last executing test programs: 13.94075306s ago: executing program 2 (id=951): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_setup(0x401, &(0x7f0000000000)) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) 11.46103016s ago: executing program 2 (id=956): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418243) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r3, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000200)=0x417c, 0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x19) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket(0x840000000002, 0x3, 0xff) sendmsg$kcm(r8, &(0x7f00000003c0)={&(0x7f00000002c0)=@llc={0x1a, 0x289, 0x5, 0xe, 0xfb, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000002200)="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", 0x137}, {&(0x7f0000000340)="bbe2703c536be39884c5e36f4251e2d7748dd70c290cfa194aacc2d901ff05417c33e87eff812cf71523d22b28f28b7ea118ace318d50c1251de116ca2a48e41cfd7ca52c72c9d7b8fd1403516938a6b9b3feeab79fd", 0x56}], 0x2, &(0x7f0000000680)=ANY=[@ANYRES32=r5], 0x1110}, 0x48880) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0x15}) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 10.046645583s ago: executing program 1 (id=962): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0x4000423) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0xffffffffffffffff], &(0x7f00000007c0), 0x10, 0x0, @void, @value}, 0x90) r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r0, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) 9.98146231s ago: executing program 1 (id=964): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000240)={0x60, 0x2, &(0x7f00008b0000/0x3000)=nil, &(0x7f00008e9000/0x4000)=nil, 0x670, 0x0, 0x0, 0x3, 0x40, 0x1, 0x0, 0xa}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB='\x000\t'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000640)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x20ce41e, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x2b5d}}}, 0x30) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xfea7) r2 = socket(0x2, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x88, 0xb, 0x0, 0x20000000) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netfilter\x00') mkdirat(r4, &(0x7f0000000080)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @limit={{0xa}, @void}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x10}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x2c}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000400)={0x0, 0xe, 0x4c, {0x4c, 0x31, "2e320f6a4a4be6e3c717bd8a8967e0edaf5dce5f560061fc8e4cf70c51c0cc288c5ad37c98908d17c2ad2cf1408622224638c6246b1a0961211083d44d8baae433d1fbc4f176a537e411"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x1c, &(0x7f0000000480)={0x20, 0x1e702273646cc166, 0x48, "ab61d7543e07e777cc3867ee596f5613f3b20c4065b43c6aefe8c77d55a334111916022ef9db677c5c92fbf1c5a40437685815f6b39f28f033197e848b93c5a8ac27749f4e04fb67"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xa}}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000002) 8.486922565s ago: executing program 0 (id=968): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x800d0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.408119567s ago: executing program 0 (id=970): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() creat(0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc040aed4, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000fe8000/0x2000)=nil}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00 \x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, 0x0}, 0x20) write$binfmt_script(r4, &(0x7f00000009c0), 0x75) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, 0x0, &(0x7f00000000c0)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) 7.817711975s ago: executing program 3 (id=973): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000400)={0x3, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000480)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000440)=0x5}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x23}}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x5, 0x1, 0x5}, 0x14}}, 0x2400c000) 7.486271139s ago: executing program 3 (id=974): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0x4000423) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0xffffffffffffffff], &(0x7f00000007c0), 0x10, 0x0, @void, @value}, 0x90) r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r0, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) 7.274096025s ago: executing program 3 (id=975): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) keyctl$clear(0x5, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'erspan0\x00', &(0x7f00000018c0)={'tunl0\x00', 0x0, 0x20, 0x40, 0x5a, 0xa, {{0x16, 0x4, 0x3, 0x1f, 0x58, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x2, 0x0}, {[@timestamp={0x44, 0x1c, 0x2c, 0x0, 0x1, [0xfffffffc, 0x5, 0x9, 0x22c, 0x7e, 0xbae]}, @ssrr={0x89, 0x13, 0xe9, [@empty, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @rr={0x7, 0xf, 0x20, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010102]}, @ra={0x94, 0x4}]}}}}}) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000040)}}, {{&(0x7f0000001a00)={0xa, 0x4e24, 0x8, @mcast1, 0xf8000000}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000080)="99", 0x1}, {&(0x7f0000000240)="ead50889eb3e50ac652cb8ede1bfdb6e58e131713932582f13a3e88d8b22b3791422d94b254ade01155143f37b7a1736907eb61d3fe5881babea06025422cef44b7686dde0d58d47e6a9d721933bc6a0b85856cc505948bd29caaea59fae300d0ade66f4dab5b377f2c0c6326cb629530514fad8a8f38c3ca13024e6713b9f1f5420ef79bef7d3b0e79f82a5d5fd4c14", 0x90}, {&(0x7f00000003c0)="8943d9935bcc69ff62e4b04ef2b876bc2223f5efd981c69f28507c7b5ed5a7957c689e161c93f73fa318a7727d671bd6e1eb7e2dab3c6646a6d29886741519ce537cee00e669cbf9593fa9524d9a616bd4d6b12232f3ff960e00a89d02b660672b154fbfdf3ff9148949644c6aec4a28ca265669eb2dd4a4511149ecbc0fa6c1b888e10b8f6ce0996700bf45ea7265caa4cd9b73d58ede2123f2430568382e2183d9cac457245e00e560d64baf069a1c8e70", 0xb2}, {&(0x7f00000008c0)="779bbb4dbfe8aa45151a3367918e7de673254d91807fcd833cc46d2d0a67f8f78ab91b94140945c7e341cdf2de63be9412b35668f3b6c177be2eccbb5ee94423205e61ae1f93eacee0dd788f954ecc7a7e2485bf1d8483ab6d631b8da61765737cd6092f7303f6219f60572427c146c64124608a5f388b58536711e801a14a1e1c9cb98d17806a61497496d08986ed973f54a25a01a89901936cfa299dcc56130108aabcdcf3510e7e49d3f6578f8903387ab0146eee0e7d04d17b8a66d692f5ac4f157c2709d0b84e741d83921edd3ef20593314bac345e3f71de36b26668dfcc36b47fa7c140b0fd5c58f9a4898fb0bfbd6f6557f51d7495d0f3d346c94ecc408e959c5fdee00103d417e6a66cff7514269d5443f879951b1da41ea5e23ae2122b122e515cee25646e36a76062960c9a7246a7b6c8835ae9bd8df23cbd64d4e555a7d2e20bed52f5744c0ba0e605ef0d2661b5d0ed88354466bb58652395b223564519fae3243b03c4306be7efd48e3e2a7ca8dda4110100065431dada3838870856cc41898b906c4e3fbadb8eddeb4f40822bc9b6a0bf8139ee54c85c36d436c1f978584dbd679745f63e033027227c006a8e6c2ae60a853a6bf6eb47690bc9d8a30190ea4de3249a4ee3297cf225edebf32d24998737d424560902c0ca1aa538ab66cad22049770dc45b24b24dd2abc58ff329fa0fda1169312eabc6bb82af55cc6f0ef5f8d3d4fdfc092306a98ec65418df00ab48cd4b2b9e3e3c0f572c4ab978ae9d30b4893bddd52d00b171a6c3ac9213ed9646608b2f130342d43725ebbc9639ebbb30bb880a4166bd01158832e63b07a82dbbf3ec1103bc7b4ce97c8ac874209e7b339d5078ce4ce6e20909d870e7c698c867610070f23ad3e0e65f475abe91b2236bf542cdf83395986f4aebdd704a8303004abe39099ea420b2fe49b0eea1beb385809dfac884a394d7b4f8bc8116fcdbf92bcbb3d39d5569a4a3f9862fde92634b866adc5f92b7310eaa2f296202391b42a04a36824f84739b0fc2a6780aae8ffad0ac6af5df8fef57096e4793ad0e63d3b3b6713762277bc64eda56826be77b088d24e55f89be35c9f4fd606a3a5e1c72fda44f8762e0b6fb55dedcd13fe8d164974269ae305c1a4e4a31ddebc35bd18ef3fa1a14889469913edd782c3ad52e4744bde329b78cd184f6e25a21ed2f082fc58c7cde88300cce5517c7829be6892fbec804f7aa287ac1fea3271db71817104ebbf596732e21c51c35eb9f382286eecbcf3617529d69ed81d18e017559357d54b3d0bf35f1fa6c54a093b053557055f5bf0a45aa84a90fbf25aa65bf8e46e8cae758532da73947fb0b3ed57cfa2117fceffc1fbb8d2af7e3ce762f0d82a4644b8cbf0e3a6def6a95b386f6a38cc5acafee8af15ede625feb4f44d241c14e4e7c099abfbd3cc5c38ecb68c0ebfbcbcb6bf9acaf3a924e9e434f45e5ee96cd858dc88fdb4bd1274093cca061fa25abff9797f232b0dfd3dce940d109f6d96f0939bb9972b0f12735f382dd43b5957b1b0501bf75393be13b3d046c6b5634e40959aeee12d47e4754344caeca2fe327dc03c28885018ed99a94aa2fa683472f577bea664234ba80a60cb71bd6bae7cda14c2b91239725a0c889c9c8ff8dcf69e779fbe3395a26d58ed83d68c7ec3089f1065ef4377d3606829f3adc9a598010644107c2c7c0f66d26998899cb043ac2e43942b5a43a10b142206bf2046e446282186de237f29c73893f3d8d07e130ee99a71985f2a3d2dc3a567323d179a68c106be9f828957e9061a99b3ee690f546cfeb77d21f6352147abc4b4c7fbcc7f4f6961ecd4a04a436f298ca7f237852e253f06a2721927cdfd270bd2fa39b16674b4acd1a42b7247be29e90b9dcb885d440b5a3b178019f4831a33b168a5219692fd17739219cb40230169386d853d13d722d3e0d77d109473c5194b7e9284c552481534aea66b78a2f78707b6f8f54acc699e599979f4f08cad8e9a3de318c76c19b664019b700b6dea501f602d4bb16ada45d249ac52babcb70335f55f6f5604f7d823c7c6789045b9a66bc7881e2b0cf2c46ff6cef3ab86cc9c1a551e41b4a109f2ed829d25bd5cd780c0b2b26f4322d524e8534d45b89f55bce3f026017ae424d77d9bae49e3f30dbe9237626eafc81cf762ea2ad3f8e4f865401fd75d7de10b743caffc69c9a0f85fa21c879dedff1e6923d88d72e9c19c10ef98ca61cb72ee0af78618e82e77485f7b3d32f61c3173ad4bf79201a836631e362fa9d07d3514950636fb5c763d7fc0bfb02851de4d4297e2674b4eb53457f5b79756f2056ca3abc195948f94adb09f2f5b10ed44becbc7386fbca3993736f497a7148ff5de58232574a88c684fc4db62d5874ada77bc35adb7954993cf3e2126d4c36b9c46f5b9270f8180d80df181ffd8f381ed1641105083e0a41239905c90d40bfb03a2cba9388332670e1c424e5986039b2bd963c3051704e73235f97400b99fa90dbac293688df5ba9e96233c3962b33ea09b4a142ae56f1ea21df6bb8847cf7374f3d88913def991b6628d81f1f053837bc17536de8041077dfba7b77fe8f0ddb61f75ec8c92f254bb7db574e15dbbd95b65e4765a21c346bbc3de8a9c82d7abb712e0032fd54f8b07b2c0270c9f3f0e4d6bfc81b6fc6c1c9411f22498ab8c97a137bf2f6c82b18ebdeeb0ffe7ff1c75174473561deacd528cbba98389591c8762096bad6b63d1f461b3203292533f71c3f138933ab59ead1f7283863417f71dddc79f2fc7c772d56c9528768ebc01d732bf2ad690a41026049d273cf0926db8e4352b75bf06ef694709c0a81389d946b77d311532a27832f3abaaec7c4c9ecaf7358fd7c4a09700551c9608d43e055113e80094ed04d0b07755a9592188d2193398737debe16dff646bb452830055fa8067b8487fe2d2951872fea7d70042182485b462c97bb60e64557c686a325843f09b445e3fd9e8bae4013aa965176f36bd703d6202087bb749b97260b20ef18763d40a42fd4aa9486000281036e3fcbcef48e03931b36625bd9c61943120496a96bfa0d307fa059b4049ff9098b260e7e7f54f7aec36d2ebc9c51b24c0cc5f28b8d5a6a7a4fd658a3ac4d156624c33acb6d8864eca260214da8f4333365c69c56b106f719703063809c49ae01dd5ae0743e66afc6c2533a4c3c52c4698117fa277bffc63d56bba78a08e0e685f2819cf251f905689db3ee082c8770db203876942b36b3d8f69ea3acf933dbcdd979991a8099137946e95b8be78e7a932151abf2f84b8d3f1dc957038f4b845368f0b699d4c00e0cbb259d0b16ab1582dea9b6de19858c989ce62e8445dc98d2209eb55feb33eacec35947751074d640c28460fc20794585771171dc530750aa88182667b4c6d2e21e6dc5faaed821a009a67687e547fbec972bad4216543e18d21fe0f8a0c9c2d75fa4eb11905cee0fe448bbc4ddc7b999caf7d8eafa85fa7a7a868063b98e8d68ce4887d4d0aebdde5a14a7108a35a4d3b2642a626dcb3dbeec2f41b0d1a4fcbf44881b416bac482ef2a5ab54bb73c88d73987b0607d48b59fa4a8d1bbd36d67c7b7601c2bc0c090cb8ea9ddc06da2db1c28884e63064eab15a9215530d1e33304f23f56cff819cc68ef6edc50c2e031dba494aa45d5a5d83bafddfee45b0a77dae135ec8a09acdbdf1fd5c2d6de51439343f55d7c6c472d94bca5929371702d6a10ceb7f4da669dbb275aff3e0f581bb1ccf60bdd0a607efcde3189a845758049c5607b797993080b0e8c02de3384ed11048bf4c2a985692a42b29bfe32b7493a7f812f399dddbe23d575fe9ace6adc076ea532c243af24085d8b393c8b4e7d920856b748220901a6992fdbea45ebe621263ce87d651b22c1d25e29c9f8ec9bf0915c00329860f4fc283d8acaadfd47c609e3c20e165b6d35501232ba9b2218bfba1551857b921971eedd51b7528b02653d419ae10d1722dcff2b50a646ac6d012e3d62ddb64975078f7e8c7590537a360b2a492b6ad8279206e6a2c2bbbf4c670f59686f722c4df9bb4245aee0ceefd39559d66a8861fc03e8df0ad27734eb2ed2347815f369f9211c15f8460ebeff87545b8e5b3297443554c8f308df36ec8a5775a474b4a3a294079d611e5119775cef35a97031ced9871678295eef1450af6ad54d5f83f1a343c5b0943446fc41079d67c57cf31affb80f3b64b1c96b47119bd5f63a0fb7ab4c4e6d4d40d0e395eeb9261bf7cd3cb193290fab2847741ddd0d85d7c60f8f2bbd294adc7e49b7a60ebb757d658689fe26fa27b79766db734204bb0cc7cd0749b1b11c501f2634cec82d48c4f9d52349c1e9f508faa02907e6edaa8ea5dcdb0cd4177033f40083d79343c4643f918238480b9a7b96c55c47b2c7cf4103ffedc751eccc326a0f349685eebfc9d5b837bbf2929d0e190c48969743a185a72b192d8aadc69f6875524113a720a78e549e8fa2527156da2931b3f1c6bb2b8664fef023943119b5e91102911ef1cb8a2a9cef4261f681bc18c8e45892cbbfa31d0d9de96cd95ef7b022b7a494b851a9a6a1866ff9685415a4646661c6455c9fd390c627030e797409e52d0407a7a2f0aa8ea4897dd81582b6512d5b5f24af958ac537c01f3bdddead34851258f258815b68a97e7fc5390f3582e2159fdaaf1b4334adc39ce8c285f232e2d1f7378d5076f10fa73cfa48db5da3d6d72ee490f702d6c9d2f1c5ef5ee6965a3e23c627e3c10facef32313a2ce0ac8478ff4406fca0868e6075865529840d2251a699dd576f5d1317642f76dd8c17f4509b40453567d1b9aacff45450a40eadc3d8ee9282ce5df62ca5fe7ce604e2536f5119fe5dc7d9a61f10dee6e72d9377cf1c1fd6865e8c81070a46f3d575357811fa77613da678869a94a7a5628af8ac79b279364815191186c867abc62c9b5199d91cde5513afd2a275f1ae52c493fbbabd54a09f2717c61ae0060758aaf66f7479bc2c57a44d12ac16dee666ac2dbe1c9108a4d154545c4e38388abcf30dd3fff7a651dc730eac7f2f03f98ffb768a7f7d5557a23642ecad0f01aa9be149448eb7fd719d08223d5e048a3b29bef3828ffd4aec5e23c479f2d29cee26d2f46357b3fb9c2762ecbcc63a0ebf73d486bb3fee6cb98d769ead88982d2dbc05075f270ca361aa5ea90ed423c43e9d024ae021a9503a1a58b19393afd8fef489abf58b7e67846f6dcb320d9ce9f28d79ec85a723b5498fe00011a1a98c75ac4375563f8e6d13c67415ee7dd34ca0f31a1bbb66d1b45d2965626b292792c0b1bb119ff02b481061513293bf4d57c021286dbf08ba709b22e393422513cccbc7947885b275d8db058e273b6a4c09cbe079bd877e76453656e4838f74a2a89b0f3f808640d850bbb1eef24db92787203aefbaa278b85940088e096ea5d773299df451e840c4d9e52b32fc69ffbb8875b4711e4d4c265afe2c1bacabbb262a1ce17aec5ee1b49cd067235b84893eb06b9b6b5816cc4a0c7ce7801c5b3c9b630df506c6ac4b1a9d880cb224623a715aa31ffee7d9466e9a03d89b6e503bce7caf9c30d9120f063a474cf1228", 0xf80}, {&(0x7f0000000480)="80b15f7ec0a48ba1e98c0caf0790610c35d5cd641447b8586ae53a850bbe49785d5ee31e01c95a565791c42f91759f5b2d110aae082c70852b292692e58c29a1c80b91f38f8fffa597e34cb7fa9bcc1b97d5e993f580e62abe8ffe63c9b7a3084f3097b81362990623fbe4faec1713c1bf6945943668133e0270bfad8bc64b609965e9fc3691f59e2986b016b25672247b60ad9fe2b9e14edcdbe322bd0e4630e4afb59d53e43e1a4c83888b3f6f8b455cabb01188cd3b02b06132c126b5116dbe72c77fb2", 0xc5}, {0x0}, {&(0x7f0000000580)="7338e536353b1934ade326ef90c3eb9a725f8930b6b351bc039a579d140a61b6d270928c143f1f46d094ba80067b2a4670944e262fd6a22e76b53d1fb03859d62bab9ae8cf9a1c077b2a69f9cec320c32b8a693d28ec2fb114afeb51dbc3a59bbc685f454178dd31152f0ca75aa91d55dca8d586c5760f351b1f61058d169a18a5cfaee68536765c9a2da5efb6db403a1717c5e39cdb67828059a0a364fee3e2274fb341c4c3bf20b50faef460a2bb", 0xaf}, {&(0x7f0000000680)="0aaf36ba94f4162a85d80aba607f187a55ca7ca83b62ba94d99da655cc8869e6974eecda9fd1671d404b342f2b93c9da454d08f2b8922441cbf53765b13ac43ee33ffe966e66da00f3994914edaae5dc73d9706164cc7b53979e8c34854c787e977607c91e06bc203943fdac27b58357d97ffaec4755111692dff0f7c1a4a43eeaf773a6f252b7042b61d94ec7c50baff3d219391cb8a560798f14a7a6ed2e81fa0cb1127f1292e6c2a844a0bcf0d095b92db84bffe8a3dd10433540507fb6eb96428d8593f8d9a6256640236cc098c9", 0xd0}], 0x8, &(0x7f0000001940)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x40}}], 0x2, 0x84) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) 6.741307965s ago: executing program 2 (id=976): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@rr={0x7, 0x3, 0x65}, @timestamp_prespec={0x44, 0x24, 0xbf, 0x3, 0x1, [{@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x658}, {@broadcast}, {@empty, 0x3}]}, @noop, @noop, @lsrr={0x83, 0x3, 0xdc}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf256900000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x80, 0x0, 0x200, 0xffffffff, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x68, 0x0, 0x8, 0x4, 0x0, @broadcast, @local}}}}) socket(0x1e, 0x4, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0) symlink(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') lsm_set_self_attr(0x68, &(0x7f0000000000)={0x6d, 0x3, 0x20, 0xfffffffffffffea1}, 0x20, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo_reply={0x0, 0x0, 0x0, 0x64}}}}}, 0x0) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'vlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0xd4}}, 0x0) 6.531146587s ago: executing program 4 (id=977): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r5) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)) 5.803504048s ago: executing program 1 (id=978): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r3 = dup2(r2, r2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{r4, r5+60000000}, {0x77359400}}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000280)={0x17, 0x1, 0x0, "adbdee06009e4aeabde9eefaff7a78cda902552f08cef49462c88b6c7451f8e5"}) tgkill(r1, r1, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) 5.699787171s ago: executing program 0 (id=979): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x48000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = dup(0xffffffffffffffff) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) sendfile(r6, r4, 0x0, 0x89ffc) 4.496411967s ago: executing program 2 (id=980): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x800d0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.432045267s ago: executing program 1 (id=981): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000900000001000000002000000020000000000000e0300"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010000c"], 0x24}], 0x1}, 0x0) 4.430241145s ago: executing program 4 (id=982): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) write$sequencer(r4, &(0x7f0000000000)=[@l={0x92, 0x0, 0xc0}], 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x50, 0x0, 0x1, 0x0, 0x0, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) 3.992102377s ago: executing program 0 (id=983): mkdir(&(0x7f00000003c0)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r1, 0x80045438, 0x300000000000000) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000240)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f00000004c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, 0x0}, 0x20) write$binfmt_script(r4, &(0x7f00000009c0), 0x75) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, 0x0, &(0x7f00000000c0)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) 3.99152039s ago: executing program 2 (id=984): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408e4}, 0x80) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[], 0x15) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(0x0, 0x5251cbc2029fe465) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4010, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e030066642c7266646e6f3d85c583e24fd695d35d5837f2c0bd49d6b544b66e73e1c71c244bfb3f944b8070ace63a91b54c1552d427ddf0e4c9259d5cfa71011b1de51b926719412239d0b03e3c0831f84bf3b6922ae6b25acf50a2fe95e5e0962109367e47", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',k']) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x9f0000, 0x7, 0x101, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0xa2093d, 0xfffeffff, '\x00', @p_u32=&(0x7f0000000040)=0x9b2f785}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open$dir(0x0, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x9, 0x12) write$binfmt_misc(r3, &(0x7f00000001c0), 0xc27) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x22, 0x0, r7}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 3.1386386s ago: executing program 0 (id=985): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0xd, 0x8}, 0x18) openat(r0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x2, @raw_data="a374afea5daf2b8b524742345f30b8b8cfe14cb75f94a80d7afaca6df69d1fcfc1b9a7cadad1b62ecf7f74f64a623350c637bcc0214381118e692a69c3a8d1053c1fce6098c8927711f2faee5dc306aeab17c51fa73b786e62278fc82d3854f0e4035ca9cc708de67935343945e147762a79d8cfa741406e59a00e6e2c3cdfe2786455ee6c5654b677224d4efc1f1fb6034b18718456868d91e98a7e9b250c82e370e4dcae10176fda9a1f89559bb4f9aa1e480490f65704e7283829c380a6826f9501da00"}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00042cbd7000fcdbdf25020000000c0003000a0000000000000007000a00257b5b000c00080008"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r9], 0x28}}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/20, 0x14, 0x40, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5, 0x2}, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1, 0xc00}) 3.083315173s ago: executing program 4 (id=986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f00000000c0)={0x7a, 0x0, 0x2}) 2.939445187s ago: executing program 3 (id=987): keyctl$setperm(0x5, 0x0, 0x440008) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f00000003c0)={0x2, 0x31e, 0x0, &(0x7f00000002c0)}) socket$inet6(0xa, 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2b, 0x3, 0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) socket$inet6(0xa, 0x3, 0x7) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000000)={0x5, 0x6, 0x5}) 2.880115168s ago: executing program 1 (id=988): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000000)={0x7, 0x0, '\x00', {0x0, @reserved}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x1100, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaabb000002000400d8928afb7028000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r6], 0x74}}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_any}, {@access_user}, {@afid={'afid', 0x3d, 0xc}}, {@loose}, {@version_9p2000}], [{@hash}]}}) 1.368356057s ago: executing program 2 (id=989): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() creat(0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc040aed4, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000fe8000/0x2000)=nil}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00 \x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r1, 0x1, 0x3, 0x0, {0xe}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0xb, r5, 0x0, r4}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000040)="699fca3cb567b7", 0xfffffeeb}], 0x1}, 0x4000) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x894b, 0x0) 1.052089714s ago: executing program 4 (id=992): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) epoll_create(0x5) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x100000021, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000080)={r7, 0xfffffffd, 0x8, 0x1, 0x0, [0x0], [0x0, 0x7f, 0x10000000, 0xd5a7], [0x0, 0x0, 0x0, 0x1000], [0x6, 0x2]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r9}) close_range(r3, 0xffffffffffffffff, 0x0) 528.646371ms ago: executing program 4 (id=993): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x48000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = dup(0xffffffffffffffff) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) sendfile(r6, r4, 0x0, 0x89ffc) 259.708037ms ago: executing program 0 (id=994): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000980)='erofs\x00', 0xc, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r2, 0x8b21, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000000)=""/2, &(0x7f0000001080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f00000000c0)={@mcast1, 0x0}, &(0x7f0000000300)=0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYRESOCT=r3, @ANYRESHEX=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6, 0x0, 0x1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f0000002080)=0x64, 0x23b) syz_usb_connect(0xfd83798742c93ced, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000002bd04460b926b2e7ca3b7f4cc95694d65112c232fd69c8ea861cc1bfc4a10aaab9f7b0b3d6775a61b530275f618265fb9fe7de09777a7fa2e1c8ed5f6fabced1", @ANYRES16=r0, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r10, @ANYBLOB="20005080110001004abee339084eeef16f162471f40000000800070001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4091}, 0x0) bind(r1, &(0x7f0000000000)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0x80) 0s ago: executing program 4 (id=995): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x12c9bc095037d560}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x5, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4040084) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) prctl$PR_SET_THP_DISABLE(0x29, 0x8) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000540), 0x9, 0x406080) mmap$snddsp(&(0x7f00006a8000/0x4000)=nil, 0x4000, 0x2000000, 0x20010, r5, 0xb000) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000080)={'syz0\x00', {0x0, 0xae6}, 0x0, [0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7ff, 0x2, 0xbf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x200003, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0000000, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x7fffffff, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x4, 0x94, 0x3], [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x10006, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x180000], [0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x2, 0x0, 0x100, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffd]}, 0x45c) preadv(r6, &(0x7f0000003780)=[{0x0}], 0x1, 0xffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) kernel console output (not intermixed with test programs): denied { setopt } for pid=7556 comm="syz.0.401" laddr=fe80::b lport=52576 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 200.537789][ T29] audit: type=1400 audit(1735465967.738:388): avc: denied { bind } for pid=7564 comm="syz.0.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 201.007782][ T5864] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 201.259042][ T5864] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 201.268529][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.291088][ T5864] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 201.301354][ T5864] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 201.337613][ T5864] usb 2-1: Manufacturer: syz [ 201.353560][ T5864] usb 2-1: config 0 descriptor?? [ 201.487762][ T5864] rc_core: IR keymap rc-hauppauge not found [ 201.493820][ T5864] Registered IR keymap rc-empty [ 201.541636][ T5864] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 201.609789][ T7591] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 201.624000][ T5864] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 201.647891][ T29] audit: type=1326 audit(1735465968.898:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe6585d29 code=0x7fc00000 [ 201.808956][ T29] audit: type=1326 audit(1735465968.898:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8fe6585d29 code=0x7fc00000 [ 201.965322][ T29] audit: type=1326 audit(1735465968.898:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe6585d29 code=0x7fc00000 [ 201.974687][ C1] igorplugusb 2-1:0.0: receive overflow, at least 2 lost [ 202.078396][ T29] audit: type=1326 audit(1735465968.948:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe6585d29 code=0x7fc00000 [ 202.144534][ T29] audit: type=1326 audit(1735465968.948:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe6585d29 code=0x7fc00000 [ 202.175863][ T29] audit: type=1326 audit(1735465968.948:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe6585d29 code=0x7fc00000 [ 202.200774][ T29] audit: type=1326 audit(1735465968.948:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe6585d29 code=0x7fc00000 [ 202.225244][ T29] audit: type=1326 audit(1735465968.948:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7564 comm="syz.0.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe6585d29 code=0x7fc00000 [ 202.235115][ T7577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.277860][ T7577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.344124][ T5865] usb 2-1: USB disconnect, device number 19 [ 202.629784][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'. [ 203.131746][ T7610] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 203.145978][ T7610] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 203.162209][ T7610] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 205.683228][ T7648] x_tables: duplicate underflow at hook 2 [ 205.711334][ T7653] nfs: Unknown parameter '' [ 205.795107][ T7647] syz.1.418: attempt to access beyond end of device [ 205.795107][ T7647] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 205.905180][ T7647] hpfs: hpfs_map_sector(): read error [ 205.930350][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 205.930367][ T29] audit: type=1400 audit(1735465973.229:457): avc: denied { listen } for pid=7658 comm="syz.0.426" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 206.022194][ T29] audit: type=1400 audit(1735465973.229:458): avc: denied { accept } for pid=7658 comm="syz.0.426" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 207.027079][ T7673] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 207.041313][ T7673] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 207.055717][ T7673] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 210.826274][ T7694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.196522][ T25] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 211.393403][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.405028][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 211.692631][ T25] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 211.704308][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 211.715529][ T25] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 211.884560][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.696458][ T7695] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 212.705100][ T25] hub 3-1:1.0: bad descriptor, ignoring hub [ 212.718799][ T25] hub 3-1:1.0: probe with driver hub failed with error -5 [ 212.855698][ T7714] sp0: Synchronizing with TNC [ 212.872182][ T7714] sp0: Found TNC [ 213.041829][ T7710] [U] ` [ 213.232124][ T7706] 9pnet: Unknown protocol version 9p200 [ 213.239593][ T7706] siw: device registration error -23 [ 213.406257][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 213.727054][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 213.732517][ T25] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 213.859054][ T29] audit: type=1400 audit(1735465981.160:459): avc: denied { read write } for pid=5812 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.883151][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.917173][ T7726] raw_sendmsg: syz.2.433 forgot to set AF_INET. Fix it! [ 214.150533][ T7731] rdma_rxe: rxe_newlink: failed to add lo [ 214.222918][ T29] audit: type=1400 audit(1735465981.200:460): avc: denied { append } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 214.285664][ T29] audit: type=1400 audit(1735465981.200:461): avc: denied { open } for pid=5812 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.423299][ T29] audit: type=1400 audit(1735465981.200:462): avc: denied { ioctl } for pid=5812 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.449937][ T29] audit: type=1400 audit(1735465981.200:463): avc: denied { prog_load } for pid=7685 comm="syz.2.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 214.548793][ T29] audit: type=1400 audit(1735465981.200:464): avc: denied { bpf } for pid=7685 comm="syz.2.433" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 214.569205][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.584048][ T29] audit: type=1400 audit(1735465981.200:465): avc: denied { read } for pid=7685 comm="syz.2.433" dev="nsfs" ino=4026533075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 214.695118][ T29] audit: type=1400 audit(1735465981.200:466): avc: denied { open } for pid=7685 comm="syz.2.433" path="net:[4026533075]" dev="nsfs" ino=4026533075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 214.718552][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.757420][ T29] audit: type=1400 audit(1735465981.200:467): avc: denied { create } for pid=7685 comm="syz.2.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.783252][ T29] audit: type=1400 audit(1735465981.200:468): avc: denied { read } for pid=7685 comm="syz.2.433" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 215.993373][ T7751] sp0: Synchronizing with TNC [ 216.272388][ T7751] sp0: Found TNC [ 216.639987][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 217.281941][ T7742] [U] ` [ 217.425926][ T5893] usb 3-1: USB disconnect, device number 11 [ 217.464081][ T7760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.900155][ T7768] rdma_rxe: rxe_newlink: failed to add lo [ 219.187997][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 219.188013][ T29] audit: type=1400 audit(1735465986.020:530): avc: denied { write } for pid=7762 comm="syz.4.452" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 219.188048][ T29] audit: type=1400 audit(1735465986.020:531): avc: denied { ioctl } for pid=7762 comm="syz.4.452" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 219.355539][ T29] audit: type=1400 audit(1735465986.650:532): avc: denied { map } for pid=7780 comm="syz.1.453" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 219.696219][ T29] audit: type=1400 audit(1735465986.650:533): avc: denied { execute } for pid=7780 comm="syz.1.453" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 219.737390][ T29] audit: type=1400 audit(1735465986.810:534): avc: denied { create } for pid=7774 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 219.882632][ T29] audit: type=1400 audit(1735465987.120:535): avc: denied { create } for pid=7754 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 219.903315][ T29] audit: type=1400 audit(1735465987.130:536): avc: denied { bind } for pid=7754 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 219.928642][ T29] audit: type=1400 audit(1735465987.130:537): avc: denied { write } for pid=7754 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 219.951364][ T29] audit: type=1400 audit(1735465987.140:538): avc: denied { setopt } for pid=7754 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 220.166114][ T29] audit: type=1400 audit(1735465987.470:539): avc: denied { connect } for pid=7790 comm="syz.4.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.205342][ T5863] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 220.285402][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 220.757689][ T5863] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 220.766428][ T5863] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 220.841446][ T5863] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 220.870397][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 220.875592][ T5863] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 220.889844][ T5863] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 220.902754][ T5863] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 220.911845][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 220.922149][ T5863] usb 1-1: Product: syz [ 220.926591][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 220.934799][ T5863] usb 1-1: Manufacturer: syz [ 220.943176][ T25] usb 3-1: config 4 interface 0 has no altsetting 0 [ 220.951508][ T25] usb 3-1: config 4 interface 0 has no altsetting 0 [ 221.014401][ T5863] cdc_wdm 1-1:1.0: skipping garbage [ 221.032278][ T5863] cdc_wdm 1-1:1.0: skipping garbage [ 221.047624][ T25] usb 3-1: config 4 interface 0 has no altsetting 0 [ 221.082686][ T5863] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 221.088975][ T5863] cdc_wdm 1-1:1.0: Unknown control protocol [ 221.115027][ T25] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=6a.05 [ 221.124347][ T25] usb 3-1: New USB device strings: Mfr=1, Product=69, SerialNumber=2 [ 221.132452][ T25] usb 3-1: Product: syz [ 221.136795][ T25] usb 3-1: Manufacturer: syz [ 221.141377][ T25] usb 3-1: SerialNumber: syz [ 221.272566][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 221.273234][ T5863] usb 1-1: USB disconnect, device number 12 [ 221.279376][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 221.291195][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 221.300320][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.383007][ T7789] SELinux: policydb string length -1854063359 does not match expected length 8 [ 221.392666][ T7789] SELinux: failed to load policy [ 222.335365][ T5864] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 222.436354][ T7819] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 222.510916][ T5864] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.564073][ T5864] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 222.623599][ T5864] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 222.848750][ T5864] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 222.859731][ T5864] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 222.868842][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.899939][ T7810] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 222.910375][ T5864] hub 2-1:1.0: bad descriptor, ignoring hub [ 222.917698][ T5864] hub 2-1:1.0: probe with driver hub failed with error -5 [ 222.925685][ T5864] cdc_wdm 2-1:1.0: skipping garbage [ 222.930899][ T5864] cdc_wdm 2-1:1.0: skipping garbage [ 222.936496][ T5864] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 223.179722][ T25] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 223.205996][ T25] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 223.268697][ T25] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 223.354276][ T25] usb 3-1: media controller created [ 223.413198][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.691469][ T25] zl10353_read_register: readreg error (reg=127, ret==0) [ 223.790074][ T25] usb 3-1: USB disconnect, device number 12 [ 224.054928][ T5899] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 224.214048][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 224.436112][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.456714][ T5899] usb 5-1: config 0 has no interfaces? [ 224.462244][ T5899] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 224.484815][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.533832][ T5899] usb 5-1: config 0 descriptor?? [ 224.578558][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 224.578574][ T29] audit: type=1400 audit(1735465991.881:591): avc: denied { create } for pid=7845 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 224.825046][ T29] audit: type=1400 audit(1735465992.011:592): avc: denied { connect } for pid=7845 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 225.374465][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 225.409273][ T29] audit: type=1400 audit(1735465992.021:593): avc: denied { write } for pid=7845 comm="syz.3.469" path="socket:[16955]" dev="sockfs" ino=16955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 225.510597][ T29] audit: type=1400 audit(1735465992.801:594): avc: denied { mounton } for pid=7820 comm="syz.4.463" path="/proc/286/task" dev="proc" ino=18121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 225.602499][ T29] audit: type=1400 audit(1735465992.801:595): avc: denied { mount } for pid=7820 comm="syz.4.463" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 225.629510][ T29] audit: type=1400 audit(1735465992.881:596): avc: denied { ioctl } for pid=7820 comm="syz.4.463" path="socket:[18045]" dev="sockfs" ino=18045 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.654492][ T5899] usb 2-1: USB disconnect, device number 20 [ 225.761029][ T29] audit: type=1400 audit(1735465993.061:597): avc: denied { connect } for pid=7862 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 225.792141][ T5893] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 225.911749][ T7863] use of bytesused == 0 is deprecated and will be removed in the future, [ 225.920641][ T7863] use the actual size instead. [ 225.934647][ T5893] usb 3-1: device descriptor read/64, error -71 [ 225.953042][ T5899] usb 5-1: USB disconnect, device number 21 [ 225.958355][ T29] audit: type=1400 audit(1735465993.201:598): avc: denied { listen } for pid=7862 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 225.978622][ T29] audit: type=1400 audit(1735465993.201:599): avc: denied { accept } for pid=7862 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 226.587055][ T7869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.722885][ T5893] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 226.810678][ T29] audit: type=1400 audit(1735465994.111:600): avc: denied { watch } for pid=7875 comm="syz.0.478" path="/101" dev="tmpfs" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 226.982759][ T7881] 9pnet_fd: Insufficient options for proto=fd [ 227.004586][ T5893] usb 3-1: device descriptor read/64, error -71 [ 227.116722][ T5893] usb usb3-port1: attempt power cycle [ 227.719476][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 228.144566][ T5893] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 228.176353][ T5893] usb 3-1: device descriptor read/8, error -71 [ 228.364460][ T5863] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 228.414718][ T5893] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 228.434918][ T5893] usb 3-1: device descriptor read/8, error -71 [ 228.577314][ T5893] usb usb3-port1: unable to enumerate USB device [ 228.664589][ T5899] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 228.831873][ T5863] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.881748][ T5863] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 228.924529][ T5863] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 228.944480][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 228.953215][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 228.964937][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 228.968345][ T5863] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 229.008801][ T5863] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 229.010427][ T5899] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=58.6f [ 229.030905][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.041956][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.046998][ T5899] usb 5-1: Product: syz [ 229.055046][ T5899] usb 5-1: Manufacturer: syz [ 229.059772][ T5899] usb 5-1: SerialNumber: syz [ 229.075351][ T5899] usb 5-1: config 0 descriptor?? [ 229.083579][ T5899] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 229.091708][ T5899] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 229.165003][ T7891] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 229.203458][ T5899] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 229.212838][ T5899] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 229.220681][ T5899] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 229.224413][ T5863] hub 2-1:1.0: bad descriptor, ignoring hub [ 229.235494][ T5863] hub 2-1:1.0: probe with driver hub failed with error -5 [ 229.238344][ T5899] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 229.245924][ T5863] cdc_wdm 2-1:1.0: skipping garbage [ 229.258086][ T5899] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 229.484468][ T7911] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.227135][ T5863] cdc_wdm 2-1:1.0: skipping garbage [ 230.232416][ T5863] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 230.274180][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 230.274198][ T29] audit: type=1400 audit(1735465996.942:614): avc: denied { create } for pid=7908 comm="syz.3.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 230.496604][ T5899] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 230.507750][ T5899] usb 5-1: USB disconnect, device number 22 [ 230.518453][ T5899] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 230.528226][ T5899] keyspan 5-1:0.0: device disconnected [ 230.684205][ T29] audit: type=1400 audit(1735465996.952:615): avc: denied { write } for pid=7908 comm="syz.3.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 230.705678][ T1048] Bluetooth: Error in BCSP hdr checksum [ 230.833450][ T29] audit: type=1400 audit(1735465998.132:616): avc: denied { write } for pid=7918 comm="syz.2.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 230.852765][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.465283][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 232.472031][ T5136] Bluetooth: hci5: command 0x1003 tx timeout [ 232.750114][ T7934] rdma_rxe: rxe_newlink: failed to add lo [ 232.791930][ T5866] usb 2-1: USB disconnect, device number 21 [ 232.816387][ T29] audit: type=1400 audit(1735466000.112:617): avc: denied { bind } for pid=7929 comm="syz.4.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 232.861562][ T29] audit: type=1400 audit(1735466000.162:618): avc: denied { setopt } for pid=7940 comm="syz.2.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 232.969288][ T7943] 9pnet_fd: Insufficient options for proto=fd [ 232.990463][ T29] audit: type=1400 audit(1735466000.272:619): avc: denied { ioctl } for pid=7932 comm="syz.1.496" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 233.817521][ T7939] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 234.164819][ T29] audit: type=1400 audit(1735466000.272:620): avc: denied { set_context_mgr } for pid=7932 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 234.184476][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.384191][ T29] audit: type=1400 audit(1735466000.282:621): avc: denied { read write } for pid=7932 comm="syz.1.496" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 234.588905][ T7954] FAULT_INJECTION: forcing a failure. [ 234.588905][ T7954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.602149][ T7954] CPU: 1 UID: 0 PID: 7954 Comm: syz.2.499 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 234.612741][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 234.622794][ T7954] Call Trace: [ 234.626072][ T7954] [ 234.628999][ T7954] dump_stack_lvl+0x16c/0x1f0 [ 234.633686][ T7954] should_fail_ex+0x497/0x5b0 [ 234.638376][ T7954] _copy_from_user+0x2e/0xd0 [ 234.642976][ T7954] copy_msghdr_from_user+0x99/0x160 [ 234.648175][ T7954] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 234.654014][ T7954] ___sys_sendmsg+0xff/0x1e0 [ 234.658620][ T7954] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.663832][ T7954] ? __pfx_lock_release+0x10/0x10 [ 234.668858][ T7954] ? trace_lock_acquire+0x14e/0x1f0 [ 234.674077][ T7954] ? __fget_files+0x206/0x3a0 [ 234.678769][ T7954] __sys_sendmsg+0x16e/0x220 [ 234.683362][ T7954] ? __pfx___sys_sendmsg+0x10/0x10 [ 234.688474][ T7954] ? __pfx_lock_release+0x10/0x10 [ 234.693506][ T7954] ? __might_fault+0xe3/0x190 [ 234.698189][ T7954] ? rcu_is_watching+0x12/0xc0 [ 234.702966][ T7954] do_syscall_64+0xcd/0x250 [ 234.707481][ T7954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.713385][ T7954] RIP: 0033:0x7fd5f7f85d29 [ 234.717822][ T7954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.737445][ T7954] RSP: 002b:00007fd5f8d5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.745860][ T7954] RAX: ffffffffffffffda RBX: 00007fd5f8176160 RCX: 00007fd5f7f85d29 [ 234.753831][ T7954] RDX: 0000000000000000 RSI: 00000000200015c0 RDI: 0000000000000005 [ 234.761800][ T7954] RBP: 00007fd5f8d5b090 R08: 0000000000000000 R09: 0000000000000000 [ 234.769769][ T7954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.777741][ T7954] R13: 0000000000000001 R14: 00007fd5f8176160 R15: 00007ffc31661b48 [ 234.785751][ T7954] [ 234.944762][ T29] audit: type=1400 audit(1735466000.282:622): avc: denied { open } for pid=7932 comm="syz.1.496" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 234.968688][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.974952][ T29] audit: type=1400 audit(1735466000.282:623): avc: denied { ioctl } for pid=7932 comm="syz.1.496" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 235.000127][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.311783][ T7975] FAULT_INJECTION: forcing a failure. [ 236.311783][ T7975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.333487][ T7975] CPU: 1 UID: 0 PID: 7975 Comm: syz.3.506 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 236.344107][ T7975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 236.354155][ T7975] Call Trace: [ 236.357423][ T7975] [ 236.360356][ T7975] dump_stack_lvl+0x16c/0x1f0 [ 236.365028][ T7975] should_fail_ex+0x497/0x5b0 [ 236.369704][ T7975] _copy_from_user+0x2e/0xd0 [ 236.374302][ T7975] core_sys_select+0x2cf/0xb80 [ 236.379077][ T7975] ? __pfx_core_sys_select+0x10/0x10 [ 236.384371][ T7975] ? set_user_sigmask+0x217/0x2a0 [ 236.389386][ T7975] ? __pfx_set_user_sigmask+0x10/0x10 [ 236.394745][ T7975] ? __pfx_lock_release+0x10/0x10 [ 236.399763][ T7975] do_pselect.constprop.0+0x1a0/0x1f0 [ 236.405123][ T7975] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 236.411014][ T7975] ? __might_fault+0x13b/0x190 [ 236.415772][ T7975] ? __pfx_lock_release+0x10/0x10 [ 236.420787][ T7975] __x64_sys_pselect6+0x183/0x240 [ 236.425802][ T7975] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 236.431333][ T7975] ? __might_fault+0xe3/0x190 [ 236.436023][ T7975] ? rcu_is_watching+0x12/0xc0 [ 236.440786][ T7975] do_syscall_64+0xcd/0x250 [ 236.445298][ T7975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.451199][ T7975] RIP: 0033:0x7f1bf7d85d29 [ 236.455615][ T7975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.475214][ T7975] RSP: 002b:00007f1bf8c7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 236.483618][ T7975] RAX: ffffffffffffffda RBX: 00007f1bf7f75fa0 RCX: 00007f1bf7d85d29 [ 236.491590][ T7975] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 236.499547][ T7975] RBP: 00007f1bf8c7e090 R08: 0000000000000000 R09: 0000000000000000 [ 236.507504][ T7975] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 236.515462][ T7975] R13: 0000000000000000 R14: 00007f1bf7f75fa0 R15: 00007ffc29a9d4b8 [ 236.523444][ T7975] [ 236.611756][ T5893] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 236.644774][ T7973] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 236.670746][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.936572][ T5893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.960216][ T7977] nfs: Unknown parameter '' [ 236.964953][ T5893] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 236.988924][ T5893] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 237.013856][ T5893] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 237.724785][ T5893] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 237.756976][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.791499][ T7971] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 237.804053][ T5893] hub 5-1:1.0: bad descriptor, ignoring hub [ 237.823201][ T5893] hub 5-1:1.0: probe with driver hub failed with error -5 [ 237.841298][ T5893] cdc_wdm 5-1:1.0: skipping garbage [ 237.850867][ T5893] cdc_wdm 5-1:1.0: skipping garbage [ 237.861011][ T5893] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 238.026084][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 238.026205][ T29] audit: type=1400 audit(1735466005.333:628): avc: denied { ioctl } for pid=7985 comm="syz.3.510" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18591 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 238.262952][ T7992] rdma_rxe: rxe_newlink: failed to add lo [ 238.322500][ T29] audit: type=1400 audit(1735466005.473:629): avc: denied { append } for pid=7985 comm="syz.3.510" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 238.346375][ T29] audit: type=1400 audit(1735466005.483:630): avc: denied { ioctl } for pid=7985 comm="syz.3.510" path="/dev/sg0" dev="devtmpfs" ino=746 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 238.527186][ T29] audit: type=1400 audit(1735466005.713:631): avc: denied { ioctl } for pid=7985 comm="syz.3.510" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 239.929999][ T5866] usb 5-1: USB disconnect, device number 23 [ 240.110367][ T8016] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 240.926839][ T29] audit: type=1400 audit(1735466008.233:632): avc: denied { create } for pid=8024 comm="syz.4.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 240.942872][ T5899] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 240.955666][ T29] audit: type=1400 audit(1735466008.263:633): avc: denied { getopt } for pid=8024 comm="syz.4.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 241.592767][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 241.601480][ T5899] usb 2-1: New USB device found, idVendor=0ccd, idProduct=1082, bcdDevice=23.a2 [ 241.610776][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.624956][ T5899] usb 2-1: Product: syz [ 241.634552][ T5899] usb 2-1: Manufacturer: syz [ 241.650145][ T5899] usb 2-1: SerialNumber: syz [ 241.672909][ T5899] usb 2-1: config 0 descriptor?? [ 241.943614][ T8038] sp0: Synchronizing with TNC [ 241.995747][ T8038] sp0: Found TNC [ 242.466641][ T8028] [U] ` [ 242.480400][ T8037] nfs: Unknown parameter '' [ 242.530600][ T8037] syz.0.522: attempt to access beyond end of device [ 242.530600][ T8037] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 242.631929][ T8037] hpfs: hpfs_map_sector(): read error [ 243.613836][ T5899] usb 2-1: USB disconnect, device number 22 [ 243.927666][ T29] audit: type=1400 audit(1735466011.183:634): avc: denied { setopt } for pid=8052 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 244.264708][ T8056] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 244.350151][ T8064] overlayfs: failed to resolve './file1': -2 [ 244.428832][ T8065] overlayfs: failed to resolve './file1': -2 [ 246.492149][ T5863] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 247.452760][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 247.572370][ T8097] sp0: Synchronizing with TNC [ 247.611061][ T8097] sp0: Found TNC [ 248.042447][ T5863] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 248.062294][ T5863] usb 3-1: config 0 has no interface number 0 [ 248.068753][ T5863] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 248.151269][ T8093] [U] ` [ 248.205883][ T5863] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 248.215181][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.223738][ T5863] usb 3-1: Product: syz [ 248.228444][ T5863] usb 3-1: Manufacturer: syz [ 248.233683][ T5863] usb 3-1: SerialNumber: syz [ 248.264453][ T5863] usb 3-1: config 0 descriptor?? [ 248.756059][ T29] audit: type=1400 audit(1735466016.054:635): avc: denied { mount } for pid=8099 comm="syz.0.540" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 248.778045][ T29] audit: type=1400 audit(1735466016.064:636): avc: denied { setattr } for pid=8099 comm="syz.0.540" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 248.802191][ T29] audit: type=1400 audit(1735466016.114:637): avc: denied { write } for pid=8099 comm="syz.0.540" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 248.822858][ T29] audit: type=1400 audit(1735466016.114:638): avc: denied { open } for pid=8099 comm="syz.0.540" path="/111/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 248.924778][ T5863] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71 [ 248.932106][ T5863] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 248.948095][ T5863] usb 3-1: USB disconnect, device number 17 [ 249.069805][ T8112] netlink: 52 bytes leftover after parsing attributes in process `syz.4.542'. [ 249.296491][ T8113] overlayfs: failed to resolve './file1': -2 [ 249.353786][ T8115] overlayfs: failed to resolve './file1': -2 [ 249.924631][ T8109] Bluetooth: MGMT ver 1.23 [ 249.941703][ T29] audit: type=1400 audit(1735466017.234:639): avc: denied { write } for pid=8108 comm="syz.2.543" path="socket:[19944]" dev="sockfs" ino=19944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 250.371502][ T29] audit: type=1400 audit(1735466017.534:640): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 251.252519][ T29] audit: type=1400 audit(1735466018.164:641): avc: denied { connect } for pid=8123 comm="syz.2.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 253.957171][ T8137] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 254.396026][ T8144] 9pnet: Unknown protocol version 9p200 [ 254.407192][ T8144] siw: device registration error -23 [ 255.123211][ T29] audit: type=1400 audit(1735466021.725:642): avc: denied { sqpoll } for pid=8140 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 255.552453][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.558809][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.959679][ T29] audit: type=1400 audit(1735466023.875:643): avc: denied { mount } for pid=8150 comm="syz.2.554" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 257.012221][ T29] audit: type=1400 audit(1735466023.885:644): avc: denied { unmount } for pid=8150 comm="syz.2.554" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 257.400472][ T29] audit: type=1400 audit(1735466024.705:645): avc: denied { module_request } for pid=8160 comm="syz.1.555" kmod="net-pf-13" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 257.421880][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.530436][ T29] audit: type=1400 audit(1735466024.835:646): avc: denied { getopt } for pid=8160 comm="syz.1.555" lport=53234 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 257.553856][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.262566][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.559'. [ 259.311426][ T8177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.559'. [ 259.326730][ T29] audit: type=1400 audit(1735466026.625:647): avc: denied { write } for pid=8174 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 259.376398][ T29] audit: type=1400 audit(1735466026.625:648): avc: denied { nlmsg_write } for pid=8174 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 259.589152][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'. [ 259.614554][ T29] audit: type=1400 audit(1735466026.905:649): avc: denied { bind } for pid=8169 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 259.786222][ T8171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.610697][ T8210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.937661][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.564'. [ 263.046871][ T29] audit: type=1400 audit(1735466030.246:650): avc: denied { execute } for pid=8196 comm="syz.1.564" path="/dev/dsp" dev="devtmpfs" ino=1283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 263.135499][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 263.485266][ T8223] 9pnet: Unknown protocol version 9p200 [ 263.502531][ T8223] siw: device registration error -23 [ 264.147774][ T8227] vivid-002: disconnect [ 265.259590][ T8253] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 265.526249][ T8252] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 265.907525][ T8260] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 266.313715][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 266.651537][ T5866] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 266.661952][ T8219] vivid-002: reconnect [ 266.675358][ T29] audit: type=1400 audit(1735466033.986:651): avc: denied { create } for pid=8266 comm="syz.0.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 267.833729][ T8278] rdma_rxe: rxe_newlink: failed to add lo [ 268.175169][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 268.351075][ T5866] usb 3-1: config index 0 descriptor too short (expected 2066, got 18) [ 268.359383][ T5866] usb 3-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 268.373031][ T5866] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 268.527223][ T5866] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 268.538672][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.547189][ T5866] usb 3-1: Product: syz [ 268.554414][ T5866] usb 3-1: Manufacturer: syz [ 268.559481][ T5866] usb 3-1: SerialNumber: syz [ 269.114880][ T8291] sp0: Synchronizing with TNC [ 269.121072][ T8292] sp0: Found TNC [ 269.171939][ T5866] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 269.180878][ T5866] usb 3-1: no configuration chosen from 1 choice [ 269.260488][ T8283] [U] ` [ 269.926903][ T5866] usb 3-1: USB disconnect, device number 18 [ 270.207112][ T8309] xt_l2tp: invalid flags combination: c [ 270.294505][ T8306] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 270.507878][ T29] audit: type=1400 audit(1735466037.646:652): avc: denied { create } for pid=8304 comm="syz.3.591" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 270.830253][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'. [ 273.049271][ T29] audit: type=1400 audit(1735466040.317:653): avc: denied { bind } for pid=8333 comm="syz.1.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 273.298969][ T29] audit: type=1400 audit(1735466040.607:654): avc: denied { unlink } for pid=5815 comm="syz-executor" name="file0" dev="tmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 273.468338][ T29] audit: type=1400 audit(1735466040.767:655): avc: denied { name_bind } for pid=8338 comm="syz.3.601" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 273.507945][ T8339] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 273.514614][ T8339] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 273.522570][ T8339] vhci_hcd vhci_hcd.0: Device attached [ 273.639386][ T29] audit: type=1400 audit(1735466040.957:656): avc: denied { sys_module } for pid=8333 comm="syz.1.600" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 274.358837][ T25] vhci_hcd: vhci_device speed not set [ 274.418934][ T25] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 274.486863][ T8351] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 274.493516][ T8351] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 274.501698][ T8351] vhci_hcd vhci_hcd.0: Device attached [ 274.543772][ T29] audit: type=1400 audit(1735466041.777:657): avc: denied { read } for pid=8353 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.606455][ T29] audit: type=1400 audit(1735466041.777:658): avc: denied { open } for pid=8353 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.658820][ T29] audit: type=1400 audit(1735466041.777:659): avc: denied { getattr } for pid=8353 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.709050][ T29] audit: type=1400 audit(1735466042.017:660): avc: denied { write } for pid=8349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.719057][ T6004] vhci_hcd: vhci_device speed not set [ 274.732319][ T29] audit: type=1400 audit(1735466042.017:661): avc: denied { add_name } for pid=8349 comm="dhcpcd-run-hook" name="resolv.conf.wlan3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.800449][ T5863] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 274.812869][ T6004] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 274.980361][ T5863] usb 5-1: config 0 has no interfaces? [ 274.985926][ T5863] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 274.995478][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.014022][ T5863] usb 5-1: config 0 descriptor?? [ 275.231096][ T8356] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 275.240308][ T52] vhci_hcd: stop threads [ 275.241547][ T9] usb 5-1: USB disconnect, device number 24 [ 275.244621][ T52] vhci_hcd: release socket [ 275.255785][ T52] vhci_hcd: disconnect device [ 275.834139][ T8403] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 276.473432][ T8343] vhci_hcd: connection reset by peer [ 276.478177][ T5863] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 276.568243][ T5929] vhci_hcd: stop threads [ 276.572866][ T5929] vhci_hcd: release socket [ 276.577312][ T5929] vhci_hcd: disconnect device [ 277.648415][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 277.674695][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 277.674718][ T29] audit: type=1400 audit(1735466044.967:668): avc: denied { mount } for pid=8409 comm="syz.3.608" name="/" dev="sockfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 277.969362][ T8421] openvswitch: netlink: Flow actions attr not present in new flow. [ 277.970129][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.608'. [ 277.978231][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.608'. [ 277.992405][ T29] audit: type=1400 audit(1735466044.977:669): avc: denied { write } for pid=8409 comm="syz.3.608" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 277.992445][ T29] audit: type=1400 audit(1735466044.977:670): avc: denied { open } for pid=8409 comm="syz.3.608" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 278.271004][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.604565][ T5863] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 278.604651][ T5863] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 280.343972][ T5863] usb 3-1: string descriptor 0 read error: -71 [ 280.350252][ T5863] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.359510][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 280.370348][ T5863] usb 3-1: can't set config #1, error -71 [ 280.378522][ T5863] usb 3-1: USB disconnect, device number 19 [ 280.654904][ T6004] vhci_hcd: vhci_device speed not set [ 280.692337][ T25] vhci_hcd: vhci_device speed not set [ 281.730247][ T8460] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 281.736904][ T8460] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 281.744606][ T8460] vhci_hcd vhci_hcd.0: Device attached [ 282.047957][ T969] vhci_hcd: vhci_device speed not set [ 282.355025][ T5899] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 282.677473][ T969] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 282.853790][ T5899] usb 1-1: config 0 has no interfaces? [ 282.861215][ T5899] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 282.877841][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.909432][ T5899] usb 1-1: config 0 descriptor?? [ 283.001083][ T8479] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 283.026983][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.127519][ T5864] usb 1-1: USB disconnect, device number 14 [ 283.134453][ T8467] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 283.307624][ T6254] vhci_hcd: stop threads [ 283.344784][ T6254] vhci_hcd: release socket [ 283.377067][ T6254] vhci_hcd: disconnect device [ 284.083218][ T8508] sp0: Synchronizing with TNC [ 284.102510][ T8508] sp0: Found TNC [ 284.650143][ T8502] [U] ` [ 284.654960][ T29] audit: type=1400 audit(1735466051.968:671): avc: denied { create } for pid=8475 comm="syz.4.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 284.858751][ T8513] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 284.889905][ T29] audit: type=1400 audit(1735466051.988:672): avc: denied { bind } for pid=8475 comm="syz.4.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 285.820456][ T8540] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 285.834707][ T8540] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 285.850624][ T8540] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 285.907642][ T29] audit: type=1400 audit(1735466053.078:673): avc: denied { unlink } for pid=8522 comm="syz.3.627" name="#13" dev="tmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 286.447453][ T29] audit: type=1400 audit(1735466053.668:674): avc: denied { ioctl } for pid=8542 comm="syz.1.631" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 286.473467][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.923165][ T29] audit: type=1400 audit(1735466054.038:675): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 288.527900][ T29] audit: type=1400 audit(1735466055.819:676): avc: denied { create } for pid=8565 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 288.744468][ T29] audit: type=1400 audit(1735466056.019:677): avc: denied { getopt } for pid=8565 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 289.189893][ T8570] fuse: Bad value for 'fd' [ 289.498769][ T969] vhci_hcd: vhci_device speed not set [ 289.554994][ T8563] rdma_rxe: rxe_newlink: failed to add lo [ 290.493036][ T8579] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.170033][ T8592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.274376][ T8593] 9pnet: Unknown protocol version 9p200 [ 294.318013][ T29] audit: type=1400 audit(1735466061.629:678): avc: denied { write } for pid=8608 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 294.685290][ T29] audit: type=1400 audit(1735466061.989:679): avc: denied { ioctl } for pid=8621 comm="syz.4.649" path="socket:[21022]" dev="sockfs" ino=21022 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 295.457574][ T29] audit: type=1400 audit(1735466062.329:680): avc: denied { ioctl } for pid=8617 comm="syz.2.648" path="socket:[21089]" dev="sockfs" ino=21089 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.482897][ T29] audit: type=1400 audit(1735466062.729:681): avc: denied { read } for pid=8615 comm="syz.1.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 295.806399][ T969] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 295.946736][ T8631] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 296.016353][ T969] usb 5-1: Using ep0 maxpacket: 16 [ 296.034157][ T969] usb 5-1: too many configurations: 243, using maximum allowed: 8 [ 296.105060][ T969] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 296.249335][ T969] usb 5-1: can't read configurations, error -61 [ 296.396327][ T5866] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 296.469905][ T969] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 296.672410][ T8651] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 296.686656][ T8651] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 296.702526][ T8651] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 297.118167][ T5866] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 297.126712][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.137662][ T5866] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 297.191919][ T5866] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 297.241032][ T969] usb 5-1: Using ep0 maxpacket: 16 [ 297.358389][ T969] usb 5-1: too many configurations: 243, using maximum allowed: 8 [ 297.359126][ T8656] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 297.387424][ T969] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 297.395940][ T5866] usb 2-1: Manufacturer: syz [ 297.444813][ T969] usb 5-1: can't read configurations, error -61 [ 297.446485][ T5866] usb 2-1: config 0 descriptor?? [ 297.566549][ T969] usb usb5-port1: attempt power cycle [ 297.666083][ T5866] rc_core: IR keymap rc-hauppauge not found [ 297.672029][ T5866] Registered IR keymap rc-empty [ 297.684527][ T5866] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 297.700773][ T29] audit: type=1400 audit(1735466065.010:682): avc: denied { bind } for pid=8660 comm="syz.0.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 297.711391][ T5866] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 297.719908][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.745380][ T29] audit: type=1400 audit(1735466065.050:683): avc: denied { name_bind } for pid=8660 comm="syz.0.655" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 297.768361][ T29] audit: type=1400 audit(1735466065.050:684): avc: denied { node_bind } for pid=8660 comm="syz.0.655" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 297.820188][ T8665] pim6reg: entered allmulticast mode [ 297.868491][ T29] audit: type=1400 audit(1735466065.050:685): avc: denied { name_connect } for pid=8660 comm="syz.0.655" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 297.891061][ T8667] nbd: must specify at least one socket [ 298.231855][ T29] audit: type=1400 audit(1735466065.080:686): avc: denied { read } for pid=5175 comm="acpid" name="event4" dev="devtmpfs" ino=2880 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.326824][ C0] igorplugusb 2-1:0.0: receive overflow, at least 2 lost [ 298.348328][ T29] audit: type=1400 audit(1735466065.080:687): avc: denied { open } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2880 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.550756][ T8634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.571089][ T8634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.736572][ T8685] rdma_rxe: rxe_newlink: failed to add lo [ 299.118713][ T9] usb 2-1: USB disconnect, device number 23 [ 300.908305][ T8702] rdma_rxe: rxe_newlink: failed to add lo [ 301.637880][ T8691] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 302.349668][ T8711] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 302.675531][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 302.675549][ T29] audit: type=1400 audit(1735466069.870:693): avc: denied { append } for pid=8707 comm="syz.2.667" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 303.769198][ T8731] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 303.786248][ T8731] netlink: 'syz.4.671': attribute type 1 has an invalid length. [ 303.793948][ T8731] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.671'. [ 304.398375][ T29] audit: type=1400 audit(1735466071.090:694): avc: denied { name_bind } for pid=8723 comm="syz.4.671" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 304.437282][ T5136] Bluetooth: hci4: command 0x0406 tx timeout [ 304.662097][ T29] audit: type=1400 audit(1735466071.961:695): avc: denied { write } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.721145][ T29] audit: type=1400 audit(1735466071.961:696): avc: denied { remove_name } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.892197][ T5899] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 304.900347][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 304.965036][ T29] audit: type=1400 audit(1735466071.961:697): avc: denied { rename } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 305.165759][ T29] audit: type=1400 audit(1735466071.961:698): avc: denied { add_name } for pid=5172 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.603779][ T29] audit: type=1400 audit(1735466071.961:699): avc: denied { unlink } for pid=5172 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 305.675222][ T5899] usb 3-1: device descriptor read/64, error -32 [ 305.765310][ T29] audit: type=1400 audit(1735466071.971:700): avc: denied { create } for pid=5172 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 306.278516][ T29] audit: type=1400 audit(1735466073.501:701): avc: denied { mount } for pid=8760 comm="syz.1.679" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 306.355136][ T5899] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 306.904325][ T8772] vivid-002: disconnect [ 307.183177][ T8774] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 307.486778][ T5899] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 307.495411][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.570217][ T5899] usb 3-1: string descriptor 0 read error: -71 [ 307.577857][ T5899] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 307.592020][ T5899] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 307.643141][ T5899] usb 3-1: config 0 descriptor?? [ 307.655819][ T5899] usb 3-1: can't set config #0, error -71 [ 307.692409][ T5899] usb 3-1: USB disconnect, device number 21 [ 308.695303][ T29] audit: type=1400 audit(1735466076.011:702): avc: denied { write } for pid=8760 comm="syz.1.679" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 308.717202][ T8794] input: syz1 as /devices/virtual/input/input15 [ 308.767278][ T29] audit: type=1400 audit(1735466076.011:703): avc: denied { ioctl } for pid=8760 comm="syz.1.679" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 309.418238][ T8807] rdma_rxe: rxe_newlink: failed to add lo [ 309.569375][ T8808] siw: device registration error -23 [ 310.102021][ T8765] vivid-002: reconnect [ 311.156223][ T8818] nfs: Unknown parameter '' [ 311.208653][ T8818] syz.0.690: attempt to access beyond end of device [ 311.208653][ T8818] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 311.221809][ T8818] hpfs: hpfs_map_sector(): read error [ 311.964477][ T8822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.040201][ T29] audit: type=1400 audit(1735466079.331:704): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 312.060022][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.267792][ T8834] netlink: 24 bytes leftover after parsing attributes in process `syz.2.689'. [ 312.281200][ T5899] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 312.448037][ T5899] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 312.468536][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.495107][ T5899] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 312.514401][ T5899] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 312.532890][ T5899] usb 5-1: Manufacturer: syz [ 312.552812][ T5899] usb 5-1: config 0 descriptor?? [ 312.559793][ T8840] netlink: 52 bytes leftover after parsing attributes in process `syz.2.696'. [ 312.746855][ T5899] rc_core: IR keymap rc-hauppauge not found [ 312.753224][ T5899] Registered IR keymap rc-empty [ 312.759031][ T5899] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 312.770064][ T5899] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input16 [ 313.058009][ C0] igorplugusb 5-1:0.0: receive overflow, at least 2 lost [ 313.311903][ T8825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.340437][ T8825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.644163][ T5866] usb 5-1: USB disconnect, device number 28 [ 314.435321][ T8856] 9pnet: Unknown protocol version 9p200 [ 314.784960][ T8856] siw: device registration error -23 [ 315.258373][ T8865] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 315.284551][ T5899] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 315.493703][ T5899] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 315.552296][ T5899] usb 2-1: config 0 has no interface number 0 [ 315.583881][ T5899] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 315.596034][ T5899] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 315.619589][ T5899] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 315.633500][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.644463][ T5899] usb 2-1: Product: syz [ 315.659673][ T5899] usb 2-1: Manufacturer: syz [ 315.669265][ T5899] usb 2-1: SerialNumber: syz [ 315.680293][ T5899] usb 2-1: config 0 descriptor?? [ 316.405555][ T8860] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 316.414384][ T5899] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 316.426888][ T5899] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 316.559530][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.706'. [ 316.633659][ T29] audit: type=1400 audit(1735466083.942:705): avc: denied { setopt } for pid=8884 comm="syz.3.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 316.661160][ T29] audit: type=1400 audit(1735466083.952:706): avc: denied { mount } for pid=8884 comm="syz.3.708" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 316.705619][ T29] audit: type=1400 audit(1735466083.952:707): avc: denied { watch watch_reads } for pid=8884 comm="syz.3.708" path="/148/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 316.742815][ T29] audit: type=1400 audit(1735466083.952:708): avc: denied { unmount } for pid=8884 comm="syz.3.708" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 316.788239][ T969] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 316.790730][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.809209][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.907258][ T29] audit: type=1400 audit(1735466084.222:709): avc: denied { read } for pid=8859 comm="syz.1.700" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 316.948387][ T6004] usb 2-1: USB disconnect, device number 24 [ 316.954545][ T969] usb 1-1: Using ep0 maxpacket: 32 [ 316.963213][ T969] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 316.972131][ T969] usb 1-1: config 0 has no interface number 0 [ 316.991689][ T969] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 317.016172][ T6004] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 317.031081][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.062483][ T969] usb 1-1: Product: syz [ 317.068263][ T6004] cyberjack 2-1:0.69: device disconnected [ 317.084564][ T969] usb 1-1: Manufacturer: syz [ 317.096034][ T969] usb 1-1: SerialNumber: syz [ 317.125580][ T969] usb 1-1: config 0 descriptor?? [ 317.148501][ T969] smsc95xx v2.0.0 [ 317.164137][ T29] audit: type=1400 audit(1735466084.242:710): avc: denied { open } for pid=8859 comm="syz.1.700" path="/dev/usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 317.187825][ T29] audit: type=1400 audit(1735466084.252:711): avc: denied { ioctl } for pid=8859 comm="syz.1.700" path="/dev/usbmon6" dev="devtmpfs" ino=734 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 317.212823][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.769108][ T969] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 318.318415][ T969] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 318.342603][ T969] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 318.371174][ T969] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 318.424582][ T969] usb 1-1: USB disconnect, device number 16 [ 319.744844][ T8900] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 320.432948][ T8909] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 321.136249][ T8925] sp0: Synchronizing with TNC [ 321.202451][ T8925] sp0: Found TNC [ 321.584545][ T29] audit: type=1400 audit(1735466088.303:712): avc: denied { accept } for pid=8918 comm="syz.0.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 321.691455][ T8916] [U] ` [ 322.028491][ T8938] nfs: Unknown parameter '' [ 322.045457][ T8938] syz.0.720: attempt to access beyond end of device [ 322.045457][ T8938] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 322.058335][ T8938] hpfs: hpfs_map_sector(): read error [ 322.788341][ T8947] x_tables: duplicate underflow at hook 2 [ 323.066608][ T29] audit: type=1800 audit(1735466090.373:713): pid=8953 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.725" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 323.632981][ T969] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 323.654754][ T29] audit: type=1400 audit(1735466090.973:714): avc: denied { audit_write } for pid=8954 comm="syz.4.726" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 323.852350][ T29] audit: type=1400 audit(1735466091.163:715): avc: denied { bind } for pid=8954 comm="syz.4.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 323.866901][ T8961] Mount JFS Failure: -22 [ 323.896306][ T969] usb 3-1: Using ep0 maxpacket: 32 [ 323.904728][ T969] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 323.912452][ T969] usb 3-1: can't read configurations, error -61 [ 324.072854][ T8961] jfs_mount failed w/return code = -22 [ 324.083106][ T969] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 324.253069][ T969] usb 3-1: Using ep0 maxpacket: 32 [ 324.267131][ T969] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 324.281982][ T969] usb 3-1: can't read configurations, error -61 [ 324.333583][ T29] audit: type=1400 audit(1735466091.593:716): avc: denied { name_bind } for pid=8958 comm="syz.1.727" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 324.342662][ T969] usb usb3-port1: attempt power cycle [ 324.490439][ T29] audit: type=1400 audit(1735466091.593:717): avc: denied { node_bind } for pid=8958 comm="syz.1.727" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 324.542317][ T29] audit: type=1400 audit(1735466091.623:718): avc: denied { listen } for pid=8958 comm="syz.1.727" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 324.698323][ T29] audit: type=1400 audit(1735466092.013:719): avc: denied { accept } for pid=8958 comm="syz.1.727" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 324.739039][ T29] audit: type=1400 audit(1735466092.013:720): avc: denied { write } for pid=8958 comm="syz.1.727" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=42120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 324.792938][ T969] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 324.831411][ T969] usb 3-1: Using ep0 maxpacket: 32 [ 324.842253][ T8976] nbd: must specify a size in bytes for the device [ 324.849758][ T969] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 324.858430][ T969] usb 3-1: can't read configurations, error -61 [ 324.882550][ T8974] nfs: Unknown parameter '' [ 324.882815][ T51] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 324.889809][ T8974] syz.0.729: attempt to access beyond end of device [ 324.889809][ T8974] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 324.941155][ T8974] hpfs: hpfs_map_sector(): read error [ 325.122780][ T969] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 325.153498][ T969] usb 3-1: Using ep0 maxpacket: 32 [ 325.163142][ T51] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 325.188726][ T8983] FAULT_INJECTION: forcing a failure. [ 325.188726][ T8983] name failslab, interval 1, probability 0, space 0, times 0 [ 325.201717][ T8983] CPU: 1 UID: 0 PID: 8983 Comm: syz.1.733 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 325.212304][ T8983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 325.222363][ T8983] Call Trace: [ 325.225645][ T8983] [ 325.228575][ T8983] dump_stack_lvl+0x16c/0x1f0 [ 325.233266][ T8983] should_fail_ex+0x497/0x5b0 [ 325.237951][ T8983] ? fs_reclaim_acquire+0xae/0x150 [ 325.243062][ T8983] should_failslab+0xc2/0x120 [ 325.247743][ T8983] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 325.254076][ T8983] ? __pfx_down_read+0x10/0x10 [ 325.258842][ T8983] ? warn_bogus_irq_restore+0x1/0x30 [ 325.264127][ T8983] ? dh_data_from_key+0x164/0x2d0 [ 325.269162][ T8983] kmemdup_noprof+0x29/0x60 [ 325.273675][ T8983] dh_data_from_key+0x164/0x2d0 [ 325.278532][ T8983] __keyctl_dh_compute+0x3a2/0xf50 [ 325.283649][ T8983] ? finish_task_switch.isra.0+0x212/0xcc0 [ 325.289457][ T8983] ? __pfx___lock_acquire+0x10/0x10 [ 325.294656][ T8983] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 325.300306][ T8983] ? __pfx_lock_release+0x10/0x10 [ 325.305341][ T8983] ? trace_lock_acquire+0x14e/0x1f0 [ 325.310560][ T8983] keyctl_dh_compute+0xd3/0x140 [ 325.315419][ T8983] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 325.320888][ T8983] ? lock_acquire+0x2f/0xb0 [ 325.325390][ T8983] ? __might_fault+0xe3/0x190 [ 325.330073][ T8983] ? __might_fault+0xe3/0x190 [ 325.334759][ T8983] __do_sys_keyctl+0x4df/0x590 [ 325.339526][ T8983] do_syscall_64+0xcd/0x250 [ 325.344037][ T8983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.349936][ T8983] RIP: 0033:0x7f482f785d29 [ 325.354358][ T8983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.373970][ T8983] RSP: 002b:00007f4830560038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 325.382387][ T8983] RAX: ffffffffffffffda RBX: 00007f482f976160 RCX: 00007f482f785d29 [ 325.390351][ T8983] RDX: 0000000020000040 RSI: 0000000020000200 RDI: 0000000000000017 [ 325.398298][ T8983] RBP: 00007f4830560090 R08: 00000000200001c0 R09: 0000000000000000 [ 325.406265][ T8983] R10: 00000000000000d9 R11: 0000000000000246 R12: 0000000000000001 [ 325.414244][ T8983] R13: 0000000000000000 R14: 00007f482f976160 R15: 00007ffeadd11e88 [ 325.422235][ T8983] [ 325.427973][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.442514][ T969] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 325.452466][ T969] usb 3-1: can't read configurations, error -61 [ 325.459202][ T51] usb 5-1: config 0 descriptor?? [ 325.464759][ T969] usb usb3-port1: unable to enumerate USB device [ 325.891988][ T8972] netlink: 72 bytes leftover after parsing attributes in process `syz.4.731'. [ 325.922207][ T8972] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 326.051417][ T51] ath6kl: Failed to submit usb control message: -71 [ 326.058558][ T51] ath6kl: unable to send the bmi data to the device: -71 [ 326.065729][ T51] ath6kl: Unable to send get target info: -71 [ 326.075458][ T51] ath6kl: Failed to init ath6kl core: -71 [ 326.081791][ T51] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 326.100058][ T51] usb 5-1: USB disconnect, device number 29 [ 326.453649][ T8999] sz1: rxe_newlink: already configured on lo [ 327.359504][ T9007] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 328.752072][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.746'. [ 329.688413][ T29] audit: type=1400 audit(1735466096.994:721): avc: denied { accept } for pid=9031 comm="syz.0.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 329.732547][ T29] audit: type=1400 audit(1735466096.994:722): avc: denied { getopt } for pid=9031 comm="syz.0.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 331.012133][ T9052] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 331.018752][ T9052] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 331.026279][ T9052] vhci_hcd vhci_hcd.0: Device attached [ 331.292689][ T969] vhci_hcd: vhci_device speed not set [ 332.120682][ T969] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 332.138324][ T9069] siw: device registration error -23 [ 332.164761][ T9068] sp0: Synchronizing with TNC [ 332.865600][ T9062] [U] [ 332.890536][ T29] audit: type=1400 audit(1735466099.864:723): avc: denied { ioctl } for pid=9066 comm="syz.3.757" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 333.109989][ T5899] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 333.301215][ T9085] fuse: Bad value for 'group_id' [ 333.306354][ T9085] fuse: Bad value for 'group_id' [ 336.397255][ T9055] vhci_hcd: connection reset by peer [ 336.439219][ T5899] usb 3-1: device descriptor read/all, error -71 [ 336.493644][ T5931] vhci_hcd: stop threads [ 336.497933][ T5931] vhci_hcd: release socket [ 336.521630][ T5931] vhci_hcd: disconnect device [ 337.335841][ T969] vhci_hcd: vhci_device speed not set [ 337.403752][ T29] audit: type=1400 audit(1735466104.724:724): avc: denied { ioctl } for pid=9107 comm="syz.3.767" path="socket:[23199]" dev="sockfs" ino=23199 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 337.454075][ T29] audit: type=1400 audit(1735466104.744:725): avc: denied { connect } for pid=9107 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 337.496414][ T9101] nfs: Unknown parameter '' [ 337.521630][ T29] audit: type=1400 audit(1735466104.764:726): avc: denied { getopt } for pid=9102 comm="syz.4.765" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 337.554812][ T9101] syz.2.764: attempt to access beyond end of device [ 337.554812][ T9101] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 337.611626][ T9108] Process accounting resumed [ 337.650721][ T9101] hpfs: hpfs_map_sector(): read error [ 339.335842][ T9133] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 339.342497][ T9133] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 339.350860][ T9133] vhci_hcd vhci_hcd.0: Device attached [ 339.861094][ T969] vhci_hcd: vhci_device speed not set [ 339.891635][ T29] audit: type=1400 audit(1735466107.215:727): avc: denied { setattr } for pid=9140 comm="syz.4.777" name="comm" dev="proc" ino=23252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 339.913298][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.926609][ T969] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 340.738535][ T9143] sp0: Synchronizing with TNC [ 340.850053][ T9138] [U] [ 342.347534][ T9136] vhci_hcd: connection reset by peer [ 342.368585][ T2892] vhci_hcd: stop threads [ 342.377123][ T2892] vhci_hcd: release socket [ 342.384402][ T2892] vhci_hcd: disconnect device [ 343.683788][ T9177] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 344.034721][ T9174] loop7: detected capacity change from 0 to 16384 [ 344.414592][ T29] audit: type=1400 audit(1735466111.735:728): avc: denied { append } for pid=9168 comm="syz.1.783" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 344.619318][ T29] audit: type=1400 audit(1735466111.935:729): avc: denied { create } for pid=9187 comm="syz.2.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 344.769249][ T9190] vivid-002: disconnect [ 345.010459][ T969] vhci_hcd: vhci_device speed not set [ 345.027596][ T29] audit: type=1400 audit(1735466112.335:730): avc: denied { bind } for pid=9187 comm="syz.2.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 345.089842][ T29] audit: type=1400 audit(1735466112.395:731): avc: denied { bind } for pid=9191 comm="syz.0.788" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 345.109784][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.227993][ T29] audit: type=1400 audit(1735466112.395:732): avc: denied { name_bind } for pid=9191 comm="syz.0.788" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 346.211754][ T29] audit: type=1400 audit(1735466112.395:733): avc: denied { node_bind } for pid=9191 comm="syz.0.788" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 346.653212][ T9207] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 346.659848][ T9207] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 346.667393][ T9207] vhci_hcd vhci_hcd.0: Device attached [ 347.318586][ T9208] [U] [ 347.451075][ T25] vhci_hcd: vhci_device speed not set [ 347.646634][ T51] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 347.790357][ T25] usb 33-1: new full-speed USB device number 4 using vhci_hcd [ 347.801747][ T9190] vivid-002: reconnect [ 347.812715][ T9222] netlink: 64 bytes leftover after parsing attributes in process `syz.4.795'. [ 347.882646][ T51] usb 1-1: config 0 has no interfaces? [ 347.888316][ T51] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 347.890110][ T5899] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 347.897543][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.914831][ T51] usb 1-1: config 0 descriptor?? [ 348.324034][ T9212] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 348.350367][ T12] vhci_hcd: stop threads [ 348.354716][ T12] vhci_hcd: release socket [ 348.362503][ T12] vhci_hcd: disconnect device [ 348.389819][ T8] usb 1-1: USB disconnect, device number 17 [ 348.400159][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 348.421726][ T5899] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 348.430887][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 348.439726][ T5899] usb 3-1: Product: syz [ 348.444657][ T5899] usb 3-1: Manufacturer: syz [ 348.450171][ T5899] usb 3-1: SerialNumber: syz [ 348.465754][ T5899] usb 3-1: config 0 descriptor?? [ 348.471466][ T9217] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 348.588087][ T9239] smc: net device bond0 applied user defined pnetid SYZ0 [ 348.686042][ T29] audit: type=1400 audit(1735466116.006:734): avc: denied { read } for pid=9238 comm="syz.4.801" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 348.739644][ T29] audit: type=1400 audit(1735466116.006:735): avc: denied { open } for pid=9238 comm="syz.4.801" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 348.905733][ T9247] vlan0: entered promiscuous mode [ 350.020892][ T9239] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 350.028072][ T9239] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 350.050231][ T9239] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 350.056178][ T9239] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 350.077338][ T8] usb 3-1: USB disconnect, device number 28 [ 350.085021][ T9239] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 350.091655][ T9239] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 350.119700][ T9239] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 350.340333][ T9265] sp0: Synchronizing with TNC [ 350.474731][ T29] audit: type=1326 audit(1735466117.786:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482f785d29 code=0x7ffc0000 [ 350.629903][ T969] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 350.737334][ T29] audit: type=1326 audit(1735466117.826:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f482f785d29 code=0x7ffc0000 [ 350.760822][ T29] audit: type=1326 audit(1735466117.896:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482f785d29 code=0x7ffc0000 [ 350.784648][ T29] audit: type=1326 audit(1735466117.956:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482f785d29 code=0x7ffc0000 [ 350.808295][ T29] audit: type=1326 audit(1735466118.056:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f482f785d29 code=0x7ffc0000 [ 350.834358][ T29] audit: type=1326 audit(1735466118.056:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482f785d29 code=0x7ffc0000 [ 350.858958][ T969] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.869156][ T5136] Bluetooth: hci1: command 0x0406 tx timeout [ 350.875582][ T29] audit: type=1326 audit(1735466118.056:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482f785d29 code=0x7ffc0000 [ 350.898760][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.904878][ T969] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 350.913878][ T969] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 350.926328][ T969] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 350.937237][ T29] audit: type=1326 audit(1735466118.056:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f482f785d29 code=0x7ffc0000 [ 350.960350][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.966459][ T969] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 350.975589][ T969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.984338][ T29] audit: type=1326 audit(1735466118.056:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482f785d29 code=0x7ffc0000 [ 351.007639][ T29] audit: type=1326 audit(1735466118.056:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.1.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482f785d29 code=0x7ffc0000 [ 351.030810][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.040761][ T9268] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 351.050842][ T969] hub 5-1:1.0: bad descriptor, ignoring hub [ 351.056784][ T969] hub 5-1:1.0: probe with driver hub failed with error -5 [ 351.064410][ T969] cdc_wdm 5-1:1.0: skipping garbage [ 351.074210][ T969] cdc_wdm 5-1:1.0: skipping garbage [ 351.082373][ T969] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 351.215127][ T9281] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 351.540911][ T9284] bridge0: port 3(erspan0) entered blocking state [ 351.547852][ T9284] bridge0: port 3(erspan0) entered disabled state [ 351.556183][ T9284] erspan0: entered allmulticast mode [ 351.567909][ T9284] erspan0: entered promiscuous mode [ 351.578183][ T9284] bridge0: port 3(erspan0) entered blocking state [ 351.584817][ T9284] bridge0: port 3(erspan0) entered forwarding state [ 351.881241][ T5830] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 352.029734][ T5863] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 352.383148][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 352.387665][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 352.389254][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 352.435654][ T51] libceph: connect (1)[c::]:6789 error -101 [ 352.443873][ T51] libceph: mon0 (1)[c::]:6789 connect error [ 352.551197][ T5863] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.565806][ T5863] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.574839][ T9292] ceph: No mds server is up or the cluster is laggy [ 352.576458][ T5863] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 352.597142][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 352.605630][ T5863] usb 2-1: SerialNumber: syz [ 352.729112][ T9298] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 352.901316][ T5863] usb 2-1: 0:2 : does not exist [ 352.906485][ T5863] usb 2-1: unit 5: unexpected type 0x09 [ 352.985271][ T25] vhci_hcd: vhci_device speed not set [ 353.055725][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 353.107377][ T5863] usb 2-1: USB disconnect, device number 25 [ 353.305932][ T9088] udevd[9088]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.739559][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 353.856235][ T5136] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 353.979756][ T9322] rdma_rxe: rxe_newlink: failed to add lo [ 354.459381][ T5136] Bluetooth: hci3: command 0x0406 tx timeout [ 354.466549][ T5136] Bluetooth: hci2: command 0x0406 tx timeout [ 354.559557][ T51] usb 5-1: USB disconnect, device number 30 [ 355.811848][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 355.811866][ T29] audit: type=1400 audit(1735466122.437:785): avc: denied { read } for pid=9329 comm="syz.2.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 355.815871][ T9339] siw: device registration error -23 [ 357.001794][ T9343] [U] [ 359.282654][ T29] audit: type=1400 audit(1735466125.217:786): avc: denied { write } for pid=9367 comm="syz.2.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 359.332348][ T29] audit: type=1400 audit(1735466126.657:787): avc: denied { read } for pid=9367 comm="syz.2.834" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 359.356723][ T29] audit: type=1400 audit(1735466126.677:788): avc: denied { open } for pid=9367 comm="syz.2.834" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 359.380492][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.534984][ T29] audit: type=1400 audit(1735466126.677:789): avc: denied { ioctl } for pid=9367 comm="syz.2.834" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 361.509155][ T9395] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 361.535144][ C0] vkms_vblank_simulate: vblank timer overrun [ 362.048730][ T9401] rdma_rxe: rxe_newlink: failed to add lo [ 362.279731][ T9403] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 362.616544][ T9405] siw: device registration error -23 [ 364.323633][ T9414] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 365.356512][ T9435] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 365.382486][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.622665][ T9440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.430886][ T9449] Cannot find add_set index 3 as target [ 367.015330][ T5899] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 367.157856][ T51] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 368.441005][ T5899] usb 3-1: config 76 descriptor has 1 excess byte, ignoring [ 368.448576][ T5899] usb 3-1: config 76 has 0 interfaces, different from the descriptor's value: 1 [ 368.465948][ T5899] usb 3-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 369.038599][ T9462] siw: device registration error -23 [ 369.531607][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.539781][ T5899] usb 3-1: Product: syz [ 369.544005][ T5899] usb 3-1: Manufacturer: syz [ 369.548726][ T5899] usb 3-1: SerialNumber: syz [ 369.765653][ T5899] usb 3-1: USB disconnect, device number 29 [ 370.035318][ T51] usb 5-1: device descriptor read/all, error -71 [ 371.699082][ T9490] rdma_rxe: rxe_newlink: failed to add lo [ 371.751205][ T9493] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 372.067047][ T9475] FAULT_INJECTION: forcing a failure. [ 372.067047][ T9475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.080810][ T9475] CPU: 1 UID: 0 PID: 9475 Comm: syz.2.859 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 372.091424][ T9475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 372.101467][ T9475] Call Trace: [ 372.104724][ T9475] [ 372.107634][ T9475] dump_stack_lvl+0x16c/0x1f0 [ 372.112313][ T9475] should_fail_ex+0x497/0x5b0 [ 372.117004][ T9475] _copy_from_user+0x2e/0xd0 [ 372.121582][ T9475] kstrtouint_from_user+0xd7/0x1c0 [ 372.126688][ T9475] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 372.132404][ T9475] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 372.138029][ T9475] proc_fail_nth_write+0x84/0x250 [ 372.143067][ T9475] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 372.148700][ T9475] ? ksys_write+0x12b/0x250 [ 372.153194][ T9475] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 372.158804][ T9475] vfs_write+0x24c/0x1150 [ 372.163113][ T9475] ? __fget_files+0x1fc/0x3a0 [ 372.167766][ T9475] ? __pfx___mutex_lock+0x10/0x10 [ 372.172771][ T9475] ? __pfx_vfs_write+0x10/0x10 [ 372.177514][ T9475] ? __fget_files+0x206/0x3a0 [ 372.182171][ T9475] ksys_write+0x12b/0x250 [ 372.186476][ T9475] ? __pfx_ksys_write+0x10/0x10 [ 372.191300][ T9475] ? __might_fault+0xe3/0x190 [ 372.195957][ T9475] ? rcu_is_watching+0x12/0xc0 [ 372.200699][ T9475] do_syscall_64+0xcd/0x250 [ 372.205183][ T9475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.211052][ T9475] RIP: 0033:0x7fd5f7f847df [ 372.215448][ T9475] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 372.235058][ T9475] RSP: 002b:00007fd5f8d9d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 372.243445][ T9475] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd5f7f847df [ 372.251392][ T9475] RDX: 0000000000000001 RSI: 00007fd5f8d9d0a0 RDI: 000000000000000a [ 372.259337][ T9475] RBP: 00007fd5f8d9d090 R08: 0000000000000000 R09: 0000000000000000 [ 372.267283][ T9475] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 372.275231][ T9475] R13: 0000000000000000 R14: 00007fd5f8175fa0 R15: 00007ffc31661b48 [ 372.283186][ T9475] [ 374.123550][ T9519] siw: device registration error -23 [ 374.663922][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'. [ 374.673264][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'. [ 375.654126][ T9541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 376.586678][ T29] audit: type=1400 audit(1735466143.899:790): avc: denied { map } for pid=9537 comm="syz.4.876" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 377.088275][ T9557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.293754][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.300246][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.476658][ T8] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 379.630909][ T9580] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 379.676414][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 379.687833][ T8] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 379.706339][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.766847][ T8] usb 3-1: config 0 descriptor?? [ 380.430573][ T8] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 380.747620][ T9573] fuse: Bad value for 'group_id' [ 380.752652][ T9573] fuse: Bad value for 'group_id' [ 380.833476][ T9597] nfs: Unknown parameter '' [ 380.884267][ T9597] syz.3.883: attempt to access beyond end of device [ 380.884267][ T9597] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 380.910428][ T9604] nfs: Unknown parameter '' [ 380.937736][ T9604] syz.1.887: attempt to access beyond end of device [ 380.937736][ T9604] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 380.957393][ T9597] hpfs: hpfs_map_sector(): read error [ 381.018904][ T9604] hpfs: hpfs_map_sector(): read error [ 381.132601][ T9607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.527669][ T8] gspca_vc032x: reg_w err -110 [ 381.532693][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.538234][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.548442][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.553817][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.565313][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.581485][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.737027][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.742833][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.748297][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.753985][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.759411][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.764756][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.770194][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.775547][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.780917][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.786333][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.791676][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.797023][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 381.802443][ T8] gspca_vc032x: Unknown sensor... [ 381.807888][ T8] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 382.715620][ T5863] usb 3-1: USB disconnect, device number 30 [ 382.843587][ T9614] input: syz1 as /devices/virtual/input/input17 [ 383.154853][ T9617] netlink: 830 bytes leftover after parsing attributes in process `syz.2.895'. [ 383.589823][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.900'. [ 384.466645][ T9646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 384.477028][ T29] audit: type=1400 audit(1735466151.800:791): avc: denied { map } for pid=9645 comm="syz.0.906" path="/proc/730/task/731/attr/prev" dev="proc" ino=26708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 384.554687][ T9650] netlink: 'syz.2.908': attribute type 2 has an invalid length. [ 384.571814][ T9650] : entered promiscuous mode [ 384.721484][ T9657] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 384.748217][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.936053][ T8] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 385.054207][ T9642] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 385.259710][ T8] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 385.284163][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.312105][ T8] usb 5-1: config 0 has no interface number 0 [ 385.328562][ T29] audit: type=1400 audit(1735466152.640:792): avc: denied { ioctl } for pid=9661 comm="syz.3.910" path="socket:[26866]" dev="sockfs" ino=26866 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 385.354292][ T8] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 385.368336][ T8] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.405043][ T8] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 385.414535][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.422788][ T8] usb 5-1: Product: syz [ 385.428127][ T8] usb 5-1: Manufacturer: syz [ 385.432832][ T8] usb 5-1: SerialNumber: syz [ 385.457898][ T8] usb 5-1: config 0 descriptor?? [ 385.711012][ T29] audit: type=1400 audit(1735466153.030:793): avc: denied { mount } for pid=9643 comm="syz.4.905" name="/" dev="configfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 385.733529][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.766147][ T9673] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 385.790158][ T9673] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 385.824512][ T9673] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 385.985640][ T969] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 386.139511][ T969] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.160395][ T969] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 386.174204][ T969] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 386.190407][ T969] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 386.239499][ T969] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 386.252623][ T29] audit: type=1400 audit(1735466153.580:794): avc: denied { setattr } for pid=9643 comm="syz.4.905" name="/" dev="configfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 386.275600][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.304575][ T9671] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 386.323932][ T969] hub 3-1:1.0: bad descriptor, ignoring hub [ 386.331358][ T969] hub 3-1:1.0: probe with driver hub failed with error -5 [ 386.347043][ T969] cdc_wdm 3-1:1.0: skipping garbage [ 386.352452][ T969] cdc_wdm 3-1:1.0: skipping garbage [ 386.361943][ T969] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 386.779433][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.916'. [ 386.961158][ T8] usb 5-1: USB disconnect, device number 33 [ 388.101617][ T29] audit: type=1400 audit(1735466155.420:795): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 388.160935][ T9691] FAULT_INJECTION: forcing a failure. [ 388.160935][ T9691] name failslab, interval 1, probability 0, space 0, times 0 [ 388.175378][ T9691] CPU: 0 UID: 0 PID: 9691 Comm: syz.1.918 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 388.185989][ T9691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 388.196061][ T9691] Call Trace: [ 388.199350][ T9691] [ 388.202282][ T9691] dump_stack_lvl+0x16c/0x1f0 [ 388.206977][ T9691] should_fail_ex+0x497/0x5b0 [ 388.211657][ T9691] ? fs_reclaim_acquire+0xae/0x150 [ 388.216760][ T9691] should_failslab+0xc2/0x120 [ 388.221434][ T9691] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 388.227142][ T9691] ? kasan_save_stack+0x33/0x60 [ 388.231978][ T9691] ? __d_alloc+0x31/0xaa0 [ 388.236298][ T9691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.242357][ T9691] __d_alloc+0x31/0xaa0 [ 388.246504][ T9691] d_alloc_pseudo+0x1c/0xc0 [ 388.250998][ T9691] alloc_file_pseudo+0xdc/0x210 [ 388.255838][ T9691] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 388.261286][ T9691] ? alloc_fd+0x41f/0x760 [ 388.265601][ T9691] ? __pfx_lock_release+0x10/0x10 [ 388.270614][ T9691] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 388.275976][ T9691] __anon_inode_getfile+0x136/0x3d0 [ 388.281168][ T9691] ? _raw_spin_unlock+0x28/0x50 [ 388.286005][ T9691] ? __pfx___anon_inode_getfile+0x10/0x10 [ 388.291723][ T9691] anon_inode_getfd+0x52/0xb0 [ 388.296387][ T9691] __x64_sys_fsopen+0x18b/0x240 [ 388.301230][ T9691] do_syscall_64+0xcd/0x250 [ 388.305728][ T9691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.311609][ T9691] RIP: 0033:0x7f482f785d29 [ 388.316009][ T9691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.335601][ T9691] RSP: 002b:00007f48305a2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 388.343999][ T9691] RAX: ffffffffffffffda RBX: 00007f482f975fa0 RCX: 00007f482f785d29 [ 388.351955][ T9691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 388.359911][ T9691] RBP: 00007f48305a2090 R08: 0000000000000000 R09: 0000000000000000 [ 388.367877][ T9691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.375832][ T9691] R13: 0000000000000001 R14: 00007f482f975fa0 R15: 00007ffeadd11e88 [ 388.383799][ T9691] [ 388.710994][ T5819] Bluetooth: hci5: command 0x1003 tx timeout [ 388.721171][ T5136] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 389.335312][ T8] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 389.621381][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.635196][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 389.645899][ T9713] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 389.789919][ T8] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 389.923027][ T5866] usb 3-1: USB disconnect, device number 31 [ 389.929146][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 389.942236][ T8] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 390.051327][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.092405][ T9693] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 390.280154][ T8] hub 1-1:1.0: bad descriptor, ignoring hub [ 390.375249][ T8] hub 1-1:1.0: probe with driver hub failed with error -5 [ 390.425497][ T5866] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 390.571021][ T8] cdc_wdm 1-1:1.0: skipping garbage [ 390.614276][ T8] cdc_wdm 1-1:1.0: skipping garbage [ 390.632660][ T8] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 390.887232][ T5866] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 390.968827][ T5866] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 390.978909][ T5866] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 390.988011][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.035425][ T9705] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 391.056338][ T5866] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 391.762105][ T9705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.787155][ T9705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.042935][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.933'. [ 392.530432][ T29] audit: type=1400 audit(1735466159.851:796): avc: denied { connect } for pid=9743 comm="syz.1.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 392.633922][ T9752] virtio-fs: tag <(null)> not found [ 392.635541][ T29] audit: type=1400 audit(1735466159.951:797): avc: denied { watch } for pid=9743 comm="syz.1.934" path="/192" dev="tmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 392.714914][ T5136] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 393.065041][ T8] usb 1-1: USB disconnect, device number 18 [ 394.114665][ T29] audit: type=1400 audit(1735466161.421:798): avc: denied { mounton } for pid=9767 comm="syz.0.939" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 394.241970][ T9771] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 394.349141][ T8] usb 3-1: USB disconnect, device number 32 [ 394.495346][ T9782] nbd: must specify a size in bytes for the device [ 394.636666][ T5863] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 394.824716][ T51] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 394.985362][ T51] usb 2-1: Using ep0 maxpacket: 32 [ 395.005695][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 395.013010][ T51] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 395.022266][ T5863] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 395.030538][ T51] usb 2-1: config 0 has no interface number 0 [ 395.045041][ T5863] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 395.063710][ T5863] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 395.074170][ T51] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=ba.af [ 395.085653][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.093944][ T51] usb 2-1: Product: syz [ 395.098303][ T5863] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 395.108589][ T51] usb 2-1: Manufacturer: syz [ 395.113221][ T51] usb 2-1: SerialNumber: syz [ 395.117897][ T5863] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.131634][ T5863] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 395.140774][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.151203][ T51] usb 2-1: config 0 descriptor?? [ 395.163837][ T51] usb_ehset_test 2-1:0.83: probe with driver usb_ehset_test failed with error -32 [ 395.354011][ T9796] trusted_key: encrypted_key: master key parameter ':]w=B螠W:32Ӄ-|dA,ΐ~dd7XI/.E<+=@`J۸@4ojptW4=׫ѭ[c,"Ҡ<6%Urr+)8ؿ#^͖* h(œJ5DR`!{־29;chfGhq3#i^9DY' is invalid [ 395.475366][ T5863] usb 5-1: usb_control_msg returned -32 [ 395.493325][ T5863] usbtmc 5-1:16.0: can't read capabilities [ 396.086668][ T9805] sz1: rxe_newlink: already configured on lo [ 396.327630][ T9808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.354587][ T9808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.451967][ T9808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.462450][ T5899] usb 2-1: USB disconnect, device number 26 [ 396.493602][ T9808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.607138][ T9820] sp0: Synchronizing with TNC [ 397.615749][ T9820] sp0: Found TNC [ 397.898078][ T8] usb 5-1: USB disconnect, device number 34 [ 398.087947][ T9821] rdma_rxe: rxe_newlink: failed to add lo [ 398.502576][ T9816] [U] ` [ 399.078090][ T29] audit: type=1400 audit(1735466166.402:799): avc: denied { create } for pid=9825 comm="syz.1.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 399.461934][ T29] audit: type=1400 audit(1735466166.402:800): avc: denied { ioctl } for pid=9825 comm="syz.1.954" path="socket:[28344]" dev="sockfs" ino=28344 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 399.475170][ T9834] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 399.486713][ T29] audit: type=1400 audit(1735466166.402:801): avc: denied { write } for pid=9825 comm="syz.1.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 399.534039][ T9834] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 399.563561][ T9834] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 399.993934][ T8] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 400.450559][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.462853][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 400.512790][ T8] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 400.541628][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 400.567685][ T8] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 400.582760][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.182873][ T9837] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 401.191891][ T8] hub 3-1:1.0: bad descriptor, ignoring hub [ 401.197932][ T8] hub 3-1:1.0: probe with driver hub failed with error -5 [ 401.205502][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 401.210765][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 401.216210][ T8] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 401.333205][ T29] audit: type=1400 audit(1735466168.652:802): avc: denied { listen } for pid=9864 comm="syz.0.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 401.333974][ T5899] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 401.417942][ T9866] rdma_rxe: rxe_newlink: failed to add lo [ 401.756563][ T5899] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 401.771719][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.784115][ T5899] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 401.793806][ T5899] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 401.801929][ T5899] usb 2-1: Manufacturer: syz [ 401.813752][ T5899] usb 2-1: config 0 descriptor?? [ 401.979340][ T5899] rc_core: IR keymap rc-hauppauge not found [ 401.994874][ T5899] Registered IR keymap rc-empty [ 402.000185][ T5899] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 402.034076][ T5899] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input20 [ 402.047252][ T9877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.969'. [ 402.065205][ T9877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.969'. [ 402.682481][ T9889] nfs: Unknown parameter '' [ 402.868288][ C0] igorplugusb 2-1:0.0: receive overflow, at least 2 lost [ 403.125302][ T9857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.134143][ T9857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.380359][ T6004] usb 2-1: USB disconnect, device number 27 [ 403.496833][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 404.016878][ T5863] usb 3-1: USB disconnect, device number 33 [ 407.280092][ T9932] netlink: 'syz.1.981': attribute type 12 has an invalid length. [ 409.509071][ T9967] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 409.545002][ T9975] nfs: Unknown parameter '' [ 409.590757][ T9967] kvm: pic: non byte read [ 409.602174][ T9967] kvm: pic: non byte read [ 409.608842][ T9967] kvm: pic: non byte read [ 409.611696][ T9975] syz.2.989: attempt to access beyond end of device [ 409.611696][ T9975] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 409.617691][ T9967] kvm: pic: non byte read [ 409.632088][ T9967] kvm: pic: non byte read [ 409.636954][ T6004] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 409.669871][ T9967] kvm: pic: non byte read [ 409.674713][ T9975] hpfs: hpfs_map_sector(): read error [ 409.789176][ T6004] usb 2-1: device descriptor read/64, error -71 [ 410.076837][ T6004] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 410.483100][ T6004] usb 2-1: device descriptor read/64, error -71 [ 410.666642][ T6004] usb usb2-port1: attempt power cycle [ 410.862825][ T29] audit: type=1400 audit(1735466178.113:803): avc: denied { bind } for pid=9989 comm="syz.0.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 410.884063][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.045769][ T9994] syz.0.994 (9994): drop_caches: 2 [ 412.054171][ T9994] syz.0.994 (9994): drop_caches: 2 [ 517.082510][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 517.089485][ C1] rcu: 0-...!: (1 GPs behind) idle=a214/1/0x4000000000000000 softirq=33435/33436 fqs=0 [ 517.100295][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9996/3:b..l P9965/2:b..l [ 517.109353][ C1] rcu: (detected by 1, t=10502 jiffies, g=24297, q=36287 ncpus=2) [ 517.117242][ C1] Sending NMI from CPU 1 to CPUs 0: [ 517.117267][ C0] NMI backtrace for cpu 0 [ 517.117278][ C0] CPU: 0 UID: 0 PID: 9993 Comm: syz.4.995 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 517.117294][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 517.117301][ C0] RIP: 0010:write_comp_data+0x0/0x90 [ 517.117323][ C0] Code: 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 c3 cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <49> 89 d2 49 89 f8 49 89 f1 65 48 8b 15 bf c2 69 7e 65 8b 05 c0 c2 [ 517.117335][ C0] RSP: 0018:ffffc90000007db8 EFLAGS: 00000046 [ 517.117346][ C0] RAX: dffffc0000000000 RBX: ffff88802822d340 RCX: ffffffff8b260b48 [ 517.117356][ C0] RDX: ffff88802822d340 RSI: ffff88802822d340 RDI: 0000000000000006 [ 517.117365][ C0] RBP: ffff88802822d340 R08: 0000000000000005 R09: 000000000000001f [ 517.117374][ C0] R10: 0000000000000003 R11: 0000000000000002 R12: ffff8880b862ca00 [ 517.117382][ C0] R13: 0000000000000008 R14: ffff8880b862ca00 R15: ffffffff89415480 [ 517.117391][ C0] FS: 00007f7d8366f6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 517.117406][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 517.117415][ C0] CR2: 000000110c3c6180 CR3: 000000005a04c000 CR4: 00000000003526f0 [ 517.117424][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 517.117432][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 517.117441][ C0] Call Trace: [ 517.117447][ C0] [ 517.117454][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 517.117470][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 517.117483][ C0] ? nmi_handle+0x1ac/0x5d0 [ 517.117498][ C0] ? __pfx_write_comp_data+0x10/0x10 [ 517.117513][ C0] ? default_do_nmi+0x6a/0x160 [ 517.117527][ C0] ? exc_nmi+0x170/0x1e0 [ 517.117539][ C0] ? end_repeat_nmi+0xf/0x53 [ 517.117557][ C0] ? __pfx_advance_sched+0x10/0x10 [ 517.117572][ C0] ? timerqueue_add+0x48/0x330 [ 517.117592][ C0] ? __pfx_write_comp_data+0x10/0x10 [ 517.117607][ C0] ? __pfx_write_comp_data+0x10/0x10 [ 517.117622][ C0] ? __pfx_write_comp_data+0x10/0x10 [ 517.117638][ C0] [ 517.117642][ C0] [ 517.117646][ C0] timerqueue_add+0x48/0x330 [ 517.117665][ C0] ? __pfx_advance_sched+0x10/0x10 [ 517.117677][ C0] enqueue_hrtimer+0x1c9/0x3c0 [ 517.117696][ C0] __hrtimer_run_queues+0x903/0xae0 [ 517.117715][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 517.117732][ C0] ? read_tsc+0x9/0x20 [ 517.117751][ C0] hrtimer_interrupt+0x392/0x8e0 [ 517.117773][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 517.117790][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 517.117807][ C0] [ 517.117811][ C0] [ 517.117815][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 517.117833][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 517.117850][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 72 4a f6 48 89 df e8 ee f1 4a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 e5 d6 3b f6 65 8b 05 a6 92 d7 74 85 c0 74 16 5b [ 517.117862][ C0] RSP: 0018:ffffc900040ef818 EFLAGS: 00000246 [ 517.117873][ C0] RAX: 0000000000000002 RBX: ffff88807dc4a800 RCX: 1ffffffff2dd39c4 [ 517.117882][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd9e0 RDI: ffffffff8bd1eda0 [ 517.117891][ C0] RBP: 0000000000000286 R08: 0000000000000001 R09: fffffbfff2dca3af [ 517.117900][ C0] R10: ffffffff96e51d7f R11: 0000000000000004 R12: 0000000000000002 [ 517.117908][ C0] R13: ffff88807dc4a840 R14: ffff88807dc4a1e8 R15: ffff88807dc4a668 [ 517.117928][ C0] __unix_dgram_recvmsg+0x32a/0xe50 [ 517.117950][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 517.117967][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 517.117986][ C0] ? find_held_lock+0x2d/0x110 [ 517.118006][ C0] ? __might_fault+0x13b/0x190 [ 517.118026][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 517.118045][ C0] ____sys_recvmsg+0x5f8/0x6b0 [ 517.118064][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 517.118084][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 517.118099][ C0] ___sys_recvmsg+0x115/0x1a0 [ 517.118114][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 517.118126][ C0] ? find_held_lock+0x2d/0x110 [ 517.118149][ C0] ? __pfx___might_resched+0x10/0x10 [ 517.118165][ C0] ? __might_fault+0xe3/0x190 [ 517.118183][ C0] do_recvmmsg+0x2f8/0x740 [ 517.118197][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 517.118217][ C0] ? __might_fault+0x13b/0x190 [ 517.118233][ C0] ? __pfx_lock_release+0x10/0x10 [ 517.118249][ C0] __x64_sys_recvmmsg+0x239/0x290 [ 517.118263][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 517.118276][ C0] ? __might_fault+0xe3/0x190 [ 517.118293][ C0] ? rcu_is_watching+0x12/0xc0 [ 517.118312][ C0] do_syscall_64+0xcd/0x250 [ 517.118330][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.118347][ C0] RIP: 0033:0x7f7d82785d29 [ 517.118359][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.118370][ C0] RSP: 002b:00007f7d8366f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 517.118383][ C0] RAX: ffffffffffffffda RBX: 00007f7d82976080 RCX: 00007f7d82785d29 [ 517.118391][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 517.118400][ C0] RBP: 00007f7d82801b08 R08: 0000000000000000 R09: 0000000000000000 [ 517.118408][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 517.118416][ C0] R13: 0000000000000000 R14: 00007f7d82976080 R15: 00007ffce334fe78 [ 517.118430][ C0] [ 517.119263][ C1] task:syz.3.991 state:R running task stack:25664 pid:9965 tgid:9964 ppid:5815 flags:0x00004002 [ 517.666172][ C1] Call Trace: [ 517.669459][ C1] [ 517.672391][ C1] __schedule+0xe58/0x5ad0 [ 517.676813][ C1] ? mark_lock+0xb5/0xc60 [ 517.681146][ C1] ? __pfx_mark_lock+0x10/0x10 [ 517.685907][ C1] ? __pfx_mark_lock+0x10/0x10 [ 517.690669][ C1] ? __pfx_mark_lock+0x10/0x10 [ 517.695438][ C1] ? __pfx___schedule+0x10/0x10 [ 517.700311][ C1] ? mark_held_locks+0x9f/0xe0 [ 517.705076][ C1] preempt_schedule_irq+0x51/0x90 [ 517.710107][ C1] irqentry_exit+0x36/0x90 [ 517.714522][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 517.720506][ C1] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 517.726397][ C1] Code: b8 ff ff ff ff 65 0f c1 05 30 c2 8b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 517.746001][ C1] RSP: 0018:ffffc90002ff71d8 EFLAGS: 00000206 [ 517.752070][ C1] RAX: 0000000000000046 RBX: 1ffff920005fee3c RCX: 00000000ae5441a4 [ 517.760036][ C1] RDX: 0000000000000001 RSI: ffffffff8b6cdce0 RDI: ffffffff8bd1eda0 [ 517.768004][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dca398 [ 517.775981][ C1] R10: ffffffff96e51cc7 R11: 0000000000000003 R12: 0000000000000000 [ 517.783973][ C1] R13: ffffffff8e1bb900 R14: 0000000000000000 R15: 0000000000000000 [ 517.791968][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 517.797605][ C1] ? rcu_is_watching+0x12/0xc0 [ 517.802371][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 517.807575][ C1] ? filemap_map_pages+0x182/0x16b0 [ 517.812772][ C1] ? lock_acquire+0x2f/0xb0 [ 517.817273][ C1] ? filemap_map_pages+0x182/0x16b0 [ 517.822469][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 517.827929][ C1] filemap_map_pages+0x188/0x16b0 [ 517.832950][ C1] ? filemap_map_pages+0x182/0x16b0 [ 517.838146][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 517.843343][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 517.848551][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 517.854010][ C1] ? do_pte_missing+0xce7/0x3e00 [ 517.858950][ C1] ? lock_acquire+0x2f/0xb0 [ 517.863448][ C1] ? do_pte_missing+0xce7/0x3e00 [ 517.868390][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 517.873846][ C1] do_pte_missing+0xda6/0x3e00 [ 517.878620][ C1] __handle_mm_fault+0x103c/0x2a40 [ 517.883743][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 517.889199][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 517.894845][ C1] ? find_vma+0xc0/0x140 [ 517.899086][ C1] ? __pfx_find_vma+0x10/0x10 [ 517.903763][ C1] handle_mm_fault+0x3fa/0xaa0 [ 517.908533][ C1] do_user_addr_fault+0x7a3/0x13f0 [ 517.913647][ C1] exc_page_fault+0x5c/0xc0 [ 517.918157][ C1] asm_exc_page_fault+0x26/0x30 [ 517.923009][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 517.928816][ C1] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 517.948506][ C1] RSP: 0018:ffffc90002ff7858 EFLAGS: 00050202 [ 517.954571][ C1] RAX: 0000000000000001 RBX: 0000000000007fd8 RCX: 0000000000003ac8 [ 517.962539][ C1] RDX: 0000000000000000 RSI: 0000000020114000 RDI: ffff888058ef4538 [ 517.970507][ C1] RBP: 000000002010faf0 R08: 0000000000000001 R09: ffffed100b1defff [ 517.978474][ C1] R10: ffff888058ef7fff R11: 0000000000000000 R12: ffffc90002ff7e58 [ 517.986439][ C1] R13: 0000000020117ac8 R14: ffff888058ef0028 R15: 00007ffffffff000 [ 517.994418][ C1] _copy_from_iter+0x385/0x1560 [ 517.999279][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 518.004485][ C1] ? __pfx__copy_from_iter+0x10/0x10 [ 518.009776][ C1] ? __virt_addr_valid+0x1a4/0x590 [ 518.014898][ C1] ? __virt_addr_valid+0x5e/0x590 [ 518.019922][ C1] ? __phys_addr+0xc6/0x150 [ 518.024424][ C1] ? __phys_addr_symbol+0x30/0x80 [ 518.029452][ C1] ? __check_object_size+0x488/0x710 [ 518.034760][ C1] mptcp_sendmsg+0x1010/0x1f20 [ 518.039553][ C1] ? selinux_socket_post_create+0x751/0x7f0 [ 518.045466][ C1] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 518.050591][ C1] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 518.055726][ C1] inet_sendmsg+0x119/0x140 [ 518.060235][ C1] ____sys_sendmsg+0x98c/0xc90 [ 518.065002][ C1] ? copy_msghdr_from_user+0x10b/0x160 [ 518.070460][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 518.075759][ C1] ___sys_sendmsg+0x135/0x1e0 [ 518.080440][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.085646][ C1] ? __pfx_lock_release+0x10/0x10 [ 518.090670][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 518.095892][ C1] ? __fget_files+0x206/0x3a0 [ 518.100579][ C1] __sys_sendmsg+0x16e/0x220 [ 518.105168][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 518.110274][ C1] ? __pfx_lock_release+0x10/0x10 [ 518.115303][ C1] ? __might_fault+0xe3/0x190 [ 518.119984][ C1] ? rcu_is_watching+0x12/0xc0 [ 518.124770][ C1] do_syscall_64+0xcd/0x250 [ 518.129305][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.135214][ C1] RIP: 0033:0x7f1bf7d85d29 [ 518.139624][ C1] RSP: 002b:00007f1bf8c7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.148040][ C1] RAX: ffffffffffffffda RBX: 00007f1bf7f75fa0 RCX: 00007f1bf7d85d29 [ 518.156006][ C1] RDX: 0000000000004000 RSI: 0000000020000100 RDI: 0000000000000006 [ 518.163990][ C1] RBP: 00007f1bf7e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 518.171972][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.180024][ C1] R13: 0000000000000000 R14: 00007f1bf7f75fa0 R15: 00007ffc29a9d4b8 [ 518.188003][ C1] [ 518.191022][ C1] task:dhcpcd-run-hook state:R running task stack:28432 pid:9996 tgid:9996 ppid:9992 flags:0x00000002 [ 518.202774][ C1] Call Trace: [ 518.206046][ C1] [ 518.208978][ C1] __schedule+0xe58/0x5ad0 [ 518.213397][ C1] ? page_ext_put+0x3e/0xd0 [ 518.217907][ C1] ? __pfx_lock_release+0x10/0x10 [ 518.222931][ C1] ? __pfx_lock_release+0x10/0x10 [ 518.227972][ C1] ? __pfx___schedule+0x10/0x10 [ 518.232820][ C1] ? page_table_check_set+0x8ee/0x9c0 [ 518.238207][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 518.243577][ C1] preempt_schedule_common+0x44/0xc0 [ 518.248862][ C1] preempt_schedule_thunk+0x1a/0x30 [ 518.254065][ C1] _raw_spin_unlock+0x3e/0x50 [ 518.258742][ C1] filemap_map_pages+0xe4e/0x16b0 [ 518.263768][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 518.268977][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 518.274455][ C1] ? do_pte_missing+0xce7/0x3e00 [ 518.279410][ C1] ? lock_acquire+0x2f/0xb0 [ 518.283929][ C1] ? do_pte_missing+0xce7/0x3e00 [ 518.288877][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 518.294332][ C1] do_pte_missing+0xda6/0x3e00 [ 518.299107][ C1] __handle_mm_fault+0x103c/0x2a40 [ 518.304224][ C1] ? lock_vma_under_rcu+0x6b9/0x980 [ 518.309422][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 518.314903][ C1] handle_mm_fault+0x3fa/0xaa0 [ 518.319675][ C1] do_user_addr_fault+0x60d/0x13f0 [ 518.324792][ C1] exc_page_fault+0x5c/0xc0 [ 518.329306][ C1] asm_exc_page_fault+0x26/0x30 [ 518.334159][ C1] RIP: 0033:0x7fca1f1a25eb [ 518.338569][ C1] RSP: 002b:00007ffd10aaea68 EFLAGS: 00010202 [ 518.344638][ C1] RAX: 0000558b8d0b0ee0 RBX: 0000558b8d0ab218 RCX: 00007ffd10aaeab8 [ 518.352609][ C1] RDX: 0000000000000000 RSI: 0000558b8d0b0cd8 RDI: 0000558b8d0ab460 [ 518.360576][ C1] RBP: 0000558b8d0b0cd8 R08: 0000558b8d0b0ee0 R09: 0000000000000000 [ 518.368546][ C1] R10: 000000000000003f R11: 0000000000000000 R12: 0000558b8d0ab460 [ 518.376527][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 518.384504][ C1] [ 518.387552][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g24297 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 518.398760][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 518.408726][ C1] rcu: RCU grace-period kthread stack dump: [ 518.414606][ C1] task:rcu_preempt state:R running task stack:27488 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 518.426363][ C1] Call Trace: [ 518.429638][ C1] [ 518.432595][ C1] __schedule+0xe58/0x5ad0 [ 518.437017][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 518.442235][ C1] ? __pfx___schedule+0x10/0x10 [ 518.447085][ C1] ? schedule+0x298/0x350 [ 518.451414][ C1] ? __pfx_lock_release+0x10/0x10 [ 518.456441][ C1] ? lock_acquire+0x2f/0xb0 [ 518.460943][ C1] ? schedule+0x1fd/0x350 [ 518.465273][ C1] schedule+0xe7/0x350 [ 518.469341][ C1] schedule_timeout+0x124/0x280 [ 518.474190][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 518.479558][ C1] ? __pfx_process_timeout+0x10/0x10 [ 518.484855][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 518.490664][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 518.496125][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 518.500898][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 518.506179][ C1] ? rcu_gp_init+0xc82/0x1630 [ 518.510860][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 518.516062][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 518.521870][ C1] rcu_gp_kthread+0x271/0x380 [ 518.526569][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 518.531769][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 518.536970][ C1] ? __kthread_parkme+0x148/0x220 [ 518.542000][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 518.547199][ C1] kthread+0x2c1/0x3a0 [ 518.551270][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 518.556466][ C1] ? __pfx_kthread+0x10/0x10 [ 518.561059][ C1] ret_from_fork+0x45/0x80 [ 518.565471][ C1] ? __pfx_kthread+0x10/0x10 [ 518.570065][ C1] ret_from_fork_asm+0x1a/0x30 [ 518.574845][ C1] [ 518.577858][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 518.584173][ C1] CPU: 1 UID: 0 PID: 6596 Comm: kworker/u8:12 Not tainted 6.13.0-rc4-syzkaller-00078-g059dd502b263 #0 [ 518.595098][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 518.605147][ C1] Workqueue: events_unbound toggle_allocation_gate [ 518.611654][ C1] RIP: 0010:smp_call_function_many_cond+0x45d/0x1300 [ 518.618337][ C1] Code: 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 ba 0e 0c 00 f3 90 41 0f b6 04 24 <40> 38 c5 7c 08 84 c0 0f 85 a7 0c 00 00 8b 43 08 31 ff 83 e0 01 41 [ 518.637940][ C1] RSP: 0018:ffffc900052cf998 EFLAGS: 00000293 [ 518.644003][ C1] RAX: 0000000000000000 RBX: ffff8880b86469c0 RCX: ffffffff818e071c [ 518.651969][ C1] RDX: ffff88802a438000 RSI: ffffffff818e06f6 RDI: 0000000000000005 [ 518.659934][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 518.667898][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c8d39 [ 518.675879][ C1] R13: 0000000000000001 R14: ffff8880b86469c8 R15: ffff8880b873fe40 [ 518.683844][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 518.692773][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 518.699354][ C1] CR2: 0000001b2f4fdff8 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 518.707325][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 518.715289][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 518.723255][ C1] Call Trace: [ 518.726529][ C1] [ 518.729370][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 518.735705][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 518.740907][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 518.746377][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 518.752015][ C1] ? tmigr_requires_handle_remote+0x141/0x480 [ 518.758085][ C1] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 518.764513][ C1] ? hrtimer_run_queues+0x97/0x500 [ 518.769626][ C1] ? rcu_read_lock_sched_held+0x3e/0x70 [ 518.775174][ C1] ? update_process_times+0x178/0x2d0 [ 518.780545][ C1] ? __pfx_update_process_times+0x10/0x10 [ 518.786266][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 518.791727][ C1] ? update_wall_time+0x1c/0x40 [ 518.796579][ C1] ? tick_nohz_handler+0x376/0x530 [ 518.801718][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 518.807192][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 518.812581][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 518.818305][ C1] ? read_tsc+0x9/0x20 [ 518.822383][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 518.827538][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 518.833694][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 518.839500][ C1] [ 518.842429][ C1] [ 518.845355][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 518.851522][ C1] ? smp_call_function_many_cond+0x47c/0x1300 [ 518.857591][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 518.863672][ C1] ? smp_call_function_many_cond+0x45d/0x1300 [ 518.869740][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 518.875812][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 518.880843][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 518.885869][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 518.890988][ C1] text_poke_bp_batch+0x22b/0x760 [ 518.896020][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 518.901566][ C1] ? __jump_label_patch+0x1db/0x400 [ 518.906775][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 518.913023][ C1] text_poke_finish+0x30/0x40 [ 518.917701][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 518.923681][ C1] jump_label_update+0x1d7/0x400 [ 518.928628][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 518.934525][ C1] static_key_enable+0x1a/0x20 [ 518.939290][ C1] toggle_allocation_gate+0xfc/0x260 [ 518.944583][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 518.950475][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 518.955693][ C1] ? process_one_work+0x921/0x1ba0 [ 518.960803][ C1] ? lock_acquire+0x2f/0xb0 [ 518.965302][ C1] ? process_one_work+0x921/0x1ba0 [ 518.970416][ C1] process_one_work+0x9c5/0x1ba0 [ 518.975361][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 518.981511][ C1] ? __pfx_process_one_work+0x10/0x10 [ 518.986879][ C1] ? rcu_is_watching+0x12/0xc0 [ 518.991672][ C1] ? assign_work+0x1a0/0x250 [ 518.996289][ C1] worker_thread+0x6c8/0xf00 [ 519.000903][ C1] ? __kthread_parkme+0x148/0x220 [ 519.005941][ C1] ? __pfx_worker_thread+0x10/0x10 [ 519.011051][ C1] kthread+0x2c1/0x3a0 [ 519.015118][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.020315][ C1] ? __pfx_kthread+0x10/0x10 [ 519.024909][ C1] ret_from_fork+0x45/0x80 [ 519.029325][ C1] ? __pfx_kthread+0x10/0x10 [ 519.033915][ C1] ret_from_fork_asm+0x1a/0x30 [ 519.038699][ C1]