [ 276.803394][ T29] audit: type=1400 audit(1733357907.320:474): avc: denied { shutdown } for pid=8862 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 277.585166][ T8886] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 279.557030][ T8917] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.770'. [ 279.592657][ T8917] openvswitch: netlink: Unexpected mask (mask=400, allowed=10048) [ 281.270576][ T8957] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 282.594558][ T29] audit: type=1400 audit(1733357913.280:475): avc: denied { read write } for pid=8972 comm="syz.2.780" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 282.625818][ T5896] hid-generic 0000:0003:0000.001D: unknown main item tag 0x0 [ 282.645984][ T29] audit: type=1400 audit(1733357913.300:476): avc: denied { open } for pid=8972 comm="syz.2.780" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 282.690762][ T29] audit: type=1400 audit(1733357913.370:477): avc: denied { read } for pid=8972 comm="syz.2.780" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 282.724755][ T29] audit: type=1400 audit(1733357913.370:478): avc: denied { open } for pid=8972 comm="syz.2.780" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 282.733429][ T5896] hid-generic 0000:0003:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 282.780952][ T29] audit: type=1400 audit(1733357913.400:479): avc: denied { map } for pid=8972 comm="syz.2.780" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 282.829512][ T29] audit: type=1400 audit(1733357913.400:480): avc: denied { execute } for pid=8972 comm="syz.2.780" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 282.912616][ T6577] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 283.482672][ T6577] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 283.502931][ T6577] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.510955][ T6577] usb 4-1: Product: syz [ 283.515384][ T6577] usb 4-1: Manufacturer: syz [ 283.519977][ T6577] usb 4-1: SerialNumber: syz [ 283.536787][ T6577] usb 4-1: config 0 descriptor?? [ 283.557342][ T6577] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 054 [ 283.948765][ T6577] (null): failure reading functionality [ 284.255801][ T6577] i2c i2c-1: failure reading functionality [ 284.512021][ T6577] i2c i2c-1: connected i2c-tiny-usb device [ 284.535482][ T9060] gretap1: entered allmulticast mode [ 284.617126][ T9063] loop6: detected capacity change from 0 to 524287930 [ 284.684527][ T29] audit: type=1400 audit(1733357915.300:481): avc: denied { write } for pid=9059 comm="syz.4.787" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 284.777239][ T29] audit: type=1400 audit(1733357915.300:482): avc: denied { append } for pid=9059 comm="syz.4.787" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.111990][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.121243][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.132266][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.141487][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.161676][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.170877][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.231474][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.240677][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.354490][ T29] audit: type=1400 audit(1733357915.990:483): avc: denied { accept } for pid=9075 comm="syz.2.790" lport=54310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 285.446902][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.456107][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.468453][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.477652][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.487781][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.496959][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.505633][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.514802][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.524672][ T5819] ldm_validate_partition_table(): Disk read failed. [ 285.531915][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.532678][ T6577] usb 4-1: USB disconnect, device number 54 [ 285.541068][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.550519][ T29] audit: type=1400 audit(1733357916.030:484): avc: denied { accept } for pid=9075 comm="syz.2.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 285.560754][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.583341][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.619081][ T5819] Dev loop6: unable to read RDB block 0 [ 285.883981][ T5819] loop6: unable to read partition table [ 286.167876][ T5818] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 286.282753][ T5868] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 286.673812][ T5818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.688840][ T5818] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 286.698076][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.707242][ T5868] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 286.719696][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.722944][ T5818] usb 3-1: config 0 descriptor?? [ 286.740655][ T5818] pwc: Askey VC010 type 2 USB webcam detected. [ 286.746779][ T5868] usb 4-1: config 0 descriptor?? [ 287.175698][ T5818] pwc: recv_control_msg error -32 req 02 val 2b00 [ 287.191059][ T5868] gs_usb 4-1:0.0: Couldn't get device config: (err=-121) [ 287.200253][ T5818] pwc: recv_control_msg error -32 req 02 val 2700 [ 287.202485][ T5868] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 287.218424][ T5818] pwc: recv_control_msg error -32 req 02 val 2c00 [ 287.254797][ T5818] pwc: recv_control_msg error -32 req 04 val 1000 [ 287.271917][ T5818] pwc: recv_control_msg error -32 req 04 val 1300 [ 287.280837][ T5818] pwc: recv_control_msg error -32 req 04 val 1400 [ 288.892496][ T5190] ldm_validate_partition_table(): Disk read failed. [ 288.899697][ T5190] Dev loop6: unable to read RDB block 0 [ 288.910679][ T5190] loop6: unable to read partition table [ 289.293550][ T971] usb 4-1: USB disconnect, device number 55 [ 289.555673][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 289.565612][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 289.568150][ T5818] pwc: recv_control_msg error -71 req 02 val 2100 [ 289.582066][ T5818] pwc: recv_control_msg error -71 req 04 val 1500 [ 289.592963][ T5818] pwc: recv_control_msg error -71 req 02 val 2500 [ 289.593290][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 289.802578][ T5818] pwc: recv_control_msg error -71 req 02 val 2400 [ 289.811715][ T5818] pwc: recv_control_msg error -71 req 02 val 2600 [ 289.829769][ T5818] pwc: recv_control_msg error -71 req 02 val 2900 [ 289.874543][ T5818] pwc: recv_control_msg error -71 req 02 val 2800 [ 289.881550][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 289.901075][ T5828] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 289.911720][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 289.919049][ T5818] pwc: recv_control_msg error -71 req 04 val 1100 [ 289.927969][ T5818] pwc: recv_control_msg error -71 req 04 val 1200 [ 289.940942][ T5818] pwc: Registered as video103. [ 289.946665][ T5818] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25 [ 289.993513][ T5818] usb 3-1: USB disconnect, device number 26 [ 290.101596][ T9163] syzkaller1: entered allmulticast mode [ 290.212848][ T5868] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 290.372698][ T5818] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 290.443086][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 290.512064][ T5868] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 290.522264][ T5868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.550212][ T5868] usb 5-1: config 0 has no interface number 0 [ 290.572735][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 290.587572][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.601371][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.616561][ T5868] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.629667][ T5818] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 290.645448][ T5818] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 290.657360][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.684627][ T5818] usb 3-1: config 0 descriptor?? [ 290.743808][ T5868] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 290.772766][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.808562][ T5868] usb 5-1: config 0 descriptor?? [ 290.818531][ T9160] chnl_net:caif_netlink_parms(): no params data found [ 290.829307][ T5868] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 290.952211][ T9185] 9pnet_fd: p9_fd_create_tcp (9185): problem connecting socket to 127.0.0.1 [ 290.962145][ T29] audit: type=1400 audit(1733357921.630:485): avc: denied { mounton } for pid=9180 comm="syz.3.806" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 291.000951][ T9160] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.009620][ T9160] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.017361][ T9160] bridge_slave_0: entered allmulticast mode [ 291.039891][ T9160] bridge_slave_0: entered promiscuous mode [ 291.053214][ T9160] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.060522][ T9160] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.068468][ T9160] bridge_slave_1: entered allmulticast mode [ 291.076264][ T9160] bridge_slave_1: entered promiscuous mode [ 291.102618][ T29] audit: type=1400 audit(1733357921.780:486): avc: denied { write } for pid=9186 comm="syz.5.807" path="socket:[20336]" dev="sockfs" ino=20336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 291.107432][ T9160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.137804][ T9160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.170096][ T9160] team0: Port device team_slave_0 added [ 291.180169][ T9160] team0: Port device team_slave_1 added [ 291.216376][ T9160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.223878][ T9160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.250292][ T9160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.263534][ T9160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.274615][ T9160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.301167][ T9160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.330818][ T9160] hsr_slave_0: entered promiscuous mode [ 291.338533][ T9160] hsr_slave_1: entered promiscuous mode [ 291.346431][ T9160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.354270][ T9160] Cannot create hsr debugfs directory [ 291.370885][ T971] IPVS: starting estimator thread 0... [ 291.454393][ T9192] lo speed is unknown, defaulting to 1000 [ 291.462211][ T9192] lo speed is unknown, defaulting to 1000 [ 291.462732][ T9191] IPVS: using max 32 ests per chain, 76800 per kthread [ 291.487729][ T9192] lo speed is unknown, defaulting to 1000 [ 291.489102][ T9160] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 291.515130][ T9160] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 291.527950][ T9160] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 291.541264][ T9160] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 291.566703][ T9160] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.573865][ T9160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.615363][ T5896] lo speed is unknown, defaulting to 1000 [ 291.621794][ T9192] infiniband syz0: set down [ 291.626925][ T9192] infiniband syz0: added lo [ 291.627727][ T9160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.651069][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.694928][ T9192] RDS/IB: syz0: added [ 291.700405][ T9192] smc: adding ib device syz0 with port count 1 [ 291.702325][ T9160] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.721039][ T9192] smc: ib device syz0 port 1 has pnetid [ 291.730749][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.737889][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.758497][ T6577] lo speed is unknown, defaulting to 1000 [ 291.765413][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.772514][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.900060][ T9192] lo speed is unknown, defaulting to 1000 [ 292.040803][ T9192] lo speed is unknown, defaulting to 1000 [ 292.068230][ T5828] Bluetooth: hci4: command tx timeout [ 292.159949][ T9192] lo speed is unknown, defaulting to 1000 [ 292.251175][ T9192] lo speed is unknown, defaulting to 1000 [ 292.430914][ T9160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.474927][ T9192] lo speed is unknown, defaulting to 1000 [ 292.542177][ T5868] usb 5-1: USB disconnect, device number 32 [ 292.782881][ T9192] lo speed is unknown, defaulting to 1000 [ 292.970922][ T9160] veth0_vlan: entered promiscuous mode [ 292.987391][ T9160] veth1_vlan: entered promiscuous mode [ 293.177332][ T9211] fuse: Unknown parameter '0x0000000000000008000000000000000000080x0000000000000007' [ 293.436471][ T9160] veth0_macvtap: entered promiscuous mode [ 293.444457][ T9160] veth1_macvtap: entered promiscuous mode [ 293.455978][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.466920][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.476978][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.487513][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.512797][ T9160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.525039][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.535509][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.545960][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.556432][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.566340][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.577542][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.588113][ T9160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.638168][ T9160] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.647050][ T9160] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.655957][ T9160] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.664796][ T9160] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.851502][ T9036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.862613][ T9036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.904674][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.912653][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.983350][ T29] audit: type=1400 audit(1733357924.650:487): avc: denied { mounton } for pid=9160 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 294.025078][ T5818] usbhid 3-1:0.0: can't add hid device: -71 [ 294.037410][ T5818] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 294.083932][ T5818] usb 3-1: USB disconnect, device number 27 [ 294.142632][ T5828] Bluetooth: hci4: command tx timeout [ 294.262684][ T6577] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 294.434313][ T6577] usb 6-1: unable to get BOS descriptor or descriptor too short [ 294.443191][ T6577] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 294.456648][ T6577] usb 6-1: config 1 has no interface number 1 [ 294.475844][ T6577] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 294.550217][ T6577] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.558807][ T9246] FAULT_INJECTION: forcing a failure. [ 294.558807][ T9246] name failslab, interval 1, probability 0, space 0, times 0 [ 294.560153][ T6577] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.755697][ T9246] CPU: 1 UID: 0 PID: 9246 Comm: syz.3.823 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 294.766330][ T9246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 294.776555][ T9246] Call Trace: [ 294.779827][ T9246] [ 294.782756][ T9246] dump_stack_lvl+0x16c/0x1f0 [ 294.787438][ T9246] should_fail_ex+0x497/0x5b0 [ 294.792123][ T9246] ? fs_reclaim_acquire+0xae/0x150 [ 294.797245][ T9246] should_failslab+0xc2/0x120 [ 294.801933][ T9246] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 294.807738][ T9246] ? __alloc_skb+0x2b1/0x380 [ 294.812338][ T9246] __alloc_skb+0x2b1/0x380 [ 294.816760][ T9246] ? __pfx___alloc_skb+0x10/0x10 [ 294.821704][ T9246] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 294.827694][ T9246] netlink_alloc_large_skb+0x69/0x130 [ 294.833073][ T9246] netlink_sendmsg+0x689/0xd70 [ 294.837848][ T9246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.843147][ T9246] ____sys_sendmsg+0xaaf/0xc90 [ 294.847915][ T9246] ? copy_msghdr_from_user+0x10b/0x160 [ 294.853372][ T9246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.858667][ T9246] ___sys_sendmsg+0x135/0x1e0 [ 294.863340][ T9246] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.868545][ T9246] ? __pfx_lock_release+0x10/0x10 [ 294.873567][ T9246] ? trace_lock_acquire+0x14e/0x1f0 [ 294.878777][ T9246] ? __fget_files+0x206/0x3a0 [ 294.883457][ T9246] __sys_sendmsg+0x16e/0x220 [ 294.888043][ T9246] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.893168][ T9246] do_syscall_64+0xcd/0x250 [ 294.897677][ T9246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.903573][ T9246] RIP: 0033:0x7f2f1537ff19 [ 294.907982][ T9246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.916664][ T6577] usb 6-1: Product: syz [ 294.927579][ T9246] RSP: 002b:00007f2f161e0058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.927602][ T9246] RAX: ffffffffffffffda RBX: 00007f2f15545fa0 RCX: 00007f2f1537ff19 [ 294.927612][ T9246] RDX: 0000000000000010 RSI: 0000000020000100 RDI: 0000000000000003 [ 294.927624][ T9246] RBP: 00007f2f161e00a0 R08: 0000000000000000 R09: 0000000000000000 [ 294.927635][ T9246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.934751][ T6577] usb 6-1: Manufacturer: syz [ 294.940141][ T9246] R13: 0000000000000000 R14: 00007f2f15545fa0 R15: 00007fffc3ccdc48 [ 294.948314][ T6577] usb 6-1: SerialNumber: syz [ 294.956054][ T9246] [ 295.100100][ T9253] netlink: 60 bytes leftover after parsing attributes in process `syz.3.826'. [ 295.361477][ T29] audit: type=1400 audit(1733357925.940:488): avc: denied { map } for pid=9224 comm="syz.5.817" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 295.621368][ T29] audit: type=1400 audit(1733357926.290:489): avc: denied { ioctl } for pid=9259 comm="syz.2.829" path="socket:[20849]" dev="sockfs" ino=20849 ioctlcmd=0x54d0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 295.884389][ T29] audit: type=1400 audit(1733357926.330:490): avc: denied { ioctl } for pid=9259 comm="syz.2.829" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 296.263706][ T5828] Bluetooth: hci4: command tx timeout [ 296.614835][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 296.681985][ T9282] evm: overlay not supported [ 296.788453][ T9] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 296.798831][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.808045][ T9] usb 7-1: Product: syz [ 296.812262][ T9] usb 7-1: Manufacturer: syz [ 296.817343][ T9] usb 7-1: SerialNumber: syz [ 296.829591][ T9] usb 7-1: config 0 descriptor?? [ 296.837985][ T9] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 002 [ 297.299615][ T9] (null): failure reading functionality [ 297.305957][ T6577] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 297.331678][ T6577] usb 6-1: USB disconnect, device number 29 [ 297.434837][ T9294] netlink: 56 bytes leftover after parsing attributes in process `syz.2.837'. [ 297.500371][ T9] i2c i2c-1: failure reading functionality [ 297.527457][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 297.540688][ T9] usb 7-1: USB disconnect, device number 2 [ 297.597388][ T5866] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 297.684191][ T6577] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 297.898575][ T5866] usb 4-1: New USB device found, idVendor=17ef, idProduct=304b, bcdDevice=df.52 [ 297.940026][ T6577] usb 6-1: Using ep0 maxpacket: 16 [ 297.997303][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.006279][ T6577] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.017562][ T5866] usb 4-1: Product: syz [ 298.022838][ T6577] usb 6-1: config 0 interface 0 has no altsetting 0 [ 298.029528][ T5866] usb 4-1: Manufacturer: syz [ 298.034481][ T5866] usb 4-1: SerialNumber: syz [ 298.039301][ T6577] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 298.052679][ T5866] usb 4-1: config 0 descriptor?? [ 298.058924][ T6577] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.069225][ T5866] ax88179_178a 4-1:0.0: probe with driver ax88179_178a failed with error -22 [ 298.108723][ T6577] usb 6-1: config 0 descriptor?? [ 298.330132][ T5828] Bluetooth: hci4: command tx timeout [ 299.347516][ T6577] prodikeys 0003:041E:2801.001E: unknown main item tag 0x0 [ 299.355447][ T6577] prodikeys 0003:041E:2801.001E: unknown main item tag 0x0 [ 299.366133][ T6577] prodikeys 0003:041E:2801.001E: item fetching failed at offset 2/5 [ 299.391447][ T9324] netlink: 40 bytes leftover after parsing attributes in process `syz.6.847'. [ 299.413425][ T6577] prodikeys 0003:041E:2801.001E: hid parse failed [ 299.426564][ T6577] prodikeys 0003:041E:2801.001E: probe with driver prodikeys failed with error -22 [ 299.452574][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.590209][ T9330] FAULT_INJECTION: forcing a failure. [ 299.590209][ T9330] name failslab, interval 1, probability 0, space 0, times 0 [ 299.641162][ T5896] usb 6-1: USB disconnect, device number 30 [ 299.649278][ T9330] CPU: 0 UID: 0 PID: 9330 Comm: syz.6.849 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 299.659887][ T9330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 299.669952][ T9330] Call Trace: [ 299.673234][ T9330] [ 299.676160][ T9330] dump_stack_lvl+0x16c/0x1f0 [ 299.680846][ T9330] should_fail_ex+0x497/0x5b0 [ 299.685532][ T9330] ? fs_reclaim_acquire+0xae/0x150 [ 299.690652][ T9330] should_failslab+0xc2/0x120 [ 299.695346][ T9330] __kmalloc_noprof+0xcb/0x510 [ 299.700115][ T9330] ? d_absolute_path+0x137/0x1b0 [ 299.705078][ T9330] ? rcu_is_watching+0x12/0xc0 [ 299.709856][ T9330] tomoyo_encode2+0x100/0x3e0 [ 299.714546][ T9330] tomoyo_encode+0x29/0x50 [ 299.718978][ T9330] tomoyo_realpath_from_path+0x19d/0x720 [ 299.724643][ T9330] tomoyo_path_number_perm+0x248/0x590 [ 299.730110][ T9330] ? tomoyo_path_number_perm+0x235/0x590 [ 299.735754][ T9330] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 299.741758][ T9330] ? __pfx_lock_release+0x10/0x10 [ 299.746798][ T9330] ? trace_lock_acquire+0x14e/0x1f0 [ 299.751996][ T9330] ? lock_acquire+0x2f/0xb0 [ 299.756489][ T9330] ? __fget_files+0x40/0x3a0 [ 299.761068][ T9330] ? __fget_files+0x206/0x3a0 [ 299.765732][ T9330] security_file_ioctl+0x9b/0x240 [ 299.770756][ T9330] __x64_sys_ioctl+0xb7/0x200 [ 299.775423][ T9330] do_syscall_64+0xcd/0x250 [ 299.779917][ T9330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.785795][ T9330] RIP: 0033:0x7fe46f57ff19 [ 299.790193][ T9330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.809782][ T9330] RSP: 002b:00007fe4702be058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.818182][ T9330] RAX: ffffffffffffffda RBX: 00007fe46f745fa0 RCX: 00007fe46f57ff19 [ 299.826140][ T9330] RDX: 0000000020000280 RSI: 00000000c01064ac RDI: 0000000000000003 [ 299.834096][ T9330] RBP: 00007fe4702be0a0 R08: 0000000000000000 R09: 0000000000000000 [ 299.842048][ T9330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.850003][ T9330] R13: 0000000000000000 R14: 00007fe46f745fa0 R15: 00007ffef99c0118 [ 299.857966][ T9330] [ 299.870787][ T9330] ERROR: Out of memory at tomoyo_realpath_from_path. [ 300.227032][ T9337] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 300.248670][ T9337] netlink: 68 bytes leftover after parsing attributes in process `syz.6.850'. [ 300.339943][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.047085][ T5896] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 301.301995][ T5896] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 301.323147][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.372282][ T5896] usb 3-1: Product: syz [ 301.536740][ T5896] usb 3-1: Manufacturer: syz [ 301.630542][ T5896] usb 3-1: SerialNumber: syz [ 301.636343][ T5818] usb 4-1: USB disconnect, device number 56 [ 301.677025][ T5896] usb 3-1: config 0 descriptor?? [ 301.696230][ T5896] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 028 [ 302.329206][ T5896] (null): failure reading functionality [ 302.352930][ T6577] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 302.710128][ T5896] i2c i2c-1: failure reading functionality [ 302.716818][ T5896] i2c i2c-1: connected i2c-tiny-usb device [ 302.756754][ T5896] usb 3-1: USB disconnect, device number 28 [ 302.804420][ T6577] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.824622][ T6577] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 302.880299][ T6577] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.892637][ T6577] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.892662][ T6577] usb 7-1: Product: syz [ 302.892676][ T6577] usb 7-1: Manufacturer: syz [ 302.892691][ T6577] usb 7-1: SerialNumber: syz [ 302.949573][ T29] audit: type=1400 audit(1733358189.624:491): avc: denied { create } for pid=9377 comm="syz.4.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 303.001479][ T29] audit: type=1400 audit(1733358189.624:492): avc: denied { accept } for pid=9377 comm="syz.4.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 303.131418][ T9383] dlm: plock device version mismatch: kernel (1.2.0), user (1986356271.1970299695.1831805743) [ 303.150511][ T6577] usb 7-1: USB disconnect, device number 3 [ 303.166896][ T29] audit: type=1400 audit(1733358189.844:493): avc: denied { setopt } for pid=9377 comm="syz.4.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 303.762621][ T5866] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 303.946155][ T5866] usb 4-1: New USB device found, idVendor=17ef, idProduct=304b, bcdDevice=df.52 [ 303.960442][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.987688][ T5866] usb 4-1: Product: syz [ 304.002163][ T5866] usb 4-1: Manufacturer: syz [ 304.024369][ T9394] Process accounting resumed [ 304.029564][ T9394] kernel write not supported for file /asound/timers (pid: 9394 comm: syz.5.871) [ 304.054755][ T6577] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 304.071895][ T5866] usb 4-1: SerialNumber: syz [ 304.104631][ T5866] usb 4-1: config 0 descriptor?? [ 304.120030][ T5866] ax88179_178a 4-1:0.0: probe with driver ax88179_178a failed with error -22 [ 304.248724][ T6577] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.263243][ T6577] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 304.305760][ T6577] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.452260][ T6577] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.468870][ T9420] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 304.478932][ T6577] usb 7-1: Product: syz [ 304.486445][ T6577] usb 7-1: Manufacturer: syz [ 304.491417][ T6577] usb 7-1: SerialNumber: syz [ 305.606684][ T6577] usb 7-1: can't set config #1, error -71 [ 305.613792][ T6577] usb 7-1: USB disconnect, device number 4 [ 305.876286][ T9416] kernel write not supported for file /asound/timers (pid: 9416 comm: syz.5.874) [ 305.939411][ T29] audit: type=1400 audit(1733358192.394:494): avc: denied { listen } for pid=9417 comm="syz.2.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 307.243222][ T29] audit: type=1400 audit(1733358193.084:495): avc: denied { getopt } for pid=9433 comm="syz.6.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 307.347864][ T9436] kernel write not supported for file /asound/timers (pid: 9436 comm: syz.5.877) [ 307.768031][ T5896] usb 4-1: USB disconnect, device number 57 [ 307.887911][ T9446] FAULT_INJECTION: forcing a failure. [ 307.887911][ T9446] name failslab, interval 1, probability 0, space 0, times 0 [ 307.900826][ T9446] CPU: 0 UID: 0 PID: 9446 Comm: syz.6.884 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 307.911406][ T9446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 307.921439][ T9446] Call Trace: [ 307.924696][ T9446] [ 307.927608][ T9446] dump_stack_lvl+0x16c/0x1f0 [ 307.932264][ T9446] should_fail_ex+0x497/0x5b0 [ 307.936923][ T9446] should_failslab+0xc2/0x120 [ 307.941575][ T9446] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 307.946924][ T9446] ? skb_clone+0x190/0x3f0 [ 307.951405][ T9446] skb_clone+0x190/0x3f0 [ 307.955620][ T9446] netlink_deliver_tap+0xabd/0xd30 [ 307.960714][ T9446] netlink_unicast+0x5e1/0x7f0 [ 307.965454][ T9446] ? __pfx_netlink_unicast+0x10/0x10 [ 307.970724][ T9446] netlink_sendmsg+0x8b8/0xd70 [ 307.975464][ T9446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.980729][ T9446] ____sys_sendmsg+0xaaf/0xc90 [ 307.985468][ T9446] ? copy_msghdr_from_user+0x10b/0x160 [ 307.990898][ T9446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.996174][ T9446] ___sys_sendmsg+0x135/0x1e0 [ 308.000824][ T9446] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.005999][ T9446] ? __pfx_lock_release+0x10/0x10 [ 308.010998][ T9446] ? trace_lock_acquire+0x14e/0x1f0 [ 308.016177][ T9446] ? __fget_files+0x206/0x3a0 [ 308.020829][ T9446] __sys_sendmsg+0x16e/0x220 [ 308.025395][ T9446] ? __pfx___sys_sendmsg+0x10/0x10 [ 308.030484][ T9446] do_syscall_64+0xcd/0x250 [ 308.034964][ T9446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.040832][ T9446] RIP: 0033:0x7fe46f57ff19 [ 308.045224][ T9446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.064804][ T9446] RSP: 002b:00007fe4702be058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.073189][ T9446] RAX: ffffffffffffffda RBX: 00007fe46f745fa0 RCX: 00007fe46f57ff19 [ 308.081141][ T9446] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 308.089085][ T9446] RBP: 00007fe4702be0a0 R08: 0000000000000000 R09: 0000000000000000 [ 308.097029][ T9446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.104993][ T9446] R13: 0000000000000000 R14: 00007fe46f745fa0 R15: 00007ffef99c0118 [ 308.112944][ T9446] [ 308.251443][ T9443] kernel write not supported for file /asound/timers (pid: 9443 comm: syz.5.883) [ 308.428002][ T9454] kernel write not supported for file /asound/timers (pid: 9454 comm: syz.5.886) [ 308.512788][ T5869] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 308.530551][ T29] audit: type=1400 audit(1733358195.204:496): avc: denied { create } for pid=9457 comm="syz.3.888" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 308.652600][ T5869] usb 3-1: device descriptor read/64, error -71 [ 309.168642][ T47] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 309.224830][ T29] audit: type=1400 audit(1733358195.904:497): avc: denied { unlink } for pid=5813 comm="syz-executor" name="file0" dev="tmpfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 309.266355][ T9464] bond2: entered promiscuous mode [ 309.271737][ T9464] bond2: entered allmulticast mode [ 309.282044][ T9464] 8021q: adding VLAN 0 to HW filter on device bond2 [ 309.372543][ T5869] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 309.409049][ T9462] kernel write not supported for file /asound/timers (pid: 9462 comm: syz.5.889) [ 309.422660][ T47] usb 7-1: Using ep0 maxpacket: 16 [ 309.465152][ T47] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 309.476958][ T47] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 309.667651][ T5869] usb 3-1: device descriptor read/64, error -71 [ 309.696319][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 309.707536][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 309.718881][ T47] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.707102][ T5869] usb usb3-port1: attempt power cycle [ 310.737524][ T47] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 310.929418][ T9473] kernel write not supported for file /asound/timers (pid: 9473 comm: syz.5.893) [ 310.961465][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.969836][ T47] usb 7-1: Product: syz [ 310.974296][ T47] usb 7-1: Manufacturer: syz [ 310.978902][ T47] usb 7-1: SerialNumber: syz [ 310.984785][ T47] usb 7-1: config 0 descriptor?? [ 311.129376][ T29] audit: type=1400 audit(1733358197.804:498): avc: denied { bind } for pid=9483 comm="syz.2.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 311.196866][ T47] appledisplay 7-1:0.0: Error while getting initial brightness: -71 [ 311.213256][ T47] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -71 [ 311.297555][ T29] audit: type=1400 audit(1733358197.834:499): avc: denied { name_bind } for pid=9483 comm="syz.2.896" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 311.330165][ T47] usb 7-1: USB disconnect, device number 5 [ 311.438505][ T29] audit: type=1400 audit(1733358197.834:500): avc: denied { node_bind } for pid=9483 comm="syz.2.896" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 311.655177][ T9492] FAULT_INJECTION: forcing a failure. [ 311.655177][ T9492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.686381][ T9492] CPU: 0 UID: 0 PID: 9492 Comm: syz.2.898 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 311.696990][ T9492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 311.707038][ T9492] Call Trace: [ 311.710298][ T9492] [ 311.713293][ T9492] dump_stack_lvl+0x16c/0x1f0 [ 311.717950][ T9492] should_fail_ex+0x497/0x5b0 [ 311.722619][ T9492] _copy_to_user+0x32/0xd0 [ 311.727010][ T9492] put_user_ifreq+0xf4/0x140 [ 311.731577][ T9492] sock_do_ioctl+0x232/0x280 [ 311.736141][ T9492] ? __pfx_sock_do_ioctl+0x10/0x10 [ 311.741233][ T9492] ? irqentry_exit+0x11/0x90 [ 311.745828][ T9492] ? sock_ioctl+0x175/0x6c0 [ 311.750348][ T9492] sock_ioctl+0x228/0x6c0 [ 311.754698][ T9492] ? __pfx_sock_ioctl+0x10/0x10 [ 311.759572][ T9492] ? selinux_file_ioctl+0x180/0x270 [ 311.764788][ T9492] ? selinux_file_ioctl+0xb4/0x270 [ 311.769909][ T9492] ? __pfx_sock_ioctl+0x10/0x10 [ 311.774754][ T9492] __x64_sys_ioctl+0x190/0x200 [ 311.779507][ T9492] do_syscall_64+0xcd/0x250 [ 311.783999][ T9492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.789879][ T9492] RIP: 0033:0x7f002317ff19 [ 311.794276][ T9492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.813865][ T9492] RSP: 002b:00007f0023fb5058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.822264][ T9492] RAX: ffffffffffffffda RBX: 00007f0023346160 RCX: 00007f002317ff19 [ 311.830229][ T9492] RDX: 0000000020000300 RSI: 0000000000008933 RDI: 0000000000000009 [ 311.838181][ T9492] RBP: 00007f0023fb50a0 R08: 0000000000000000 R09: 0000000000000000 [ 311.846134][ T9492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.854085][ T9492] R13: 0000000000000000 R14: 00007f0023346160 R15: 00007ffd4aa75c08 [ 311.862046][ T9492] [ 312.174178][ T9480] kernel write not supported for file /asound/timers (pid: 9480 comm: syz.5.895) [ 312.272327][ T29] audit: type=1400 audit(1733358198.944:501): avc: denied { write } for pid=9497 comm="syz.6.899" name="file0" dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 312.395362][ T29] audit: type=1400 audit(1733358198.944:502): avc: denied { open } for pid=9497 comm="syz.6.899" path="/15/file0" dev="tmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 312.508807][ T9508] FAULT_INJECTION: forcing a failure. [ 312.508807][ T9508] name failslab, interval 1, probability 0, space 0, times 0 [ 312.516562][ T29] audit: type=1400 audit(1733358198.984:503): avc: denied { ioctl } for pid=9497 comm="syz.6.899" path="/15/file0" dev="tmpfs" ino=93 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 312.576503][ T9508] CPU: 1 UID: 0 PID: 9508 Comm: syz.6.903 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 312.587125][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 312.597193][ T9508] Call Trace: [ 312.600471][ T9508] [ 312.603402][ T9508] dump_stack_lvl+0x16c/0x1f0 [ 312.608091][ T9508] should_fail_ex+0x497/0x5b0 [ 312.612786][ T9508] should_failslab+0xc2/0x120 [ 312.617468][ T9508] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 312.622642][ T5866] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 312.622830][ T9508] ? skb_clone+0x190/0x3f0 [ 312.634859][ T9508] skb_clone+0x190/0x3f0 [ 312.639199][ T9508] netlink_deliver_tap+0xabd/0xd30 [ 312.644323][ T9508] netlink_unicast+0x5e1/0x7f0 [ 312.649096][ T9508] ? __pfx_netlink_unicast+0x10/0x10 [ 312.654393][ T9508] netlink_sendmsg+0x8b8/0xd70 [ 312.659255][ T9508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.664554][ T9508] ____sys_sendmsg+0xaaf/0xc90 [ 312.669322][ T9508] ? copy_msghdr_from_user+0x10b/0x160 [ 312.674799][ T9508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.680105][ T9508] ___sys_sendmsg+0x135/0x1e0 [ 312.684785][ T9508] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.689990][ T9508] ? __pfx_lock_release+0x10/0x10 [ 312.695015][ T9508] ? trace_lock_acquire+0x14e/0x1f0 [ 312.700211][ T9508] ? __fget_files+0x206/0x3a0 [ 312.704878][ T9508] __sys_sendmsg+0x16e/0x220 [ 312.709472][ T9508] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.714597][ T9508] do_syscall_64+0xcd/0x250 [ 312.719090][ T9508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.724972][ T9508] RIP: 0033:0x7fe46f57ff19 [ 312.729370][ T9508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.748976][ T9508] RSP: 002b:00007fe46d3f6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.757375][ T9508] RAX: ffffffffffffffda RBX: 00007fe46f746080 RCX: 00007fe46f57ff19 [ 312.765416][ T9508] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000008 [ 312.773385][ T9508] RBP: 00007fe46d3f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 312.781352][ T9508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.789317][ T9508] R13: 0000000000000000 R14: 00007fe46f746080 R15: 00007ffef99c0118 [ 312.797286][ T9508] [ 312.882540][ T5866] usb 6-1: Using ep0 maxpacket: 16 [ 312.890967][ T5866] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.908491][ T5866] usb 6-1: config 0 interface 0 has no altsetting 0 [ 312.916757][ T5866] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 312.926128][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.936589][ T5866] usb 6-1: config 0 descriptor?? [ 313.349888][ T5866] prodikeys 0003:041E:2801.001F: unknown main item tag 0x0 [ 313.383352][ T5866] prodikeys 0003:041E:2801.001F: unknown main item tag 0x0 [ 313.390619][ T5866] prodikeys 0003:041E:2801.001F: unknown main item tag 0x0 [ 313.410337][ T9517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.907'. [ 313.442768][ T5866] prodikeys 0003:041E:2801.001F: unknown main item tag 0x0 [ 313.450052][ T5866] prodikeys 0003:041E:2801.001F: unknown main item tag 0x0 [ 313.482956][ T5866] prodikeys 0003:041E:2801.001F: hidraw0: USB HID v0.08 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input0 [ 313.664211][ T9517] vlan2: entered promiscuous mode [ 313.747732][ T9517] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 314.050614][ T5866] usb 6-1: USB disconnect, device number 31 [ 314.246155][ T29] audit: type=1400 audit(1733358200.924:504): avc: denied { remount } for pid=9524 comm="syz.2.910" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 314.259250][ T9502] kernel write not supported for file /asound/timers (pid: 9502 comm: syz.5.901) [ 314.279040][ T9525] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 314.301120][ T29] audit: type=1400 audit(1733358200.974:505): avc: denied { getopt } for pid=9526 comm="syz.4.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 314.427058][ T5868] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 314.479488][ T9] hid-generic 0000:0003:0000.0020: unknown main item tag 0x0 [ 314.489662][ T9] hid-generic 0000:0003:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz1 [ 314.517939][ T29] audit: type=1400 audit(1733358201.184:506): avc: denied { setattr } for pid=9534 comm="syz.6.915" name="ttyprintk" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 314.672748][ T29] audit: type=1400 audit(1733358201.354:507): avc: denied { getopt } for pid=9539 comm="syz.4.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 314.777555][ C1] ================================================================== [ 314.785644][ C1] BUG: KASAN: slab-out-of-bounds in selinux_ip_output+0x1e0/0x1f0 [ 314.793457][ C1] Read of size 8 at addr ffff8880353a25f8 by task kworker/u8:14/9036 [ 314.801511][ C1] [ 314.803849][ C1] CPU: 1 UID: 0 PID: 9036 Comm: kworker/u8:14 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 314.814781][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 314.824921][ C1] Workqueue: krdsd rds_tcp_accept_worker [ 314.830583][ C1] Call Trace: [ 314.833854][ C1] [ 314.836691][ C1] dump_stack_lvl+0x116/0x1f0 [ 314.841380][ C1] print_report+0xc3/0x620 [ 314.845799][ C1] ? __virt_addr_valid+0x5e/0x590 [ 314.850825][ C1] ? __phys_addr+0xc6/0x150 [ 314.855338][ C1] kasan_report+0xd9/0x110 [ 314.859761][ C1] ? selinux_ip_output+0x1e0/0x1f0 [ 314.864877][ C1] ? selinux_ip_output+0x1e0/0x1f0 [ 314.870000][ C1] selinux_ip_output+0x1e0/0x1f0 [ 314.874948][ C1] ? __pfx_selinux_ip_output+0x10/0x10 [ 314.880503][ C1] nf_hook_slow+0xbb/0x200 [ 314.884930][ C1] nf_hook+0x386/0x6d0 [ 314.889000][ C1] ? __pfx_dst_output+0x10/0x10 [ 314.893851][ C1] ? __pfx_nf_hook+0x10/0x10 [ 314.898442][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 314.904253][ C1] ? __pfx_ip_reply_glue_bits+0x10/0x10 [ 314.909799][ C1] ? __pfx_dst_output+0x10/0x10 [ 314.914649][ C1] ? __ip_make_skb+0x1150/0x1d00 [ 314.919586][ C1] ? do_csum+0x26f/0x2d0 [ 314.923831][ C1] __ip_local_out+0x339/0x640 [ 314.928505][ C1] ? __pfx_dst_output+0x10/0x10 [ 314.929380][ T6577] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 314.933348][ C1] ip_push_pending_frames+0xa0/0x5b0 [ 314.933378][ C1] ip_send_unicast_reply+0xd0e/0x1650 [ 314.933405][ C1] ? __pfx_ip_send_unicast_reply+0x10/0x10 [ 314.940961][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 314.946183][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 314.946213][ C1] ? tcp_v4_send_ack+0x627/0x13f0 [ 314.972726][ C1] tcp_v4_send_ack+0x976/0x13f0 [ 314.974434][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.977572][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 314.977603][ C1] ? __pfx_tcp_v4_send_ack+0x10/0x10 [ 314.992130][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.993576][ C1] ? find_held_lock+0x2d/0x110 [ 314.993609][ C1] ? tcp_v4_rcv+0x38a6/0x4380 [ 314.993627][ C1] ? mark_held_locks+0x9f/0xe0 [ 314.993646][ C1] ? tcp_v4_rcv+0x2f8e/0x4380 [ 314.993660][ C1] tcp_v4_rcv+0x2f8e/0x4380 [ 314.993683][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 315.036735][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.041487][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 315.046331][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 315.051687][ C1] ip_local_deliver_finish+0x316/0x570 [ 315.057134][ C1] ip_local_deliver+0x18e/0x1f0 [ 315.062055][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 315.067422][ C1] ip_rcv+0x2c3/0x5d0 [ 315.071386][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 315.075869][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 315.081758][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 315.088158][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.092935][ C1] ? process_backlog+0x3f1/0x15f0 [ 315.097945][ C1] ? process_backlog+0x3f1/0x15f0 [ 315.102972][ C1] __netif_receive_skb+0x1d/0x160 [ 315.108175][ C1] process_backlog+0x443/0x15f0 [ 315.113029][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 315.118502][ C1] net_rx_action+0xa94/0x1010 [ 315.123181][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 315.128276][ C1] ? __pfx_mark_lock+0x10/0x10 [ 315.133109][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 315.138308][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 315.143514][ C1] ? sched_clock+0x38/0x60 [ 315.147924][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 315.152765][ C1] ? mark_held_locks+0x9f/0xe0 [ 315.157532][ C1] handle_softirqs+0x213/0x8f0 [ 315.162333][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 315.167650][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 315.172929][ C1] ? __dev_queue_xmit+0x89b/0x43e0 [ 315.178117][ C1] do_softirq+0xb2/0xf0 [ 315.182278][ C1] [ 315.185191][ C1] [ 315.188115][ C1] __local_bh_enable_ip+0x100/0x120 [ 315.193301][ C1] ? __dev_queue_xmit+0x89b/0x43e0 [ 315.198399][ C1] __dev_queue_xmit+0x8b0/0x43e0 [ 315.203326][ C1] ? hlock_class+0x4e/0x130 [ 315.207841][ C1] ? __lock_acquire+0x15a9/0x3c40 [ 315.212851][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 315.218212][ C1] ? hlock_class+0x4e/0x130 [ 315.222709][ C1] ? mark_lock+0xb5/0xc60 [ 315.227020][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 315.232203][ C1] ? __pfx_mark_lock+0x10/0x10 [ 315.236977][ C1] ? find_held_lock+0x2d/0x110 [ 315.241744][ C1] ? __ip_finish_output+0x49e/0x950 [ 315.246931][ C1] ? __pfx_lock_release+0x10/0x10 [ 315.251965][ C1] ? mark_held_locks+0x9f/0xe0 [ 315.256727][ C1] ip_finish_output2+0xc6c/0x2150 [ 315.261740][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 315.267207][ C1] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 315.272052][ C1] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 315.277237][ C1] __ip_finish_output+0x49e/0x950 [ 315.282245][ C1] ip_finish_output+0x35/0x380 [ 315.287117][ C1] ip_output+0x13b/0x2a0 [ 315.291351][ C1] ? __pfx_ip_output+0x10/0x10 [ 315.296102][ C1] ip_local_out+0x33e/0x4a0 [ 315.300609][ C1] __ip_queue_xmit+0x777/0x1970 [ 315.305457][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 315.310556][ C1] __tcp_transmit_skb+0x2b39/0x3df0 [ 315.315741][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 315.321273][ C1] ? irqentry_exit+0x3b/0x90 [ 315.325855][ C1] tcp_write_xmit+0x12b1/0x8560 [ 315.330691][ C1] ? tcp_current_mss+0x27e/0x500 [ 315.335627][ C1] __tcp_push_pending_frames+0xaf/0x390 [ 315.341344][ C1] tcp_send_fin+0x154/0xc70 [ 315.345847][ C1] ? __pfx_tcp_send_fin+0x10/0x10 [ 315.350858][ C1] ? __pfx_sock_rfree+0x10/0x10 [ 315.355785][ C1] __tcp_close+0x96b/0xff0 [ 315.360191][ C1] tcp_close+0x28/0x120 [ 315.364327][ C1] inet_release+0x13c/0x280 [ 315.368835][ C1] inet6_release+0x4f/0x70 [ 315.373249][ C1] sock_release+0x8e/0x1d0 [ 315.377767][ C1] rds_tcp_accept_one+0x357/0xd00 [ 315.382785][ C1] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 315.388321][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.393078][ C1] ? process_one_work+0x921/0x1ba0 [ 315.398172][ C1] rds_tcp_accept_worker+0x59/0x80 [ 315.403269][ C1] process_one_work+0x9c5/0x1ba0 [ 315.408191][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 315.413843][ C1] ? __pfx_process_one_work+0x10/0x10 [ 315.419214][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.423970][ C1] ? assign_work+0x1a0/0x250 [ 315.428565][ C1] worker_thread+0x6c8/0xf00 [ 315.433141][ C1] ? __pfx_worker_thread+0x10/0x10 [ 315.438265][ C1] kthread+0x2c1/0x3a0 [ 315.442339][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 315.447540][ C1] ? __pfx_kthread+0x10/0x10 [ 315.452131][ C1] ret_from_fork+0x45/0x80 [ 315.456559][ C1] ? __pfx_kthread+0x10/0x10 [ 315.461171][ C1] ret_from_fork_asm+0x1a/0x30 [ 315.465965][ C1] [ 315.468995][ C1] [ 315.471299][ C1] The buggy address belongs to the object at ffff8880353a2580 [ 315.471299][ C1] which belongs to the cache tw_sock_TCP of size 288 [ 315.485353][ C1] The buggy address is located 120 bytes inside of [ 315.485353][ C1] allocated 288-byte region [ffff8880353a2580, ffff8880353a26a0) [ 315.499501][ C1] [ 315.501809][ C1] The buggy address belongs to the physical page: [ 315.508193][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880353a2000 pfn:0x353a2 [ 315.518264][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 315.526754][ C1] memcg:ffff88807aace401 [ 315.530973][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 315.538497][ C1] page_type: f5(slab) [ 315.542465][ C1] raw: 00fff00000000040 ffff88801bf4b280 dead000000000122 0000000000000000 [ 315.551044][ C1] raw: ffff8880353a2000 0000000080170016 00000001f5000000 ffff88807aace401 [ 315.559642][ C1] head: 00fff00000000040 ffff88801bf4b280 dead000000000122 0000000000000000 [ 315.568319][ C1] head: ffff8880353a2000 0000000080170016 00000001f5000000 ffff88807aace401 [ 315.577253][ C1] head: 00fff00000000001 ffffea0000d4e881 ffffffffffffffff 0000000000000000 [ 315.585940][ C1] head: ffff888000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 315.594598][ C1] page dumped because: kasan: bad access detected [ 315.600985][ C1] page_owner tracks the page as allocated [ 315.606690][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6850, tgid 6846 (syz.4.233), ts 145721391263, free_ts 145716384569 [ 315.625858][ C1] post_alloc_hook+0x2d1/0x350 [ 315.630625][ C1] get_page_from_freelist+0xfce/0x2f80 [ 315.636065][ C1] __alloc_pages_noprof+0x223/0x25b0 [ 315.641337][ C1] alloc_pages_mpol_noprof+0x2c9/0x610 [ 315.646780][ C1] new_slab+0x2c9/0x410 [ 315.650914][ C1] ___slab_alloc+0xdac/0x1870 [ 315.655583][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 315.660941][ C1] kmem_cache_alloc_noprof+0xfa/0x3d0 [ 315.666297][ C1] inet_twsk_alloc+0x120/0x970 [ 315.671046][ C1] tcp_time_wait+0x5f/0xe10 [ 315.675572][ C1] tcp_rcv_state_process+0x1fda/0x4c40 [ 315.681020][ C1] tcp_v4_do_rcv+0x1ad/0xa90 [ 315.685622][ C1] __release_sock+0x31b/0x400 [ 315.690281][ C1] release_sock+0x5a/0x220 [ 315.694690][ C1] mptcp_check_send_data_fin+0x24a/0x450 [ 315.700305][ C1] __mptcp_close+0x8cb/0xb90 [ 315.704874][ C1] page last free pid 6850 tgid 6846 stack trace: [ 315.711182][ C1] free_unref_page+0x661/0x1080 [ 315.716046][ C1] __mmdrop+0xd5/0x460 [ 315.720110][ C1] __mmput+0x404/0x4c0 [ 315.724159][ C1] mmput+0x62/0x70 [ 315.727860][ C1] do_exit+0x9bf/0x2d70 [ 315.732003][ C1] do_group_exit+0xd3/0x2a0 [ 315.736489][ C1] get_signal+0x24ed/0x26c0 [ 315.740972][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 315.746501][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 315.752120][ C1] do_syscall_64+0xda/0x250 [ 315.756623][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.762502][ C1] [ 315.764801][ C1] Memory state around the buggy address: [ 315.770417][ C1] ffff8880353a2480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 315.778455][ C1] ffff8880353a2500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 315.786657][ C1] >ffff8880353a2580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 315.794707][ C1] ^ [ 315.802656][ C1] ffff8880353a2600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 315.810692][ C1] ffff8880353a2680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 315.818727][ C1] ================================================================== [ 315.826862][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 315.834060][ C1] CPU: 1 UID: 0 PID: 9036 Comm: kworker/u8:14 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 315.845086][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 315.855147][ C1] Workqueue: krdsd rds_tcp_accept_worker [ 315.860804][ C1] Call Trace: [ 315.864081][ C1] [ 315.866918][ C1] dump_stack_lvl+0x3d/0x1f0 [ 315.871520][ C1] panic+0x71d/0x800 [ 315.875425][ C1] ? mark_held_locks+0x9f/0xe0 [ 315.880186][ C1] ? __pfx_panic+0x10/0x10 [ 315.884593][ C1] ? irqentry_exit+0x3b/0x90 [ 315.889168][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 315.894354][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 315.899449][ C1] check_panic_on_warn+0xab/0xb0 [ 315.904364][ C1] end_report+0x117/0x180 [ 315.908682][ C1] kasan_report+0xe9/0x110 [ 315.913344][ C1] ? selinux_ip_output+0x1e0/0x1f0 [ 315.918440][ C1] ? selinux_ip_output+0x1e0/0x1f0 [ 315.923537][ C1] selinux_ip_output+0x1e0/0x1f0 [ 315.928718][ C1] ? __pfx_selinux_ip_output+0x10/0x10 [ 315.934161][ C1] nf_hook_slow+0xbb/0x200 [ 315.938562][ C1] nf_hook+0x386/0x6d0 [ 315.942642][ C1] ? __pfx_dst_output+0x10/0x10 [ 315.947476][ C1] ? __pfx_nf_hook+0x10/0x10 [ 315.952054][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 315.957851][ C1] ? __pfx_ip_reply_glue_bits+0x10/0x10 [ 315.963382][ C1] ? __pfx_dst_output+0x10/0x10 [ 315.968314][ C1] ? __ip_make_skb+0x1150/0x1d00 [ 315.973239][ C1] ? do_csum+0x26f/0x2d0 [ 315.977493][ C1] __ip_local_out+0x339/0x640 [ 315.982152][ C1] ? __pfx_dst_output+0x10/0x10 [ 315.986987][ C1] ip_push_pending_frames+0xa0/0x5b0 [ 315.992257][ C1] ip_send_unicast_reply+0xd0e/0x1650 [ 315.997620][ C1] ? __pfx_ip_send_unicast_reply+0x10/0x10 [ 316.003429][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 316.008619][ C1] ? tcp_v4_send_ack+0x627/0x13f0 [ 316.013651][ C1] tcp_v4_send_ack+0x976/0x13f0 [ 316.018494][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 316.023684][ C1] ? __pfx_tcp_v4_send_ack+0x10/0x10 [ 316.028954][ C1] ? find_held_lock+0x2d/0x110 [ 316.033707][ C1] ? tcp_v4_rcv+0x38a6/0x4380 [ 316.038394][ C1] ? mark_held_locks+0x9f/0xe0 [ 316.043143][ C1] ? tcp_v4_rcv+0x2f8e/0x4380 [ 316.047796][ C1] tcp_v4_rcv+0x2f8e/0x4380 [ 316.052285][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 316.057126][ C1] ? rcu_is_watching+0x12/0xc0 [ 316.061875][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 316.066714][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 316.072068][ C1] ip_local_deliver_finish+0x316/0x570 [ 316.077510][ C1] ip_local_deliver+0x18e/0x1f0 [ 316.082345][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 316.087698][ C1] ip_rcv+0x2c3/0x5d0 [ 316.091663][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 316.096147][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 316.102035][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 316.108448][ C1] ? rcu_is_watching+0x12/0xc0 [ 316.113197][ C1] ? process_backlog+0x3f1/0x15f0 [ 316.118209][ C1] ? process_backlog+0x3f1/0x15f0 [ 316.123220][ C1] __netif_receive_skb+0x1d/0x160 [ 316.128230][ C1] process_backlog+0x443/0x15f0 [ 316.133070][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 316.138443][ C1] net_rx_action+0xa94/0x1010 [ 316.143111][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 316.148212][ C1] ? __pfx_mark_lock+0x10/0x10 [ 316.152955][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 316.158149][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 316.163334][ C1] ? sched_clock+0x38/0x60 [ 316.167740][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 316.172579][ C1] ? mark_held_locks+0x9f/0xe0 [ 316.177325][ C1] handle_softirqs+0x213/0x8f0 [ 316.182093][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 316.187397][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 316.192685][ C1] ? __dev_queue_xmit+0x89b/0x43e0 [ 316.197794][ C1] do_softirq+0xb2/0xf0 [ 316.201945][ C1] [ 316.204858][ C1] [ 316.207770][ C1] __local_bh_enable_ip+0x100/0x120 [ 316.212949][ C1] ? __dev_queue_xmit+0x89b/0x43e0 [ 316.218043][ C1] __dev_queue_xmit+0x8b0/0x43e0 [ 316.222964][ C1] ? hlock_class+0x4e/0x130 [ 316.227453][ C1] ? __lock_acquire+0x15a9/0x3c40 [ 316.232461][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 316.237824][ C1] ? hlock_class+0x4e/0x130 [ 316.242319][ C1] ? mark_lock+0xb5/0xc60 [ 316.246648][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 316.251869][ C1] ? __pfx_mark_lock+0x10/0x10 [ 316.256644][ C1] ? find_held_lock+0x2d/0x110 [ 316.261494][ C1] ? __ip_finish_output+0x49e/0x950 [ 316.266680][ C1] ? __pfx_lock_release+0x10/0x10 [ 316.271691][ C1] ? mark_held_locks+0x9f/0xe0 [ 316.276436][ C1] ip_finish_output2+0xc6c/0x2150 [ 316.281469][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 316.286923][ C1] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 316.291762][ C1] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 316.297400][ C1] __ip_finish_output+0x49e/0x950 [ 316.302533][ C1] ip_finish_output+0x35/0x380 [ 316.307302][ C1] ip_output+0x13b/0x2a0 [ 316.311547][ C1] ? __pfx_ip_output+0x10/0x10 [ 316.316403][ C1] ip_local_out+0x33e/0x4a0 [ 316.320896][ C1] __ip_queue_xmit+0x777/0x1970 [ 316.325738][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 316.330857][ C1] __tcp_transmit_skb+0x2b39/0x3df0 [ 316.336046][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 316.341665][ C1] ? irqentry_exit+0x3b/0x90 [ 316.346245][ C1] tcp_write_xmit+0x12b1/0x8560 [ 316.351086][ C1] ? tcp_current_mss+0x27e/0x500 [ 316.356033][ C1] __tcp_push_pending_frames+0xaf/0x390 [ 316.361594][ C1] tcp_send_fin+0x154/0xc70 [ 316.366096][ C1] ? __pfx_tcp_send_fin+0x10/0x10 [ 316.371109][ C1] ? __pfx_sock_rfree+0x10/0x10 [ 316.376000][ C1] __tcp_close+0x96b/0xff0 [ 316.380420][ C1] tcp_close+0x28/0x120 [ 316.384566][ C1] inet_release+0x13c/0x280 [ 316.389065][ C1] inet6_release+0x4f/0x70 [ 316.393467][ C1] sock_release+0x8e/0x1d0 [ 316.397873][ C1] rds_tcp_accept_one+0x357/0xd00 [ 316.402909][ C1] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 316.408445][ C1] ? rcu_is_watching+0x12/0xc0 [ 316.413198][ C1] ? process_one_work+0x921/0x1ba0 [ 316.418293][ C1] rds_tcp_accept_worker+0x59/0x80 [ 316.423395][ C1] process_one_work+0x9c5/0x1ba0 [ 316.428338][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 316.433954][ C1] ? __pfx_process_one_work+0x10/0x10 [ 316.439320][ C1] ? rcu_is_watching+0x12/0xc0 [ 316.444078][ C1] ? assign_work+0x1a0/0x250 [ 316.448655][ C1] worker_thread+0x6c8/0xf00 [ 316.453238][ C1] ? __pfx_worker_thread+0x10/0x10 [ 316.458346][ C1] kthread+0x2c1/0x3a0 [ 316.462413][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 316.467602][ C1] ? __pfx_kthread+0x10/0x10 [ 316.472180][ C1] ret_from_fork+0x45/0x80 [ 316.476586][ C1] ? __pfx_kthread+0x10/0x10 [ 316.481170][ C1] ret_from_fork_asm+0x1a/0x30 [ 316.485948][ C1] [ 316.489158][ C1] Kernel Offset: disabled [ 316.493465][ C1] Rebooting in 86400 seconds..