last executing test programs: 12.582939145s ago: executing program 0 (id=1419): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = fsopen(&(0x7f0000000500)='pstore\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001600)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\x04[\x02\xa9[>\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', &(0x7f0000000340)='\xd1S{O', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000014b315983938ac741ea6625ae89c45429c9c4a95c43dd38cc4b83ad5f7ce12798af5b10bb49e8e734fbba1ed93d0b784149dad2658fca4b534364a273104cfb179779c870f2bbe6ce8a41d635fb029165cf0186f22c02cd9eb6de404"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xc0ff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, 0x0) syz_open_dev$vcsu(&(0x7f0000000300), 0x3, 0xc080) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500002800d58cba9c069078ac14aa00004e220000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbf9, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 9.802327331s ago: executing program 3 (id=1428): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7a}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendto$inet(r1, &(0x7f00000020c0)="f72bacc3ca1a9edf08e239411cbcf4b2ef918084f500db36e20f4f509b2d142d7f20570bec6d2d7fcdd876a9f6167b334b1520e2a2e62197dcbc558318f53923acd32a9cc5e539620f83a0ebc7bf4516404a2b9baa92b0c687a280d35df349", 0x5f, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @remote, {[@timestamp_addr={0x44, 0x4, 0x83}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x1ff}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socket(0xa, 0x3, 0x3a) write$tun(0xffffffffffffffff, 0x0, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c000000000000000000001811", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=@newsa={0x144, 0x10, 0x413, 0x0, 0x0, {{@in6=@dev, @in=@remote}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @tfcpad={0x8, 0x16, 0xfff}]}, 0x144}}, 0x0) getrandom(0xfffffffffffffffc, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r4, &(0x7f0000000100)={0x2, 0x0, @broadcast, 0x2}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 9.222525155s ago: executing program 3 (id=1430): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) (async) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) capset(&(0x7f0000000180)={0x20071026}, &(0x7f00000001c0)={0x5, 0x52, 0x5d5, 0x7fffffff, 0x44, 0x4}) (async) unshare(0x4a060a00) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @rand_addr=0xfffffffd}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) unshare(0x20000400) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/pid_for_children\x00') (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000000)=0x2, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) (async) r7 = getpid() (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x114, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x10}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x14}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x114}, 0x1, 0x0, 0x0, 0x880}, 0x40) (async) sendmsg$unix(r8, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee00}}}, @rights={{0x10}}], 0x30}, 0x10) (async) setsockopt$RDS_GET_MR(r6, 0x114, 0x2, &(0x7f00000001c0)={{0x0}, 0x0, 0x12}, 0x20) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r9, 0x0) (async) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) close_range(r2, 0xffffffffffffffff, 0x0) 8.983719478s ago: executing program 0 (id=1434): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x2000, 0x747, 0x0, 0x3, 0x0, 0x0, 0x9}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003bc0), 0x4000000000002ca, 0x4040014) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="ce", 0x1}], 0x1}}], 0x2, 0x40488e4) 6.392414053s ago: executing program 4 (id=1441): r0 = socket$inet_icmp(0x2, 0x2, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000140)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240)) setreuid(0x0, 0xee01) clock_gettime(0x0, &(0x7f0000004500)={0x0, 0x0}) socket(0x80000000000000a, 0x2, 0x0) recvmmsg(r0, &(0x7f00000042c0)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/236, 0xec}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000000)=""/11, 0xb}, {&(0x7f0000001440)=""/93, 0x5d}], 0x5, &(0x7f0000000200)=""/51, 0x33}, 0x3}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000001540)=""/77, 0x4d}, {&(0x7f00000015c0)=""/55, 0x37}, {&(0x7f0000004600)=""/4096, 0x1000}], 0x3, &(0x7f0000002640)=""/222, 0xde}, 0x6}, {{&(0x7f0000002740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000027c0)=""/155, 0x9b}, {&(0x7f0000002880)=""/184, 0xb8}, {&(0x7f0000002940)=""/15, 0xf}, {&(0x7f0000002980)=""/18, 0x12}], 0x4, &(0x7f0000002a00)=""/84, 0x54}, 0xbe}, {{&(0x7f0000002a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002b00)=""/183, 0xb7}], 0x1}, 0x7fffffff}, {{&(0x7f0000002c00)=@phonet, 0x80, &(0x7f0000003140)=[{&(0x7f0000002c80)=""/135, 0x87}, {&(0x7f0000002d40)=""/55, 0x37}, {&(0x7f0000002d80)=""/217, 0xd9}, {&(0x7f0000002e80)}, {&(0x7f0000002ec0)=""/199, 0xc7}, {&(0x7f0000002fc0)=""/198, 0xc6}, {&(0x7f00000030c0)=""/105, 0x69}], 0x7, &(0x7f00000031c0)=""/89, 0x59}, 0xc4}, {{&(0x7f0000003240)=@sco, 0x80, &(0x7f0000003740)=[{&(0x7f00000032c0)=""/168, 0xa8}, {&(0x7f0000003380)=""/137, 0x89}, {&(0x7f0000003440)=""/224, 0xe0}, {&(0x7f0000003540)=""/61, 0x3d}, {&(0x7f0000003580)=""/20, 0x14}, {&(0x7f00000035c0)=""/218, 0xda}, {&(0x7f0000004580)=""/88, 0x58}], 0x7}, 0x40}, {{&(0x7f00000037c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003840)=""/160, 0xa0}, {&(0x7f0000003900)=""/178, 0xb2}, {&(0x7f00000039c0)=""/132, 0x84}, {&(0x7f0000003a80)=""/42, 0x2a}, {&(0x7f0000003ac0)=""/200, 0xc8}], 0x5, &(0x7f0000003c40)}, 0x8}, {{&(0x7f0000003c80)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003d00)=""/149, 0x95}, {&(0x7f0000003dc0)=""/44, 0x2c}], 0x2, &(0x7f0000003e40)=""/188, 0xbc}, 0x9}, {{&(0x7f0000003f00)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000004240)=[{&(0x7f0000003f80)=""/197, 0xc5}, {&(0x7f0000004080)=""/138, 0x8a}, {&(0x7f0000004140)=""/121, 0x79}, {&(0x7f00000041c0)=""/103, 0x67}], 0x4, &(0x7f0000004280)}, 0x1}], 0x9, 0x0, &(0x7f0000004540)={r2, r3+60000000}) dup(r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c000280080003400000001608000140000000000800014000000000080002"], 0x110}}, 0x0) 6.22309467s ago: executing program 3 (id=1444): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2ce70800", @ANYRES16=r2, @ANYBLOB="00042dbd7000ffdbdf256b0000000c00990006000000770000000a0006000802110000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003bc0), 0x4000000000002ca, 0x4040014) sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="ce", 0x1}], 0x1}}], 0x2, 0x40488e4) 6.222871095s ago: executing program 0 (id=1445): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() (async) r5 = getpid() prlimit64(r5, 0xb, &(0x7f0000000140)={0x28, 0x8b}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000080)) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x100000000000000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 5.220640499s ago: executing program 4 (id=1449): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x905, 0x3e, 0x1, {0x22, 0x6b9}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000640)={0x60, 0xf, 0x30, "bcb785e2ad55544aa242d58035ac8a21ea76e73e3f464b91cd262620d97bf618c41d88de79dcacf2c2bdc8ab7fa77e23"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x9e}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000700)={0x20, 0x1, 0x33, "cdfb62e2bb5740d7a1595fc64668b18ba9568ecb370a7afbd2c961b86aad400c8163d966fc4a3638581d1dca926d26a7957c28"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x3}}) 4.735205593s ago: executing program 0 (id=1450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xb0}}, 0x8004) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x0) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x6d89, 0x8, 0x40000, 0x100000f0}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000002c00010026bd902c14e72c28002b000008000c8044"], 0x1c}, 0x1, 0x0, 0x0, 0x4001c}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000480)="5025e5", 0x3}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x348}, 0x0, 0x800, 0x1}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x2) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x0, 0x7fffffff, 0xfffffff6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)=[{0x1, 0x5, 0x0, 0x3}, {0x5, 0x2, 0x0, 0xa}, {0x5, 0x2, 0x1, 0x3}], 0x10, 0x7fff, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r8, r9, 0x25, 0x0, @val=@perf_event={0xfffffffffffffffe}}, 0x18) 4.716464562s ago: executing program 1 (id=1451): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 4.71579677s ago: executing program 3 (id=1452): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x8e, &(0x7f00000003c0)='K\b\xa6j\x7f^J\x19\xe8C_\xef\xe9t\xc4\x80\b\xd2B\x1e1\xbc\xbf\x9c\x02\xa2O3\x8da\x89A\xc3\f4g\xba~Y\xc7)\x89\xef]\xe5\x15&\x85\x92\xb0X\x0f\xbbd\x04\x7f\xf9\x1eb8e\xec3\xf3r\xf4\xcc8H\xf32\tUM7\x01\xfbLj\xa0\xf4\xd4\xd2?s[F\xa5\xcbP\x17\x8f\x1c\x10\xc4\x92\xe7o\xc0\n\x1b\xf9\xe4\x19X\xf9\xe1x\xc2\xeezHJs\x105\x87\xa8\xf3H\xaa\\\x03gI\x8e\xe8g5_\x00\x02\x8dZ\v\xc8ed\xae[\xbc;', 0x0}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0xffffffffffffff5a, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffbfffffffe}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0xf, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000009500"/96], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000380)='gid_map\x00') r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) 4.70344786s ago: executing program 2 (id=1453): ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000440)=[0x5, 0x3, 0x10, 0x4, 0x8000], &(0x7f0000000480)=[0xa, 0x40, 0x9], &(0x7f00000004c0)=[0x95ff], &(0x7f0000000500)=[0xffa6, 0x2, 0xfffe, 0x1, 0x5, 0x74f]}) 4.503393197s ago: executing program 2 (id=1454): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x11bc) 4.503210857s ago: executing program 1 (id=1455): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x2000, 0x747, 0x0, 0x3, 0x0, 0x0, 0x9}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003bc0), 0x4000000000002ca, 0x4040014) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="ce", 0x1}], 0x1}}], 0x2, 0x40488e4) 3.426087219s ago: executing program 3 (id=1456): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000ae00000000000000008500000017000000850000002a0000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_open_dev$video4linux(&(0x7f0000000480), 0x5, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3.083399952s ago: executing program 1 (id=1457): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x8e, &(0x7f00000003c0)='K\b\xa6j\x7f^J\x19\xe8C_\xef\xe9t\xc4\x80\b\xd2B\x1e1\xbc\xbf\x9c\x02\xa2O3\x8da\x89A\xc3\f4g\xba~Y\xc7)\x89\xef]\xe5\x15&\x85\x92\xb0X\x0f\xbbd\x04\x7f\xf9\x1eb8e\xec3\xf3r\xf4\xcc8H\xf32\tUM7\x01\xfbLj\xa0\xf4\xd4\xd2?s[F\xa5\xcbP\x17\x8f\x1c\x10\xc4\x92\xe7o\xc0\n\x1b\xf9\xe4\x19X\xf9\xe1x\xc2\xeezHJs\x105\x87\xa8\xf3H\xaa\\\x03gI\x8e\xe8g5_\x00\x02\x8dZ\v\xc8ed\xae[\xbc;', 0x0}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0xffffffffffffff5a, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffbfffffffe}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0xf, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000009500"/96], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='gid_map\x00') write$vhost_msg(r5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/vmstat\x00', 0x0, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000240)=ANY=[@ANYBLOB="b242379c9022ab282dbe9caa7fa55ec874752644e6a2a36ca9a700"/40], 0x34}}, 0x804c880) syz_io_uring_setup(0x4a60, &(0x7f0000000080)={0x0, 0xce3, 0x10100, 0xfffffffe, 0x1b6}, &(0x7f00000004c0), &(0x7f0000000140)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) sendfile(r4, r0, &(0x7f0000000200)=0xffffffff, 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) 2.803256443s ago: executing program 2 (id=1458): syz_usb_connect(0x2, 0x51, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9, 0x94, 0x73, 0x8, 0x1199, 0x6821, 0x9859, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x5, 0x37, 0x5d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x6, 0x3, 0x40, 0x7, 0xe, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x4, 0x2, 0x3}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x4, 0xfe, 0x7}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x3, 0x2, 0x4}}, {{0x9, 0x5, 0xa, 0x1c, 0x3ff, 0x1, 0xac, 0x8}}]}}]}}]}}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f767bdf08604afc00000000", @ANYRES16=r1, @ANYBLOB="01002abd70000400000005000000080009000200000008000c00a80a000008000b0001000000060001001bb50000"], 0x34}}, 0x20) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r3, 0x111, 0x5, 0x0, 0x20001f00) 1.836784148s ago: executing program 1 (id=1459): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000240)={0x0, 0x41, 0x1000, 0x4, 0xfc, 0xff, 0x400}, 0xc) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) write(r1, 0x0, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x709}], 0x1}}], 0x1, 0x0) 1.605486746s ago: executing program 4 (id=1460): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x20044000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000040008100000002000000200001801400040000000000000000000000ffffac1414aa060001000a"], 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) 1.45533012s ago: executing program 4 (id=1461): syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x4882) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x5411, 0x2000fcc6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300), &(0x7f00000002c0)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f00000001c0)=[0x39e], 0x2) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x14, &(0x7f0000001e40)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r5, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 1.358793666s ago: executing program 0 (id=1462): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2ce70800", @ANYRES16=r2, @ANYBLOB="00042dbd7000ffdbdf256b0000000c00990006000000770000000a0006000802110000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003bc0), 0x4000000000002ca, 0x4040014) sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="ce", 0x1}], 0x1}}], 0x2, 0x40488e4) 1.357316381s ago: executing program 2 (id=1463): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0xf, 0x5c, &(0x7f0000000240)=""/92, 0x41000, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000300)=[0x1, 0xffffffffffffffff], &(0x7f0000000340)=[{0x0, 0x2, 0x8, 0xa}, {0x5, 0x1, 0xc, 0x1}, {0x1, 0x1, 0x2, 0x5}, {0x4, 0x2, 0x1, 0x1}, {0x1, 0x2, 0xc, 0x2}, {0x3, 0x2, 0xa, 0x2}, {0x3, 0x2, 0x3, 0xb}, {0x1, 0x2, 0xb, 0x9}, {0x1, 0x2, 0x2, 0x1}], 0x10, 0x5, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='attr/current\x00') ftruncate(r2, 0x7fffffffffffffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x80, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r1, r2, 0x5, 0x0, @val=@tracing={r3, 0x5}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e86812164b8886c3588ed6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 761.78593ms ago: executing program 1 (id=1464): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x800000, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000440)=[0x5, 0x3, 0x10, 0x4, 0x8000], &(0x7f0000000480)=[0xa, 0x40, 0x9], &(0x7f00000004c0)=[0x95ff], &(0x7f0000000500)=[0xffa6, 0x2, 0xfffe, 0x1, 0x5, 0x74f]}) 761.394659ms ago: executing program 2 (id=1465): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file1', [{0x20, '# '}, {0x20, '@%\\(}]}+'}, {0x20, 'blkio.bfq.io_merged_recursive\x00'}], 0xa, "4543895dd1affa21c6e285400b74bf0d28789cd86bc05f44c5733d2bbb9fbe9a9a0020a29f9997a7fba31b2ea8172cd38a"}, 0x67) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x40) setgroups(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) setresuid(0x0, r5, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0xff0c) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r8, 0xae80, 0x0) 759.80748ms ago: executing program 3 (id=1466): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) getsockopt$inet6_int(r1, 0x29, 0x31, 0x0, &(0x7f0000000080)) write$nbd(r0, &(0x7f0000000240)={0x1000000, 0x2000000, 0x0, 0x0, 0x0, "82b0cfc44bf965941538be02000000000000000000007400a391793ba7f400000000a4fdf700"/48}, 0x40) 547.325458ms ago: executing program 1 (id=1467): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x2000, 0x747, 0x0, 0x3, 0x0, 0x0, 0x9}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003bc0), 0x4000000000002ca, 0x4040014) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="ce", 0x1}], 0x1}}], 0x2, 0x40488e4) 547.104232ms ago: executing program 2 (id=1468): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x2000, 0x747, 0x0, 0x3, 0x0, 0x0, 0x9}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003bc0), 0x4000000000002ca, 0x4040014) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="ce", 0x1}], 0x1}}], 0x2, 0x40488e4) 528.327817ms ago: executing program 4 (id=1469): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x800000, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000440)=[0x5, 0x3, 0x10, 0x4, 0x8000], &(0x7f0000000480)=[0xa, 0x40, 0x9], &(0x7f00000004c0)=[0x95ff], &(0x7f0000000500)=[0xffa6, 0x2, 0xfffe, 0x1, 0x5, 0x74f]}) 1.676955ms ago: executing program 4 (id=1470): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x905, 0x3e, 0x1, {0x22, 0x6b9}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000640)={0x60, 0xf, 0x30, "bcb785e2ad55544aa242d58035ac8a21ea76e73e3f464b91cd262620d97bf618c41d88de79dcacf2c2bdc8ab7fa77e23"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x9e}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000700)={0x20, 0x1, 0x33, "cdfb62e2bb5740d7a1595fc64668b18ba9568ecb370a7afbd2c961b86aad400c8163d966fc4a3638581d1dca926d26a7957c28"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x3}}) 0s ago: executing program 0 (id=1471): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f, 0x5}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) get_mempolicy(0x0, &(0x7f00000000c0), 0x8000000000000001, &(0x7f00004a7000/0xe000)=nil, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0x40186f40, 0x20000502) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000040)='lazytime\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x44010) mq_timedsend(r5, &(0x7f00000005c0)="948a14746c1b4d5f1baa9568088816ee82a4720d3a2dd3ca3c094f2dfd3aecec245f48c5dfd248ff3e61c9efa6023cc1b11c64328849d6885e560df3f4a08edd0bbc1428bbaf4612e88d2f7f01d4d912f8814884c72fe0f717f0d0f44cfc778fd9a8e806a74011cce7018ebf481ab2d70c6490982fbe9846d63005667b4051c1ddb2e3e1eb03ee87684a7ad6e292f54ce6493a56b29bc532b8a68f57daafb08310254df5de98b01ed235a02cc0c064e7b4e80fec3fd4d3216a77cb411a894785081af166f0eb6000", 0xc8, 0x0, &(0x7f0000000280)={0x0, 0x3938700}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r4], 0x30}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01020a30e6cfaff8a83b080000000c0001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r8 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r8, &(0x7f00000004c0)='mountinfo\x00') migrate_pages(r8, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) syz_open_procfs$namespace(r8, &(0x7f0000000000)='ns/time\x00') r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r10, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500001ca850124100000000000000e0e0000000012100000000"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): tem permissive=1 [ 309.277243][ T29] audit: type=1400 audit(1738322246.234:831): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 309.591769][ T9140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.742854][ T29] audit: type=1400 audit(1738322246.434:832): avc: denied { create } for pid=9168 comm="syz.3.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 309.837417][ T9179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.934'. [ 309.846675][ T9179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.934'. [ 309.932789][ T29] audit: type=1400 audit(1738322246.434:833): avc: denied { connect } for pid=9168 comm="syz.3.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 309.952858][ T2149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.179580][ T29] audit: type=1400 audit(1738322246.434:834): avc: denied { setopt } for pid=9168 comm="syz.3.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 310.180394][ T9183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.935'. [ 310.208402][ T9183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.935'. [ 310.441481][ T29] audit: type=1400 audit(1738322246.494:835): avc: denied { bind } for pid=9168 comm="syz.3.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 310.461391][ T29] audit: type=1400 audit(1738322246.494:836): avc: denied { ioctl } for pid=9168 comm="syz.3.933" path="socket:[22567]" dev="sockfs" ino=22567 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 310.617067][ T29] audit: type=1400 audit(1738322246.494:837): avc: denied { read write } for pid=9168 comm="syz.3.933" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 310.721495][ T29] audit: type=1400 audit(1738322246.494:838): avc: denied { open } for pid=9168 comm="syz.3.933" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 310.904397][ T970] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 310.917687][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.016452][ T2149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.104445][ T970] usb 4-1: Using ep0 maxpacket: 16 [ 311.119762][ T970] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.139171][ T970] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.161248][ T970] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 311.187838][ T970] usb 4-1: config 0 interface 0 has no altsetting 0 [ 311.198953][ T970] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 311.208827][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.224974][ T970] usb 4-1: config 0 descriptor?? [ 311.418830][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.940'. [ 311.427753][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.940'. [ 311.436869][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.940'. [ 313.304464][ T5874] net_ratelimit: 2 callbacks suppressed [ 313.304480][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.542470][ T9205] trusted_key: encrypted_key: insufficient parameters specified [ 313.615013][ T2909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.615615][ T2149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.617255][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.096490][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 314.096525][ T29] audit: type=1400 audit(1738322251.504:861): avc: denied { write } for pid=9206 comm="syz.2.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 314.978884][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.125121][ T29] audit: type=1400 audit(1738322252.534:862): avc: denied { write } for pid=9185 comm="syz.3.936" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 315.130374][ T29] audit: type=1400 audit(1738322252.534:863): avc: denied { append } for pid=9185 comm="syz.3.936" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.152515][ T9217] loop6: detected capacity change from 0 to 524287999 [ 315.159530][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.159584][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.184644][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.213512][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.267648][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.314192][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.333130][ T29] audit: type=1400 audit(1738322252.714:864): avc: denied { read write } for pid=9222 comm="syz.0.946" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 315.333323][ T29] audit: type=1400 audit(1738322252.714:865): avc: denied { open } for pid=9222 comm="syz.0.946" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 315.333464][ T29] audit: type=1400 audit(1738322252.734:866): avc: denied { mount } for pid=9222 comm="syz.0.946" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 315.678554][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.678585][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.690772][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.690792][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.690906][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.690919][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.691000][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.691021][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.692840][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.692856][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.692951][ T9217] ldm_validate_partition_table(): Disk read failed. [ 315.693009][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.693021][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.693120][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.693133][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.693224][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.693236][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.693375][ T9217] Dev loop6: unable to read RDB block 0 [ 315.693787][ T9217] loop6: unable to read partition table [ 315.693854][ T9217] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 315.694114][ T29] audit: type=1400 audit(1738322253.064:867): avc: denied { unlink } for pid=9222 comm="syz.0.946" name="#9" dev="tmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 315.694148][ T29] audit: type=1400 audit(1738322253.064:868): avc: denied { mount } for pid=9222 comm="syz.0.946" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 315.756340][ T29] audit: type=1400 audit(1738322253.144:869): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 315.756385][ T29] audit: type=1400 audit(1738322253.144:870): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 315.995707][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.027102][ T5193] ldm_validate_partition_table(): Disk read failed. [ 316.034446][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.035024][ T5193] Dev loop6: unable to read RDB block 0 [ 316.454554][ T5193] loop6: unable to read partition table [ 316.462818][ T970] usbhid 4-1:0.0: can't add hid device: -71 [ 316.476007][ T970] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 316.530928][ T970] usb 4-1: USB disconnect, device number 19 [ 316.554200][ T9242] overlayfs: invalid origin (0000) [ 316.679495][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.869760][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.876139][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.883188][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.908988][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.941509][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.203896][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.954'. [ 317.279517][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'. [ 317.288454][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'. [ 317.297620][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'. [ 319.576504][ T6660] net_ratelimit: 3 callbacks suppressed [ 319.576521][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.687475][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 319.687491][ T29] audit: type=1400 audit(1738322257.094:881): avc: denied { read } for pid=9265 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 319.724160][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.314325][ T5831] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 320.620867][ T9273] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.620938][ T9273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.625294][ T29] audit: type=1400 audit(1738322258.034:882): avc: denied { write } for pid=9272 comm="syz.0.958" path="socket:[21811]" dev="sockfs" ino=21811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 320.655564][ T2149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.664348][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 320.724117][ T5831] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 320.724142][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.725915][ T5831] usb 4-1: config 0 descriptor?? [ 320.728158][ T5831] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 321.389676][ T9302] FAULT_INJECTION: forcing a failure. [ 321.389676][ T9302] name failslab, interval 1, probability 0, space 0, times 0 [ 321.411773][ T970] usb 4-1: USB disconnect, device number 20 [ 321.456956][ T9302] CPU: 0 UID: 0 PID: 9302 Comm: syz.4.967 Not tainted 6.13.0-syzkaller-09522-gd3d90cc2891c #0 [ 321.456982][ T9302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 321.456992][ T9302] Call Trace: [ 321.456997][ T9302] [ 321.457003][ T9302] dump_stack_lvl+0x16c/0x1f0 [ 321.457033][ T9302] should_fail_ex+0x50a/0x650 [ 321.457058][ T9302] ? fs_reclaim_acquire+0xae/0x150 [ 321.457084][ T9302] ? offload_action_alloc+0x29/0xf0 [ 321.457110][ T9302] should_failslab+0xc2/0x120 [ 321.457128][ T9302] __kmalloc_noprof+0xcb/0x510 [ 321.457146][ T9302] ? hlock_class+0x4e/0x130 [ 321.457167][ T9302] offload_action_alloc+0x29/0xf0 [ 321.457194][ T9302] tcf_action_offload_add_ex+0x1b7/0x670 [ 321.457219][ T9302] ? __pfx_tcf_action_offload_add_ex+0x10/0x10 [ 321.457242][ T9302] ? __pfx___lock_acquire+0x10/0x10 [ 321.457293][ T9302] tcf_action_init+0x663/0x9c0 [ 321.457323][ T9302] ? __pfx_tcf_action_init+0x10/0x10 [ 321.457346][ T9302] ? lock_acquire.part.0+0x11b/0x380 [ 321.457386][ T9302] ? is_bpf_text_address+0x94/0x1a0 [ 321.457414][ T9302] ? hlock_class+0x4e/0x130 [ 321.457449][ T9302] ? __pfx___lock_acquire+0x10/0x10 [ 321.457474][ T9302] ? hlock_class+0x4e/0x130 [ 321.457490][ T9302] ? __lock_acquire+0xcc5/0x3c40 [ 321.457516][ T9302] tcf_action_add+0xfd/0x5d0 [ 321.457543][ T9302] ? __pfx_tcf_action_add+0x10/0x10 [ 321.457564][ T9302] ? __pfx_lock_release+0x10/0x10 [ 321.457590][ T9302] ? trace_lock_acquire+0x14e/0x1f0 [ 321.457643][ T9302] ? __nla_parse+0x40/0x60 [ 321.457664][ T9302] tc_ctl_action+0x35d/0x470 [ 321.457688][ T9302] ? __pfx_tc_ctl_action+0x10/0x10 [ 321.457720][ T9302] ? __pfx_tc_ctl_action+0x10/0x10 [ 321.457744][ T9302] rtnetlink_rcv_msg+0x3c7/0xea0 [ 321.457766][ T9302] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 321.457797][ T9302] netlink_rcv_skb+0x16b/0x440 [ 321.457816][ T9302] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 321.457838][ T9302] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.457869][ T9302] ? netlink_deliver_tap+0x1ae/0xd30 [ 321.457892][ T9302] netlink_unicast+0x53c/0x7f0 [ 321.457914][ T9302] ? __pfx_netlink_unicast+0x10/0x10 [ 321.457939][ T9302] netlink_sendmsg+0x8b8/0xd70 [ 321.457961][ T9302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.457989][ T9302] ____sys_sendmsg+0xaaf/0xc90 [ 321.458015][ T9302] ? copy_msghdr_from_user+0x10b/0x160 [ 321.458039][ T9302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.458076][ T9302] ___sys_sendmsg+0x135/0x1e0 [ 321.458098][ T9302] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.458127][ T9302] ? __pfx_lock_release+0x10/0x10 [ 321.458149][ T9302] ? trace_lock_acquire+0x14e/0x1f0 [ 321.458176][ T9302] ? __fget_files+0x206/0x3a0 [ 321.458199][ T9302] __sys_sendmsg+0x16e/0x220 [ 321.458219][ T9302] ? __pfx___sys_sendmsg+0x10/0x10 [ 321.458255][ T9302] do_syscall_64+0xcd/0x250 [ 321.458275][ T9302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.458297][ T9302] RIP: 0033:0x7f4d59b8cda9 [ 321.458311][ T9302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.458326][ T9302] RSP: 002b:00007f4d5a930038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.458344][ T9302] RAX: ffffffffffffffda RBX: 00007f4d59da5fa0 RCX: 00007f4d59b8cda9 [ 321.458355][ T9302] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 321.458365][ T9302] RBP: 00007f4d5a930090 R08: 0000000000000000 R09: 0000000000000000 [ 321.458375][ T9302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 321.458384][ T9302] R13: 0000000000000000 R14: 00007f4d59da5fa0 R15: 00007ffc51d12e38 [ 321.458406][ T9302] [ 321.814653][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.751363][ T29] audit: type=1400 audit(1738322260.144:883): avc: denied { ioctl } for pid=9292 comm="syz.0.964" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23058 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 322.840973][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.895128][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.076678][ T29] audit: type=1400 audit(1738322260.484:884): avc: denied { mount } for pid=9320 comm="syz.1.972" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 323.101883][ T9324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.971'. [ 323.111029][ T9324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.971'. [ 323.164405][ T2149] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 323.354688][ T2149] usb 3-1: Using ep0 maxpacket: 32 [ 323.415874][ T2149] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 323.487951][ T2149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.518889][ T2149] usb 3-1: config 0 descriptor?? [ 323.550055][ T2149] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 323.794568][ T2149] gspca_vc032x: reg_w err -71 [ 323.795251][ T29] audit: type=1400 audit(1738322261.204:885): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 323.799270][ T2149] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.825328][ T2149] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.830953][ T2149] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.836696][ T2149] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.842001][ T2149] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.847823][ T2149] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.853181][ T2149] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.854596][ T970] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 323.858676][ T5874] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 323.874097][ T2149] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.880707][ T2149] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.886386][ T2149] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.892094][ T2149] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.894457][ T5831] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 323.897452][ T2149] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.910234][ T2149] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.915635][ T2149] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.921199][ T2149] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.926546][ T2149] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.931877][ T2149] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.937674][ T2149] gspca_vc032x: I2c Bus Busy Wait 00 [ 323.943306][ T2149] gspca_vc032x: Unknown sensor... [ 323.948861][ T2149] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 323.956797][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.988554][ T2149] usb 3-1: USB disconnect, device number 18 [ 324.050066][ T5874] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 324.073522][ T5874] usb 4-1: config 0 has no interface number 0 [ 324.088382][ T5874] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 324.108337][ T970] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 324.116380][ T5874] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 324.119567][ T5831] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 324.177116][ T5874] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 324.177132][ T970] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 324.207697][ T5874] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 324.219517][ T5874] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 324.252108][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.328706][ T970] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 324.337491][ T5874] usb 4-1: config 0 descriptor?? [ 324.344305][ T5831] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 324.350660][ T5874] hub 4-1:0.3: bad descriptor, ignoring hub [ 324.364989][ T5874] hub 4-1:0.3: probe with driver hub failed with error -5 [ 324.373639][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.378257][ T5874] sierra 4-1:0.3: Sierra USB modem converter detected [ 324.425504][ T5831] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 324.496804][ T9329] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 324.507472][ T970] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 324.515227][ T5831] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 324.527345][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.560749][ T9331] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 324.572082][ T29] audit: type=1400 audit(1738322261.974:886): avc: denied { getopt } for pid=9326 comm="syz.3.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 324.575532][ T9341] FAULT_INJECTION: forcing a failure. [ 324.575532][ T9341] name failslab, interval 1, probability 0, space 0, times 0 [ 324.604525][ T9341] CPU: 0 UID: 0 PID: 9341 Comm: syz.1.978 Not tainted 6.13.0-syzkaller-09522-gd3d90cc2891c #0 [ 324.604544][ T9341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 324.604553][ T9341] Call Trace: [ 324.604557][ T9341] [ 324.604563][ T9341] dump_stack_lvl+0x16c/0x1f0 [ 324.604583][ T9341] should_fail_ex+0x50a/0x650 [ 324.604603][ T9341] ? fs_reclaim_acquire+0xae/0x150 [ 324.604626][ T9341] should_failslab+0xc2/0x120 [ 324.604647][ T9341] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 324.604664][ T9341] ? __pfx___up_read+0x10/0x10 [ 324.604686][ T9341] ? vfs_parse_fs_string+0xc4/0x150 [ 324.604704][ T9341] kmemdup_nul+0x49/0xf0 [ 324.604727][ T9341] vfs_parse_fs_string+0xc4/0x150 [ 324.604742][ T9341] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 324.604761][ T9341] ? __pfx_afs_init_fs_context+0x10/0x10 [ 324.604783][ T9341] ? alloc_fs_context+0x59b/0x9c0 [ 324.604803][ T9341] path_mount+0x677/0x1f10 [ 324.604821][ T9341] ? kmem_cache_free+0x2e2/0x4d0 [ 324.604836][ T9341] ? __pfx_path_mount+0x10/0x10 [ 324.604854][ T9341] ? putname+0x13c/0x180 [ 324.604874][ T9341] __x64_sys_mount+0x28f/0x310 [ 324.604891][ T9341] ? __pfx___x64_sys_mount+0x10/0x10 [ 324.604913][ T9341] do_syscall_64+0xcd/0x250 [ 324.604933][ T9341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.604955][ T9341] RIP: 0033:0x7f2e0d38cda9 [ 324.604968][ T9341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.604983][ T9341] RSP: 002b:00007f2e0e151038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 324.604998][ T9341] RAX: ffffffffffffffda RBX: 00007f2e0d5a5fa0 RCX: 00007f2e0d38cda9 [ 324.605009][ T9341] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020000540 [ 324.605019][ T9341] RBP: 00007f2e0e151090 R08: 0000000000000000 R09: 0000000000000000 [ 324.605028][ T9341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 324.605037][ T9341] R13: 0000000000000000 R14: 00007f2e0d5a5fa0 R15: 00007ffcd9877588 [ 324.605058][ T9341] [ 324.656035][ T5874] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 324.868675][ T5874] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 325.034822][ T2149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.090871][ T5874] usb 4-1: USB disconnect, device number 21 [ 325.134508][ T970] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 325.296292][ T970] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 325.333492][ T970] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 325.365878][ T5874] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 325.379797][ T5874] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 325.389454][ T970] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 325.395645][ T5874] sierra 4-1:0.3: device disconnected [ 325.418789][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.436562][ T9350] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 325.533868][ T9356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.981'. [ 325.543101][ T9356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.981'. [ 325.588782][ T970] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 325.903872][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.124619][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.400391][ T8] usb 3-1: USB disconnect, device number 19 [ 326.414741][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.166776][ T970] usb 1-1: USB disconnect, device number 17 [ 327.199186][ T2149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.363059][ T29] audit: type=1400 audit(1738322264.764:887): avc: denied { create } for pid=9376 comm="syz.2.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 327.424442][ T29] audit: type=1326 audit(1738322264.794:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.2.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186f78cda9 code=0x7ffc0000 [ 327.494144][ T29] audit: type=1326 audit(1738322264.794:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.2.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186f78cda9 code=0x7ffc0000 [ 327.555826][ T29] audit: type=1326 audit(1738322264.804:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.2.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f186f78cda9 code=0x7ffc0000 [ 327.659772][ T29] audit: type=1326 audit(1738322264.804:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.2.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186f78cda9 code=0x7ffc0000 [ 327.743979][ T29] audit: type=1326 audit(1738322264.804:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.2.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f186f78cda9 code=0x7ffc0000 [ 327.778060][ T5831] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 327.805990][ T5831] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input5 [ 327.838485][ T29] audit: type=1326 audit(1738322264.804:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.2.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186f78cda9 code=0x7ffc0000 [ 327.916151][ T5831] usb 5-1: USB disconnect, device number 26 [ 327.922092][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 327.962449][ T29] audit: type=1326 audit(1738322264.804:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.2.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f186f78cda9 code=0x7ffc0000 [ 328.045854][ T29] audit: type=1326 audit(1738322264.804:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.2.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186f78cda9 code=0x7ffc0000 [ 328.114574][ T29] audit: type=1326 audit(1738322264.804:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.2.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f186f78cda9 code=0x7ffc0000 [ 328.254797][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.974748][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.036552][ T9402] Bluetooth: MGMT ver 1.23 [ 329.061910][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 329.244374][ T8] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 329.294705][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.426073][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 329.437164][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 329.475628][ T8] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 329.510737][ T8] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 329.517820][ T9406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.994'. [ 329.519912][ T5831] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 329.537003][ T8] usb 5-1: config 1 has no interface number 1 [ 329.543112][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 329.563984][ T8] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 243, changing to 7 [ 329.576099][ T8] usb 5-1: config 1 interface 2 has no altsetting 0 [ 329.603871][ T8] usb 5-1: string descriptor 0 read error: -22 [ 329.620482][ T8] usb 5-1: New USB device found, idVendor=bf04, idProduct=0101, bcdDevice= 0.40 [ 329.639720][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.690646][ T8] usb 5-1: found format II with max.bitrate = 0, frame size=3 [ 329.710003][ T5831] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 329.725091][ T5831] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 329.735459][ T8] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 329.741566][ T8] usb 5-1: selecting invalid altsetting 0 [ 329.748123][ T5831] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 329.778290][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.806413][ T9404] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 329.818492][ T5831] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 329.927749][ T9401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.991'. [ 330.120806][ T5874] usb 5-1: USB disconnect, device number 27 [ 330.480863][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.502648][ T9420] hub 2-0:1.0: USB hub found [ 330.509373][ T9420] hub 2-0:1.0: 1 port detected [ 331.917723][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.451108][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.551867][ T5874] usb 1-1: USB disconnect, device number 18 [ 332.560287][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.590390][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 332.590407][ T29] audit: type=1400 audit(1738322269.974:920): avc: denied { mount } for pid=9442 comm="syz.2.1004" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 332.745586][ T29] audit: type=1400 audit(1738322270.154:921): avc: denied { execute } for pid=9449 comm="syz.2.1007" path=2F6D656D66643AFD0F6D33232F202864656C6574656429 dev="hugetlbfs" ino=23237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 332.790629][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1006'. [ 332.974941][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.983408][ T29] audit: type=1400 audit(1738322270.384:922): avc: denied { read } for pid=9460 comm="syz.1.1009" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 333.037637][ T29] audit: type=1400 audit(1738322270.384:923): avc: denied { open } for pid=9460 comm="syz.1.1009" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 333.075198][ T6660] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 333.244213][ T29] audit: type=1400 audit(1738322270.384:924): avc: denied { ioctl } for pid=9460 comm="syz.1.1009" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 333.294306][ T29] audit: type=1400 audit(1738322270.694:925): avc: denied { create } for pid=9468 comm="syz.0.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 333.299231][ T9469] CIFS: iocharset name too long [ 333.548837][ T6660] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 333.565721][ T6660] usb 4-1: config 0 has no interface number 0 [ 333.757394][ T29] audit: type=1400 audit(1738322271.034:926): avc: denied { bind } for pid=9468 comm="syz.0.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 333.829568][ T6660] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 334.008383][ T6660] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 334.019626][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.085103][ T6660] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 334.106354][ T6660] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 334.129523][ T6660] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 334.139238][ T29] audit: type=1400 audit(1738322271.544:927): avc: denied { write } for pid=9481 comm="syz.0.1015" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 334.153836][ T6660] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.172696][ T9482] input: syz0 as /devices/virtual/input/input6 [ 334.198149][ T6660] usb 4-1: config 0 descriptor?? [ 334.214786][ T6660] hub 4-1:0.3: bad descriptor, ignoring hub [ 334.223421][ T6660] hub 4-1:0.3: probe with driver hub failed with error -5 [ 334.246081][ T29] audit: type=1400 audit(1738322271.574:928): avc: denied { ioctl } for pid=9481 comm="syz.0.1015" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 334.251740][ T6660] sierra 4-1:0.3: Sierra USB modem converter detected [ 334.304495][ T5897] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 334.354401][ T5831] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 334.445862][ T6660] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 334.456470][ T6660] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 334.466653][ T5897] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 334.474360][ T29] audit: type=1326 audit(1738322271.874:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.0.1020" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc5698cda9 code=0x0 [ 334.483607][ T5897] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 334.512999][ T6660] usb 4-1: USB disconnect, device number 22 [ 334.521435][ T9494] kernel read not supported for file /eth0 (pid: 9494 comm: syz.0.1020) [ 334.528343][ T5831] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 334.537153][ T6660] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 334.550355][ T5897] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 334.555053][ T5831] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 334.565874][ T6660] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 334.578268][ T5874] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 334.581272][ T5831] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 334.586895][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.598811][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.624140][ T6660] sierra 4-1:0.3: device disconnected [ 334.625843][ T9480] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 334.644657][ T9478] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 334.650366][ T5831] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 334.697039][ T5897] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 334.756138][ T5874] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 334.769571][ T5874] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 334.780233][ T5874] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 334.789438][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.875103][ T5831] usb 3-1: USB disconnect, device number 20 [ 334.986109][ T6660] usb 2-1: USB disconnect, device number 18 [ 335.040153][ T5874] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 335.055561][ T5874] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input7 [ 335.065002][ T2149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.089473][ T5874] input: failed to attach handler kbd to device input7, error: -5 [ 335.109801][ T5874] usb 5-1: USB disconnect, device number 28 [ 335.132069][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1021'. [ 335.334917][ T9509] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 335.629699][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.018948][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.109946][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.248429][ T9530] loop6: detected capacity change from 0 to 524287999 [ 336.269185][ C0] blk_print_req_error: 24 callbacks suppressed [ 336.269204][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.284586][ C0] buffer_io_error: 24 callbacks suppressed [ 336.284598][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.304496][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.313696][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.324257][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.333433][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.341484][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.350771][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.372925][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.382121][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.384414][ T5831] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 336.390573][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.406668][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.415085][ T5874] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 336.415104][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.431830][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.444264][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.453445][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.473000][ T9530] ldm_validate_partition_table(): Disk read failed. [ 336.485353][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.494550][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.502846][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.511989][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.527873][ T9530] Dev loop6: unable to read RDB block 0 [ 336.549530][ T9530] loop6: unable to read partition table [ 336.555649][ T9530] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 336.564823][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 336.569097][ T5831] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 336.582531][ T5193] ldm_validate_partition_table(): Disk read failed. [ 336.584915][ T9535] ipvlan2: entered allmulticast mode [ 336.589302][ T5874] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.598139][ T5831] usb 2-1: config 0 has no interface number 0 [ 336.604150][ T5874] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 336.611054][ T9535] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 336.627605][ T5193] Dev loop6: unable to read RDB block 0 [ 336.627618][ T5831] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 336.653675][ T5193] loop6: unable to read partition table [ 336.687988][ T5874] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 336.688949][ T9535] batman_adv: batadv0: Adding interface: ipvlan2 [ 336.706546][ T5831] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 336.781638][ T5874] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.795376][ T9535] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.892988][ T5874] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 336.965490][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.007134][ T5831] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 337.010575][ T9535] batman_adv: batadv0: Interface activated: ipvlan2 [ 337.131060][ T5831] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 337.151566][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.184354][ T5831] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 337.240146][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.265411][ T5831] usb 2-1: config 0 descriptor?? [ 337.272433][ T5831] hub 2-1:0.3: bad descriptor, ignoring hub [ 337.278690][ T5831] hub 2-1:0.3: probe with driver hub failed with error -5 [ 337.312867][ T5831] sierra 2-1:0.3: Sierra USB modem converter detected [ 337.331045][ T5874] usb 3-1: GET_CAPABILITIES returned 0 [ 337.336719][ T5874] usbtmc 3-1:16.0: can't read capabilities [ 337.383508][ T9545] netlink: 187320 bytes leftover after parsing attributes in process `syz.4.1038'. [ 337.393194][ T9545] netlink: zone id is out of range [ 337.403479][ T9545] netlink: zone id is out of range [ 337.410570][ T9545] netlink: zone id is out of range [ 337.421687][ T9545] netlink: zone id is out of range [ 337.427191][ T9545] netlink: zone id is out of range [ 337.432510][ T9545] netlink: zone id is out of range [ 337.486691][ T5831] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 337.504869][ T5831] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 337.534664][ T970] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 337.563089][ T5831] usb 2-1: USB disconnect, device number 19 [ 337.614333][ T5831] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 337.661497][ T5831] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 337.701717][ T970] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 337.718690][ T5831] sierra 2-1:0.3: device disconnected [ 337.731925][ T970] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 337.901453][ T970] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 337.910643][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.921208][ T9541] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 337.931513][ T970] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 338.586287][ T5831] usb 1-1: USB disconnect, device number 19 [ 339.700308][ T5831] usb 3-1: USB disconnect, device number 21 [ 339.809515][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 339.809530][ T29] audit: type=1400 audit(1738322277.214:946): avc: denied { getopt } for pid=9574 comm="syz.3.1049" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 339.894400][ T29] audit: type=1400 audit(1738322277.284:947): avc: denied { getopt } for pid=9576 comm="syz.0.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 339.943388][ T29] audit: type=1400 audit(1738322277.284:948): avc: denied { name_connect } for pid=9576 comm="syz.0.1051" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 339.998580][ T29] audit: type=1400 audit(1738322277.394:949): avc: denied { execute } for pid=9574 comm="syz.3.1049" path="/dev/dsp" dev="devtmpfs" ino=1285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 340.090575][ T29] audit: type=1400 audit(1738322277.434:950): avc: denied { ioctl } for pid=9574 comm="syz.3.1049" path="/dev/video37" dev="devtmpfs" ino=1050 ioctlcmd=0x5604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 340.297724][ T5831] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 340.312191][ T9589] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 340.532490][ T29] audit: type=1400 audit(1738322277.934:951): avc: denied { getopt } for pid=9584 comm="syz.2.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 340.553228][ T5831] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 340.561675][ T5831] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 340.573372][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.593951][ T5831] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 340.611362][ T5831] usb 1-1: config 0 has no interface number 0 [ 340.638507][ T5831] usb 1-1: config 0 interface 156 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.654586][ T2149] net_ratelimit: 8 callbacks suppressed [ 340.654600][ T2149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.678313][ T5831] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 340.704786][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.808781][ T5831] usb 1-1: config 0 descriptor?? [ 340.837530][ T5831] gspca_main: spca561-2.14.0 probing abcd:cdee [ 340.875751][ T9596] macvtap0: entered promiscuous mode [ 340.881127][ T9596] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 340.915824][ T9596] macvtap0: entered allmulticast mode [ 340.921238][ T9596] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 341.090217][ T9596] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 341.142410][ T9596] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 341.355350][ T5831] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 341.513218][ T5831] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 341.521106][ T5831] usb 1-1: MIDIStreaming interface descriptor not found [ 341.695405][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.707417][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.184343][ T2149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.192811][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.242367][ T8] usb 1-1: USB disconnect, device number 20 [ 344.178825][ T29] audit: type=1400 audit(1738322281.584:952): avc: denied { create } for pid=9659 comm="syz.1.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 344.206407][ T29] audit: type=1400 audit(1738322281.604:953): avc: denied { setopt } for pid=9659 comm="syz.1.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 344.226677][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.258507][ T2149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.263171][ T29] audit: type=1400 audit(1738322281.614:954): avc: denied { create } for pid=9661 comm="syz.3.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 344.302684][ T29] audit: type=1400 audit(1738322281.614:955): avc: denied { bind } for pid=9661 comm="syz.3.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 344.494572][ T5874] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 344.719148][ T5874] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.771659][ T5874] usb 4-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9 [ 344.781787][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.792483][ T5874] usb 4-1: Product: syz [ 344.875526][ T5874] usb 4-1: Manufacturer: syz [ 344.880675][ T5874] usb 4-1: SerialNumber: syz [ 344.912021][ T5874] r8152-cfgselector 4-1: Unknown version 0x0000 [ 344.922503][ T5874] r8152-cfgselector 4-1: config 0 descriptor?? [ 344.942704][ T5874] hub 4-1:0.0: bad descriptor, ignoring hub [ 344.955702][ T5874] hub 4-1:0.0: probe with driver hub failed with error -5 [ 345.007687][ T29] audit: type=1400 audit(1738322282.414:956): avc: denied { map } for pid=9668 comm="syz.4.1078" path="/proc/689/stat" dev="proc" ino=24658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 345.103384][ T9679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1080'. [ 345.106336][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'. [ 345.122583][ T29] audit: type=1400 audit(1738322282.524:957): avc: denied { bind } for pid=9678 comm="syz.2.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 345.140912][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 345.141816][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.224520][ T5874] r8152-cfgselector 4-1: USB disconnect, device number 23 [ 345.299353][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.260673][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.335382][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.343508][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.405614][ T29] audit: type=1400 audit(1738322283.814:958): avc: denied { append } for pid=9700 comm="syz.0.1089" name="v4l-subdev5" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 346.428770][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.428989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.093626][ T9705] futex_wake_op: syz.2.1088 tries to shift op by 144; fix this program [ 347.142365][ T29] audit: type=1400 audit(1738322284.054:959): avc: denied { append } for pid=9703 comm="syz.2.1088" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 347.167224][ T9715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=9715 comm=syz.0.1090 [ 347.303402][ T29] audit: type=1400 audit(1738322284.064:960): avc: denied { unmount } for pid=9703 comm="syz.2.1088" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 347.374422][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.386675][ T9722] sp0: Synchronizing with TNC [ 347.408208][ T9724] No control pipe specified [ 347.429252][ T29] audit: type=1326 audit(1738322284.834:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186f78cda9 code=0x7ffc0000 [ 347.504426][ T970] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 347.511192][ T29] audit: type=1326 audit(1738322284.834:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f186f78cda9 code=0x7ffc0000 [ 347.537286][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.566986][ T29] audit: type=1326 audit(1738322284.834:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186f78cda9 code=0x7ffc0000 [ 347.661313][ T29] audit: type=1326 audit(1738322284.834:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f186f78cda9 code=0x7ffc0000 [ 347.699271][ T29] audit: type=1326 audit(1738322284.834:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9723 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186f78cda9 code=0x7ffc0000 [ 347.729048][ T970] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 347.739367][ T970] usb 5-1: config 0 has no interface number 0 [ 347.747808][ T970] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 347.800132][ T970] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 347.829387][ T970] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 347.971066][ T970] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 347.982543][ T970] usb 5-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 347.992084][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.005362][ T970] usb 5-1: config 0 descriptor?? [ 348.012979][ T970] hub 5-1:0.3: bad descriptor, ignoring hub [ 348.019038][ T970] hub 5-1:0.3: probe with driver hub failed with error -5 [ 348.027355][ T970] sierra 5-1:0.3: Sierra USB modem converter detected [ 348.140094][ T9756] netlink: 'syz.0.1108': attribute type 3 has an invalid length. [ 348.148039][ T9756] netlink: 'syz.0.1108': attribute type 3 has an invalid length. [ 348.225647][ T970] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 348.238923][ T970] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 348.275414][ T970] usb 5-1: USB disconnect, device number 29 [ 348.313467][ T970] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 348.348516][ T970] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 348.358780][ T970] sierra 5-1:0.3: device disconnected [ 348.886667][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.074690][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1112'. [ 349.324462][ T9764] netlink: 'syz.2.1111': attribute type 1 has an invalid length. [ 349.374082][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.465941][ T9764] netlink: 134708 bytes leftover after parsing attributes in process `syz.2.1111'. [ 350.272193][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.368084][ T9784] fuse: Bad value for 'user_id' [ 350.373182][ T9784] fuse: Bad value for 'user_id' [ 350.437971][ T9788] overlayfs: failed to resolve './file1': -2 [ 350.455459][ T9788] kAFS: unable to lookup cell '/' [ 350.538965][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 350.538981][ T29] audit: type=1400 audit(1738322287.944:1012): avc: denied { name_bind } for pid=9793 comm="syz.4.1123" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 350.569016][ T29] audit: type=1400 audit(1738322287.974:1013): avc: denied { read } for pid=9793 comm="syz.4.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 350.620983][ T29] audit: type=1400 audit(1738322288.024:1014): avc: denied { create } for pid=9793 comm="syz.4.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 350.662244][ T29] audit: type=1400 audit(1738322288.054:1015): avc: denied { bind } for pid=9793 comm="syz.4.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 350.682385][ T29] audit: type=1400 audit(1738322288.054:1016): avc: denied { name_bind } for pid=9793 comm="syz.4.1123" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 350.830548][ T6660] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 351.198035][ T970] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 351.227689][ T29] audit: type=1400 audit(1738322288.054:1017): avc: denied { node_bind } for pid=9793 comm="syz.4.1123" saddr=::ffff:172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 351.283677][ T29] audit: type=1400 audit(1738322288.684:1018): avc: denied { bind } for pid=9793 comm="syz.4.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 351.305054][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.313745][ T6660] usb 1-1: device descriptor read/64, error -71 [ 351.320527][ T29] audit: type=1400 audit(1738322288.684:1019): avc: denied { listen } for pid=9793 comm="syz.4.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 351.380365][ T970] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 351.399315][ T970] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 351.414317][ T29] audit: type=1400 audit(1738322288.684:1020): avc: denied { connect } for pid=9793 comm="syz.4.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 351.437442][ T970] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 351.444409][ T29] audit: type=1400 audit(1738322288.684:1021): avc: denied { setopt } for pid=9793 comm="syz.4.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 351.463807][ T970] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 351.661456][ T970] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 351.674194][ T970] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 351.683067][ T9815] netlink: 'syz.4.1129': attribute type 10 has an invalid length. [ 351.688480][ T970] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 352.600044][ T6660] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 352.627118][ T2149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.644964][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.650286][ T9815] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1129'. [ 352.653396][ T970] usb 2-1: Product: syz [ 352.672585][ T970] usb 2-1: Manufacturer: syz [ 352.694807][ T970] cdc_wdm 2-1:1.0: skipping garbage [ 352.701235][ T970] cdc_wdm 2-1:1.0: skipping garbage [ 352.805016][ T9815] team0: entered promiscuous mode [ 352.853323][ T9815] team_slave_0: entered promiscuous mode [ 352.874422][ T9815] team_slave_1: entered promiscuous mode [ 352.929845][ T970] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 352.938286][ T970] cdc_wdm 2-1:1.0: Unknown control protocol [ 352.946770][ T970] usb 2-1: USB disconnect, device number 20 [ 352.967118][ T9829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.984203][ T9815] bridge0: port 3(team0) entered blocking state [ 352.991399][ T9815] bridge0: port 3(team0) entered disabled state [ 353.003166][ T9823] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1129'. [ 353.012596][ T9815] team0: entered allmulticast mode [ 353.021827][ T9815] team_slave_0: entered allmulticast mode [ 353.117685][ T9815] team_slave_1: entered allmulticast mode [ 353.185901][ T9815] bridge0: port 3(team0) entered blocking state [ 353.192249][ T9815] bridge0: port 3(team0) entered forwarding state [ 353.706711][ T2149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.336390][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.700086][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.894294][ T8] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 355.987335][ T9881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1146'. [ 355.996363][ T9881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1146'. [ 356.173736][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 356.189960][ T8] usb 5-1: too many configurations: 242, using maximum allowed: 8 [ 356.219730][ T8] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 356.253174][ T8] usb 5-1: can't read configurations, error -61 [ 356.415872][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.497108][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 356.497140][ T29] audit: type=1400 audit(1738322293.884:1028): avc: denied { create } for pid=9889 comm="syz.1.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 356.900588][ T8] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 356.962232][ T29] audit: type=1400 audit(1738322294.364:1029): avc: denied { create } for pid=9895 comm="syz.2.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 357.003035][ T9896] netlink: 344 bytes leftover after parsing attributes in process `syz.2.1152'. [ 357.035183][ T5906] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 357.046441][ T9902] netlink: 'syz.2.1154': attribute type 10 has an invalid length. [ 357.056201][ T9902] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1154'. [ 357.065660][ T9902] team0: entered promiscuous mode [ 357.071014][ T9902] team_slave_0: entered promiscuous mode [ 357.071879][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 357.078025][ T9902] team_slave_1: entered promiscuous mode [ 357.126074][ T8] usb 5-1: too many configurations: 242, using maximum allowed: 8 [ 357.135569][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.143840][ T8] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 357.151531][ T8] usb 5-1: can't read configurations, error -61 [ 357.159216][ T8] usb usb5-port1: attempt power cycle [ 357.174337][ T5906] usb 1-1: device descriptor read/64, error -71 [ 357.194597][ T6660] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 357.355475][ T6660] usb 4-1: device descriptor read/64, error -71 [ 357.384371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.459372][ T5906] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 357.484909][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.734495][ T6660] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 357.846530][ T5906] usb 1-1: device descriptor read/64, error -71 [ 357.893337][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.976504][ T6660] usb 4-1: device descriptor read/64, error -71 [ 358.176083][ T6660] usb usb4-port1: attempt power cycle [ 358.186518][ T5906] usb usb1-port1: attempt power cycle [ 358.330792][ T29] audit: type=1400 audit(1738322295.734:1030): avc: denied { read } for pid=9916 comm="syz.4.1158" path="socket:[24390]" dev="sockfs" ino=24390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 358.408156][ T29] audit: type=1400 audit(1738322295.814:1031): avc: denied { getopt } for pid=9916 comm="syz.4.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 358.427626][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.498358][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.534313][ T5906] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 358.564842][ T5906] usb 1-1: device descriptor read/8, error -71 [ 358.595730][ T6660] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 358.615062][ T6660] usb 4-1: device descriptor read/8, error -71 [ 358.664439][ T5874] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 358.734592][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.774329][ T5897] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 358.804319][ T5906] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 358.825296][ T5906] usb 1-1: device descriptor read/8, error -71 [ 358.836229][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 358.842465][ T5874] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 358.856111][ T5874] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 358.865365][ T6660] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 358.872955][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.890618][ T5874] usb 5-1: Product: 儏췭偬ﻜ䦠瘍ﰍ簾뷽餀Ớঐҹ㚍袲붧㳓ો櫵踆꣤쇊좔껻襤㕬㚟伉ﱁꫜᅥ뙕གྷ蝈빩穟囷똒忾쇝䳯䠬⦌橾뼖➐╀ [ 358.909983][ T6660] usb 4-1: device descriptor read/8, error -71 [ 358.916573][ T5874] usb 5-1: Manufacturer: 䉞槽诞䃴஝墷⡃ﯡｚ柾䶷нⲹണ樻ﵬ輕羟ଓ䩯콾䳥ꭸ㍨੶곓埵휂䃣畯捆᠄ට鲽㿧┃嶺궙曅缡ꆕ频笳ܢ᪛⇠涐訰慱갆ꉐ軌捛殏⾋螐㳵暫寨⤱°㹓Ꞟષ⥄⍫乓 [ 358.936040][ T5906] usb usb1-port1: unable to enumerate USB device [ 358.940041][ T5874] usb 5-1: SerialNumber: ᐉ [ 358.951875][ T9923] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1160'. [ 358.962797][ T29] audit: type=1400 audit(1738322296.364:1032): avc: denied { map } for pid=9922 comm="syz.2.1160" path="socket:[25246]" dev="sockfs" ino=25246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 358.967529][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 358.990369][ T29] audit: type=1400 audit(1738322296.364:1033): avc: denied { read accept } for pid=9922 comm="syz.2.1160" path="socket:[25246]" dev="sockfs" ino=25246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 358.997058][ T5897] usb 2-1: not running at top speed; connect to a high speed hub [ 359.033990][ T6660] usb usb4-port1: unable to enumerate USB device [ 359.042594][ T5897] usb 2-1: config 7 has an invalid interface number: 180 but max is 0 [ 359.050986][ T5897] usb 2-1: config 7 has no interface number 0 [ 359.064513][ T5897] usb 2-1: config 7 interface 180 has no altsetting 0 [ 359.074810][ T5897] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=3c.f2 [ 359.078118][ T9925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1161'. [ 359.084104][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.105857][ T5897] usb 2-1: Product: syz [ 359.110228][ T5897] usb 2-1: Manufacturer: syz [ 359.110529][ T9925] ipt_REJECT: TCP_RESET invalid for non-tcp [ 359.115018][ T5897] usb 2-1: SerialNumber: syz [ 359.336678][ T9921] netlink: 'syz.1.1159': attribute type 1 has an invalid length. [ 359.364557][ T9921] bond2: entered promiscuous mode [ 359.375059][ T9921] bond2: entered allmulticast mode [ 359.380430][ T9937] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1164'. [ 359.451639][ T9919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.545377][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.556758][ T9919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.723460][ T29] audit: type=1400 audit(1738322297.114:1034): avc: denied { ioctl } for pid=9916 comm="syz.4.1158" path="socket:[25243]" dev="sockfs" ino=25243 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 360.466124][ T5897] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 360.478569][ T5897] gspca_topro: reg_w err -71 [ 360.514993][ T5897] gspca_topro: Sensor soi763a [ 360.567475][ T5897] usb 2-1: USB disconnect, device number 21 [ 360.592343][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.930366][ T9961] 9pnet_fd: Insufficient options for proto=fd [ 360.938170][ T9961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1171'. [ 361.350169][ T5874] cdc_ncm 5-1:1.0: bind() failure [ 361.400360][ T5874] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 361.423119][ T5874] cdc_ncm 5-1:1.1: bind() failure [ 361.452699][ T5874] usb 5-1: USB disconnect, device number 33 [ 361.514426][ T8] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 361.640303][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.724514][ T5897] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 361.809262][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.824794][ T6660] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 361.874000][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 361.892283][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 361.912510][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 361.950967][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 362.030378][ T5897] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 362.066351][ T8] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 362.068235][ T5897] usb 4-1: config 0 has no interface number 0 [ 362.101027][ T5897] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 362.104598][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.110927][ T6660] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 362.152041][ T8] usb 1-1: Product: syz [ 362.178406][ T8] usb 1-1: Manufacturer: syz [ 362.180270][ T5897] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 362.195085][ T6660] usb 2-1: config 0 has no interface number 0 [ 362.201765][ T6660] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 362.211586][ T5897] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 362.223268][ T6660] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 362.244913][ T5897] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 362.247809][ T8] usb 1-1: SerialNumber: syz [ 362.266007][ T6660] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 362.299665][ T5897] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 362.300228][ T8] usb 1-1: config 0 descriptor?? [ 362.343267][ T6660] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 362.354307][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.361184][ T9971] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 362.375649][ T5897] usb 4-1: config 0 descriptor?? [ 362.386067][ T6660] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 362.435009][ T5897] hub 4-1:0.3: bad descriptor, ignoring hub [ 362.449817][ T5897] hub 4-1:0.3: probe with driver hub failed with error -5 [ 362.457499][ T6660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.550236][ T5897] sierra 4-1:0.3: Sierra USB modem converter detected [ 362.558778][ T6660] usb 2-1: config 0 descriptor?? [ 362.566284][ T6660] hub 2-1:0.3: bad descriptor, ignoring hub [ 362.572237][ T6660] hub 2-1:0.3: probe with driver hub failed with error -5 [ 362.599833][ T6660] sierra 2-1:0.3: Sierra USB modem converter detected [ 362.655054][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.896253][ T8] rc_core: IR keymap rc-imon-rsc not found [ 363.226631][ T8] Registered IR keymap rc-empty [ 363.241525][ T5897] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 363.261284][ T8] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 363.279544][ T8] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 363.293930][ T6660] usb 2-1: Sierra USB modem converter now attached to ttyUSB2 [ 363.308281][ T5897] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 363.318342][ T6660] usb 2-1: Sierra USB modem converter now attached to ttyUSB3 [ 363.355928][ T5897] usb 4-1: USB disconnect, device number 28 [ 363.382006][ T6660] usb 2-1: USB disconnect, device number 22 [ 363.455670][ T5897] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 363.471402][ T6660] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 363.506206][ T5897] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 363.524552][ T6660] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 363.545532][ T5897] sierra 4-1:0.3: device disconnected [ 363.554142][ T6660] sierra 2-1:0.3: device disconnected [ 363.694531][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.734728][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.814612][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.902987][T10009] overlayfs: failed to clone upperpath [ 364.993032][T10015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1190'. [ 365.204080][ T29] audit: type=1400 audit(1738322302.604:1035): avc: denied { connect } for pid=10025 comm="syz.1.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 365.234033][ T29] audit: type=1400 audit(1738322302.634:1036): avc: denied { write } for pid=10025 comm="syz.1.1193" path="socket:[24562]" dev="sockfs" ino=24562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 365.395485][T10038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.547758][T10044] openvswitch: netlink: Flow actions attr not present in new flow. [ 365.582870][ T29] audit: type=1400 audit(1738322302.984:1037): avc: denied { write } for pid=10045 comm="syz.1.1201" path="socket:[26690]" dev="sockfs" ino=26690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 365.651269][T10038] 9pnet: p9_errstr2errno: server reported unknown error [ 365.673941][ T29] audit: type=1400 audit(1738322303.074:1038): avc: denied { read write } for pid=10037 comm="syz.3.1198" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 365.717260][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1198'. [ 365.766675][T10038] batadv0: entered promiscuous mode [ 365.774538][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.797153][T10038] team0: entered promiscuous mode [ 365.848238][T10038] team_slave_0: entered promiscuous mode [ 365.998825][ T5897] usb 1-1: USB disconnect, device number 27 [ 366.221511][T10038] team_slave_1: entered promiscuous mode [ 366.375096][ T29] audit: type=1400 audit(1738322303.074:1039): avc: denied { open } for pid=10037 comm="syz.3.1198" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 366.401730][T10038] hsr1: entered promiscuous mode [ 366.415751][T10038] hsr1: entered allmulticast mode [ 366.420808][T10038] batadv0: entered allmulticast mode [ 366.430083][T10038] team0: entered allmulticast mode [ 366.462028][T10038] team_slave_0: entered allmulticast mode [ 366.486759][T10038] team_slave_1: entered allmulticast mode [ 366.553535][ T29] audit: type=1400 audit(1738322303.944:1040): avc: denied { connect } for pid=10051 comm="syz.0.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 366.656871][ T29] audit: type=1400 audit(1738322304.044:1041): avc: denied { setattr } for pid=10059 comm="syz.1.1204" path="/dev/ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 366.759442][T10064] input: syz1 as /devices/virtual/input/input9 [ 366.805491][ T29] audit: type=1400 audit(1738322304.214:1042): avc: denied { write } for pid=10063 comm="syz.1.1207" name="sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 366.819491][T10064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1207'. [ 366.842700][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.864328][ T25] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 367.047149][ T25] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 367.117485][ T25] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 367.127437][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 367.137594][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.164733][T10058] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 367.237678][ T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 367.306964][ T29] audit: type=1400 audit(1738322304.704:1043): avc: denied { setopt } for pid=10070 comm="syz.1.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 367.329585][T10072] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 367.399036][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.054910][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.079575][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.088577][ T29] audit: type=1400 audit(1738322305.484:1044): avc: denied { bind } for pid=10051 comm="syz.0.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 368.344449][T10058] fuse: Bad value for 'fd' [ 368.378368][ T8] usb 4-1: USB disconnect, device number 29 [ 368.564360][ T5897] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 368.714313][ T5897] usb 2-1: device descriptor read/64, error -71 [ 368.984408][ T5897] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 369.134515][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.142813][ T5897] usb 2-1: device descriptor read/64, error -71 [ 369.264677][ T5897] usb usb2-port1: attempt power cycle [ 369.343335][ T8] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 369.564298][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 369.581837][T10103] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1219'. [ 369.604507][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.624336][ T8] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 369.634285][ T5897] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 369.648577][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.664800][ T5897] usb 2-1: device descriptor read/8, error -71 [ 369.673302][ T8] usb 4-1: config 0 descriptor?? [ 369.686847][ T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 369.964352][ T5897] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 369.997963][ T5897] usb 2-1: device descriptor read/8, error -71 [ 370.150611][ T5897] usb usb2-port1: unable to enumerate USB device [ 370.489377][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.617233][T10114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1221'. [ 371.413192][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.542084][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.158388][ T8] usb 4-1: USB disconnect, device number 30 [ 372.556364][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 372.573425][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 372.573441][ T29] audit: type=1400 audit(1738322309.974:1057): avc: denied { bind } for pid=10153 comm="syz.0.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 372.584444][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.616859][T10156] Invalid source name [ 372.777663][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'. [ 372.801544][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1238'. [ 372.824375][T10163] netlink: 38 bytes leftover after parsing attributes in process `syz.1.1238'. [ 372.934564][ T25] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 373.472239][ T29] audit: type=1400 audit(1738322310.874:1058): avc: denied { name_bind 0x1000000 } for pid=10160 comm="syz.4.1237" path="socket:[25795]" dev="sockfs" ino=25795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 373.705595][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.481585][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.494592][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.504659][ T25] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 374.513809][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 374.521990][ T25] usb 1-1: SerialNumber: syz [ 374.709184][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.746940][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.902507][T10190] overlayfs: failed to resolve './file1': -2 [ 375.374367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.382630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.445139][ T25] usb 1-1: 0:2 : does not exist [ 375.468274][ T29] audit: type=1400 audit(1738322312.834:1059): avc: denied { map } for pid=10153 comm="syz.0.1234" path="socket:[25811]" dev="sockfs" ino=25811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 375.488852][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1247'. [ 375.531079][ T25] usb 1-1: USB disconnect, device number 28 [ 375.549230][ T29] audit: type=1400 audit(1738322312.834:1060): avc: denied { read } for pid=10153 comm="syz.0.1234" path="socket:[25811]" dev="sockfs" ino=25811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 375.672496][ T29] audit: type=1400 audit(1738322313.074:1061): avc: denied { setopt } for pid=10205 comm="syz.2.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 375.744939][ T6821] udevd[6821]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.774734][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.047007][T10222] FAULT_INJECTION: forcing a failure. [ 376.047007][T10222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.060268][T10222] CPU: 0 UID: 0 PID: 10222 Comm: syz.0.1258 Not tainted 6.13.0-syzkaller-09522-gd3d90cc2891c #0 [ 376.060280][T10222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 376.060286][T10222] Call Trace: [ 376.060291][T10222] [ 376.060295][T10222] dump_stack_lvl+0x16c/0x1f0 [ 376.060309][T10222] should_fail_ex+0x50a/0x650 [ 376.060324][T10222] _copy_from_user+0x2e/0xd0 [ 376.060338][T10222] copy_mount_options+0x76/0x190 [ 376.060350][T10222] __x64_sys_mount+0x1ad/0x310 [ 376.060360][T10222] ? __pfx___x64_sys_mount+0x10/0x10 [ 376.060373][T10222] do_syscall_64+0xcd/0x250 [ 376.060383][T10222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.060395][T10222] RIP: 0033:0x7fdc5698cda9 [ 376.060403][T10222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.060411][T10222] RSP: 002b:00007fdc577be038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 376.060420][T10222] RAX: ffffffffffffffda RBX: 00007fdc56ba5fa0 RCX: 00007fdc5698cda9 [ 376.060441][T10222] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 376.060447][T10222] RBP: 00007fdc577be090 R08: 0000000020000400 R09: 0000000000000000 [ 376.060452][T10222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.060457][T10222] R13: 0000000000000000 R14: 00007fdc56ba5fa0 R15: 00007ffce8955c38 [ 376.060471][T10222] [ 376.205003][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.211407][ T25] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 376.229777][ T8] kernel write not supported for file /dsp1 (pid: 8 comm: kworker/0:0) [ 376.238231][ T29] audit: type=1400 audit(1738322313.624:1062): avc: denied { read } for pid=10219 comm="syz.1.1257" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 376.238269][ T29] audit: type=1400 audit(1738322313.624:1063): avc: denied { open } for pid=10219 comm="syz.1.1257" path="/269/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 376.238296][ T29] audit: type=1400 audit(1738322313.624:1064): avc: denied { ioctl } for pid=10219 comm="syz.1.1257" path="/269/file0/file0" dev="fuse" ino=0 ioctlcmd=0x301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 376.374484][ T25] usb 4-1: device descriptor read/64, error -71 [ 376.611627][ T29] audit: type=1400 audit(1738322313.924:1065): avc: denied { read } for pid=10227 comm="syz.1.1259" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 376.635708][ T29] audit: type=1400 audit(1738322313.924:1066): avc: denied { open } for pid=10227 comm="syz.1.1259" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 376.815121][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.830613][T10233] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 376.844433][ T25] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 376.975789][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.994334][ T25] usb 4-1: device descriptor read/64, error -71 [ 377.029357][T10238] sp0: Synchronizing with TNC [ 377.115372][ T25] usb usb4-port1: attempt power cycle [ 377.194741][ T6660] libceph: connect (1)[c::]:6789 error -101 [ 377.201208][ T6660] libceph: mon0 (1)[c::]:6789 connect error [ 377.399193][T10233] ceph: No mds server is up or the cluster is laggy [ 377.476658][ T6660] libceph: connect (1)[c::]:6789 error -101 [ 377.482834][ T25] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 377.490709][ T6660] libceph: mon0 (1)[c::]:6789 connect error [ 377.524887][ T25] usb 4-1: device descriptor read/8, error -71 [ 377.774449][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.785404][ T25] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 377.837905][ T25] usb 4-1: device descriptor read/8, error -71 [ 377.857741][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.965986][ T25] usb usb4-port1: unable to enumerate USB device [ 378.124475][ T6660] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 378.305460][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.311983][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.345706][ T6660] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.384296][ T6660] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 378.393356][ T6660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.472924][ T6660] usb 5-1: config 0 descriptor?? [ 378.894965][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.044533][ T6660] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 379.226263][ T6660] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0012/input/input10 [ 379.265817][T10268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.374806][T10268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.837468][ T6660] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 379.875912][ T6660] usb 5-1: USB disconnect, device number 34 [ 379.918400][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 379.918415][ T29] audit: type=1400 audit(1738322317.324:1072): avc: denied { listen } for pid=10302 comm="syz.0.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 379.970974][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.033306][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.041770][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.291913][T10325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1291'. [ 381.302241][T10325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1291'. [ 381.692650][T10329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.701264][T10329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.719528][T10329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.762595][T10333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.774612][T10334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1295'. [ 381.807116][T10334] ipt_REJECT: TCP_RESET invalid for non-tcp [ 382.054508][ T29] audit: type=1400 audit(1738322319.454:1073): avc: denied { mount } for pid=10344 comm="syz.2.1296" name="/" dev="ramfs" ino=26039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 382.122555][ T29] audit: type=1400 audit(1738322319.514:1074): avc: denied { setopt } for pid=10344 comm="syz.2.1296" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 382.144072][ T29] audit: type=1400 audit(1738322319.514:1075): avc: denied { connect } for pid=10344 comm="syz.2.1296" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 382.144102][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'. [ 382.168436][ T29] audit: type=1400 audit(1738322319.514:1076): avc: denied { name_connect } for pid=10344 comm="syz.2.1296" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 383.166603][ T6660] net_ratelimit: 64 callbacks suppressed [ 383.166620][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.079035][T10372] dvmrp6: entered allmulticast mode [ 384.094423][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.097202][ T29] audit: type=1400 audit(1738322321.004:1077): avc: denied { create } for pid=10368 comm="syz.2.1305" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 384.179332][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.320050][ T29] audit: type=1400 audit(1738322321.724:1078): avc: denied { unlink } for pid=5819 comm="syz-executor" name="file0" dev="tmpfs" ino=1499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 384.399955][T10383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1308'. [ 384.411341][T10383] ipt_REJECT: TCP_RESET invalid for non-tcp [ 385.092095][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1313'. [ 385.095221][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'. [ 385.215770][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.668537][T10431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1322'. [ 385.694753][ T8] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 385.875678][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.895109][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.905203][ T8] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 385.917122][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.939141][ T8] usb 4-1: config 0 descriptor?? [ 386.828182][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.877093][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.899581][ T8] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 386.914898][ T8] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 386.934152][ T8] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 386.970563][ T8] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 387.018427][ T8] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 387.065368][ T8] hid-thrustmaster 0003:044F:B65D.0013: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 387.155754][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.177508][ T29] audit: type=1400 audit(1738322324.574:1079): avc: denied { setopt } for pid=10426 comm="syz.3.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 387.194403][ T8] hid-thrustmaster 0003:044F:B65D.0013: Wrong number of endpoints? [ 387.726993][ C0] hid-thrustmaster 0003:044F:B65D.0013: URB to get model id failed with error -71 [ 387.744791][ T8] usb 4-1: USB disconnect, device number 35 [ 387.946139][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.025554][T10457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1329'. [ 388.161580][T10464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1333'. [ 389.026629][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.043325][T10465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1330'. [ 389.547143][T10486] netlink: 'syz.3.1337': attribute type 10 has an invalid length. [ 389.557032][T10486] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1337'. [ 389.582443][T10486] bridge0: port 3(team0) entered blocking state [ 389.590186][T10486] bridge0: port 3(team0) entered disabled state [ 389.606113][T10486] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1337'. [ 390.075446][ T29] audit: type=1400 audit(1738322327.444:1080): avc: denied { mounton } for pid=10492 comm="syz.0.1341" path="/243/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 390.174767][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.520131][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.528832][ T29] audit: type=1400 audit(1738322327.474:1081): avc: denied { ioctl } for pid=10492 comm="syz.0.1341" path="socket:[26237]" dev="sockfs" ino=26237 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 390.639981][ T8] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 391.279591][ T8] usb 2-1: device descriptor read/64, error -71 [ 391.549917][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.575166][ T8] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 391.582874][ T29] audit: type=1400 audit(1738322328.984:1082): avc: denied { execute_no_trans } for pid=10503 comm="syz.2.1343" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=26246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 391.756719][ T8] usb 2-1: device descriptor read/64, error -71 [ 391.834055][T10508] netlink: 'syz.3.1344': attribute type 10 has an invalid length. [ 391.864638][T10508] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1344'. [ 391.881305][ T8] usb usb2-port1: attempt power cycle [ 391.910319][T10508] bridge0: port 3(team0) entered blocking state [ 391.924920][T10509] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1344'. [ 391.965975][T10508] bridge0: port 3(team0) entered disabled state [ 392.244375][ T8] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 392.272483][ T8] usb 2-1: device descriptor read/8, error -71 [ 392.524336][ T8] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 392.601944][ T8] usb 2-1: device descriptor read/8, error -71 [ 392.604837][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.804578][ T8] usb usb2-port1: unable to enumerate USB device [ 393.389635][ T29] audit: type=1400 audit(1738322330.794:1083): avc: denied { remount } for pid=10514 comm="syz.0.1347" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 393.431147][T10530] FAULT_INJECTION: forcing a failure. [ 393.431147][T10530] name failslab, interval 1, probability 0, space 0, times 0 [ 393.480875][ T29] audit: type=1400 audit(1738322330.874:1084): avc: denied { connect } for pid=10531 comm="syz.1.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 393.514545][T10530] CPU: 1 UID: 0 PID: 10530 Comm: syz.4.1345 Not tainted 6.13.0-syzkaller-09522-gd3d90cc2891c #0 [ 393.514573][T10530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 393.514583][T10530] Call Trace: [ 393.514588][T10530] [ 393.514594][T10530] dump_stack_lvl+0x16c/0x1f0 [ 393.514616][T10530] should_fail_ex+0x50a/0x650 [ 393.514640][T10530] ? fs_reclaim_acquire+0xae/0x150 [ 393.514666][T10530] ? tomoyo_encode2+0x100/0x3e0 [ 393.514687][T10530] should_failslab+0xc2/0x120 [ 393.514706][T10530] __kmalloc_noprof+0xcb/0x510 [ 393.514722][T10530] ? d_absolute_path+0x137/0x1b0 [ 393.514747][T10530] tomoyo_encode2+0x100/0x3e0 [ 393.514772][T10530] tomoyo_encode+0x29/0x50 [ 393.514792][T10530] tomoyo_realpath_from_path+0x19d/0x720 [ 393.514822][T10530] tomoyo_mount_acl+0x1af/0x880 [ 393.514842][T10530] ? hlock_class+0x4e/0x130 [ 393.514859][T10530] ? __lock_acquire+0x15a9/0x3c40 [ 393.514885][T10530] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 393.514910][T10530] ? __pfx___lock_acquire+0x10/0x10 [ 393.514933][T10530] ? stack_trace_save+0x95/0xd0 [ 393.514952][T10530] ? __pfx_lock_release+0x10/0x10 [ 393.514987][T10530] ? trace_lock_acquire+0x14e/0x1f0 [ 393.515006][T10530] ? tomoyo_mount_permission+0x149/0x420 [ 393.515027][T10530] ? lock_acquire+0x2f/0xb0 [ 393.515048][T10530] ? tomoyo_mount_permission+0x149/0x420 [ 393.515072][T10530] tomoyo_mount_permission+0x16e/0x420 [ 393.515092][T10530] ? tomoyo_mount_permission+0x149/0x420 [ 393.515114][T10530] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 393.515145][T10530] ? get_current_fs_domain+0x184/0x1f0 [ 393.515174][T10530] security_sb_mount+0x9b/0x260 [ 393.515195][T10530] path_mount+0x129/0x1f10 [ 393.515215][T10530] ? kmem_cache_free+0x2e2/0x4d0 [ 393.515230][T10530] ? __pfx_path_mount+0x10/0x10 [ 393.515251][T10530] ? putname+0x13c/0x180 [ 393.515273][T10530] __x64_sys_mount+0x28f/0x310 [ 393.515291][T10530] ? __pfx___x64_sys_mount+0x10/0x10 [ 393.515316][T10530] do_syscall_64+0xcd/0x250 [ 393.515335][T10530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.515358][T10530] RIP: 0033:0x7f4d59b8cda9 [ 393.515372][T10530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.515388][T10530] RSP: 002b:00007f4d5a930038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 393.515404][T10530] RAX: ffffffffffffffda RBX: 00007f4d59da5fa0 RCX: 00007f4d59b8cda9 [ 393.515415][T10530] RDX: 0000000020002100 RSI: 0000000020000000 RDI: 0000000000000000 [ 393.515425][T10530] RBP: 00007f4d5a930090 R08: 0000000020000440 R09: 0000000000000000 [ 393.515435][T10530] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 393.515443][T10530] R13: 0000000000000000 R14: 00007f4d59da5fa0 R15: 00007ffc51d12e38 [ 393.515464][T10530] [ 393.515476][T10530] ERROR: Out of memory at tomoyo_realpath_from_path. [ 393.556989][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.802190][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.819311][ T29] audit: type=1400 audit(1738322331.224:1085): avc: denied { read } for pid=10531 comm="syz.1.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 393.864362][ T29] audit: type=1400 audit(1738322331.234:1086): avc: denied { shutdown } for pid=10531 comm="syz.1.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 394.726757][ T29] audit: type=1400 audit(1738322332.054:1087): avc: denied { wake_alarm } for pid=10542 comm="syz.3.1352" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 395.191560][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.574601][ T29] audit: type=1400 audit(1738322332.964:1088): avc: denied { write } for pid=10561 comm="syz.3.1355" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 395.914411][ T25] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 396.143381][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1361'. [ 396.180013][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.195839][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.215652][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.322187][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.342539][ T25] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 396.425405][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.616789][ T25] usb 2-1: config 0 descriptor?? [ 396.766447][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.083302][T10587] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1362'. [ 397.092382][T10587] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1362'. [ 397.593304][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.604142][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.613554][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.627563][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.677003][T10594] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1365'. [ 397.692474][T10594] [U] [ 397.695634][T10594] [U] [ 397.698338][T10594] [U] [ 397.701043][T10594] [U] [ 397.703743][T10594] [U] [ 397.706442][T10594] [U] [ 397.709141][T10594] [U] [ 397.711845][T10594] [U] [ 397.714950][T10594] [U] [ 397.717650][T10594] [U] [ 397.720333][T10594] [U] [ 397.732550][T10593] [U] [ 397.782787][T10596] xt_CT: No such helper "pptp" [ 397.871869][T10601] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1367'. [ 397.886525][ T29] audit: type=1400 audit(1738322335.294:1089): avc: denied { ioctl } for pid=10600 comm="syz.0.1367" path="socket:[27825]" dev="sockfs" ino=27825 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 397.970983][ T29] audit: type=1326 audit(1738322335.364:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10602 comm="syz.3.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fed8cda9 code=0x7ffc0000 [ 398.043762][ T29] audit: type=1326 audit(1738322335.364:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10602 comm="syz.3.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fed8cda9 code=0x7ffc0000 [ 398.101618][ T29] audit: type=1326 audit(1738322335.364:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10602 comm="syz.3.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f47fed8cda9 code=0x7ffc0000 [ 398.271226][ T25] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0014/input/input12 [ 398.440153][ T25] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0014/input/input13 [ 398.841172][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.852866][T10621] IPv6: sit1: Disabled Multicast RS [ 398.861459][ T25] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0014/input/input14 [ 398.905618][ T25] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0014/input/input15 [ 398.942303][ T25] uclogic 0003:256C:006D.0014: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 398.970365][ T25] usb 2-1: USB disconnect, device number 31 [ 399.125995][T10629] gfs2: path_lookup on c:l\{z`bHCTHY3s[|ltwo9U?иuCZ3{mU1qwE:Sho|s-`ℨƻdӍ 3C3+ returned error -2 [ 399.607281][T10636] fuse: Unknown parameter 'group_id00000000000000000000' [ 400.356997][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.432567][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.948016][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.982772][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1380'. [ 402.736841][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.758042][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.793256][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.807300][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 402.807314][ T29] audit: type=1400 audit(1738322340.214:1132): avc: denied { ioctl } for pid=10662 comm="syz.1.1383" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 403.101542][T10675] netlink: 'syz.4.1388': attribute type 10 has an invalid length. [ 403.500446][T10675] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1388'. [ 403.732963][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.751879][T10683] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1388'. [ 403.825800][ T29] audit: type=1400 audit(1738322341.234:1133): avc: denied { connect } for pid=10670 comm="syz.3.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 403.846065][T10683] nbd: must specify at least one socket [ 403.864553][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.994370][ T5830] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 404.020955][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'. [ 404.059264][T10693] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 404.075447][T10693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.099438][ T29] audit: type=1400 audit(1738322341.504:1134): avc: denied { create } for pid=10696 comm="syz.4.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 404.134083][T10698] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 404.141090][T10698] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 404.149031][ T29] audit: type=1400 audit(1738322341.504:1135): avc: denied { setopt } for pid=10696 comm="syz.4.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 404.165698][ T5830] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 404.184651][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.196424][ T29] audit: type=1400 audit(1738322341.594:1136): avc: denied { execute_no_trans } for pid=10692 comm="syz.3.1393" path="/273/file0" dev="tmpfs" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 404.203776][T10698] vhci_hcd vhci_hcd.0: Device attached [ 404.237271][ T5830] usb 1-1: config 0 descriptor?? [ 404.334350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.374486][ T8] vhci_hcd: vhci_device speed not set [ 404.447631][ T8] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 404.863328][ T5830] elan 0003:04F3:0755.0015: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 404.941287][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.983169][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'. [ 405.008319][ T5830] usb 1-1: USB disconnect, device number 29 [ 405.008935][ T5897] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 405.060419][T10710] FAULT_INJECTION: forcing a failure. [ 405.060419][T10710] name failslab, interval 1, probability 0, space 0, times 0 [ 405.105052][T10710] CPU: 0 UID: 0 PID: 10710 Comm: syz.1.1396 Not tainted 6.13.0-syzkaller-09522-gd3d90cc2891c #0 [ 405.105078][T10710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 405.105087][T10710] Call Trace: [ 405.105092][T10710] [ 405.105098][T10710] dump_stack_lvl+0x16c/0x1f0 [ 405.105121][T10710] should_fail_ex+0x50a/0x650 [ 405.105144][T10710] ? fs_reclaim_acquire+0xae/0x150 [ 405.105177][T10710] ? rtnl_newlink+0x109/0x1d60 [ 405.105195][T10710] should_failslab+0xc2/0x120 [ 405.105214][T10710] __kmalloc_cache_noprof+0x68/0x410 [ 405.105240][T10710] ? find_held_lock+0x2d/0x110 [ 405.105262][T10710] rtnl_newlink+0x109/0x1d60 [ 405.105283][T10710] ? hlock_class+0x4e/0x130 [ 405.105299][T10710] ? __lock_acquire+0xcc5/0x3c40 [ 405.105324][T10710] ? __pfx_rtnl_newlink+0x10/0x10 [ 405.105348][T10710] ? __pfx___lock_acquire+0x10/0x10 [ 405.105371][T10710] ? cred_has_capability.isra.0+0x192/0x2f0 [ 405.105394][T10710] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 405.105421][T10710] ? find_held_lock+0x2d/0x110 [ 405.105441][T10710] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 405.105460][T10710] ? __pfx_lock_release+0x10/0x10 [ 405.105482][T10710] ? trace_lock_acquire+0x14e/0x1f0 [ 405.105505][T10710] ? __pfx_rtnl_newlink+0x10/0x10 [ 405.105524][T10710] rtnetlink_rcv_msg+0x95b/0xea0 [ 405.105546][T10710] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 405.105577][T10710] netlink_rcv_skb+0x16b/0x440 [ 405.105596][T10710] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 405.105617][T10710] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 405.105648][T10710] ? netlink_deliver_tap+0x1ae/0xd30 [ 405.105671][T10710] netlink_unicast+0x53c/0x7f0 [ 405.105692][T10710] ? __pfx_netlink_unicast+0x10/0x10 [ 405.105716][T10710] netlink_sendmsg+0x8b8/0xd70 [ 405.105739][T10710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.105766][T10710] ____sys_sendmsg+0xaaf/0xc90 [ 405.105792][T10710] ? copy_msghdr_from_user+0x10b/0x160 [ 405.105812][T10710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.105848][T10710] ___sys_sendmsg+0x135/0x1e0 [ 405.105870][T10710] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.105900][T10710] ? __pfx_lock_release+0x10/0x10 [ 405.105921][T10710] ? trace_lock_acquire+0x14e/0x1f0 [ 405.105948][T10710] ? __fget_files+0x206/0x3a0 [ 405.105970][T10710] __sys_sendmsg+0x16e/0x220 [ 405.105991][T10710] ? __pfx___sys_sendmsg+0x10/0x10 [ 405.106026][T10710] do_syscall_64+0xcd/0x250 [ 405.106050][T10710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.106073][T10710] RIP: 0033:0x7f2e0d38cda9 [ 405.106088][T10710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.106105][T10710] RSP: 002b:00007f2e0e151038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.106122][T10710] RAX: ffffffffffffffda RBX: 00007f2e0d5a5fa0 RCX: 00007f2e0d38cda9 [ 405.106133][T10710] RDX: 0000000000040800 RSI: 00000000200002c0 RDI: 0000000000000003 [ 405.106144][T10710] RBP: 00007f2e0e151090 R08: 0000000000000000 R09: 0000000000000000 [ 405.106153][T10710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.106168][T10710] R13: 0000000000000000 R14: 00007f2e0d5a5fa0 R15: 00007ffcd9877588 [ 405.106190][T10710] [ 405.471156][ T5897] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 405.479611][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.549186][ T5897] usb 4-1: config 0 has no interface number 0 [ 405.582254][ T5897] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 405.695131][ T5897] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 405.735495][ T5897] usb 4-1: config 0 interface 52 has no altsetting 0 [ 405.774635][ T970] net_ratelimit: 1 callbacks suppressed [ 405.774653][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.826573][ T5906] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 406.231673][ T5906] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 406.697872][ T6660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.715291][ T5897] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 406.730265][T10728] netlink: 'syz.0.1402': attribute type 10 has an invalid length. [ 406.738504][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 407.207626][T10728] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1402'. [ 407.224268][ T5906] usb 2-1: config 0 has no interface number 0 [ 407.232522][ T5906] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 407.260448][T10730] veth0_vlan: entered allmulticast mode [ 407.276106][ T5897] usb 4-1: Product: syz [ 407.285688][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.293982][ T5906] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 407.318743][T10731] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1402'. [ 407.330076][ T5897] usb 4-1: SerialNumber: syz [ 407.336040][ T5906] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 407.347673][T10729] veth0_vlan: left promiscuous mode [ 407.353540][T10729] veth0_vlan: entered promiscuous mode [ 407.354281][ T5906] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 407.380034][ T5897] usb 4-1: config 0 descriptor?? [ 407.383821][ T5906] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 407.395588][T10731] nbd: must specify at least one socket [ 407.396479][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.402476][T10699] vhci_hcd: connection reset by peer [ 407.431503][ T5897] usb 4-1: can't set config #0, error -71 [ 407.454546][ T6323] vhci_hcd: stop threads [ 407.467515][ T5897] usb 4-1: USB disconnect, device number 36 [ 407.515823][ T5906] usb 2-1: config 0 descriptor?? [ 407.524656][ T5906] hub 2-1:0.3: bad descriptor, ignoring hub [ 407.530592][ T5906] hub 2-1:0.3: probe with driver hub failed with error -5 [ 407.539392][ T5906] sierra 2-1:0.3: Sierra USB modem converter detected [ 407.566089][ T6323] vhci_hcd: release socket [ 407.573820][ T6323] vhci_hcd: disconnect device [ 407.775018][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.541495][ T29] audit: type=1400 audit(1738322345.414:1137): avc: denied { write } for pid=10739 comm="syz.0.1407" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 408.571055][ T5906] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 408.584867][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.595783][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.670513][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.730111][ T5906] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 408.744333][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1408'. [ 408.766562][ T5906] usb 2-1: USB disconnect, device number 32 [ 408.800613][ T5906] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 408.818908][ T5906] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 408.828878][ T5906] sierra 2-1:0.3: device disconnected [ 409.537794][T10763] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1412'. [ 410.291347][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.908625][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.916917][ T8] vhci_hcd: vhci_device speed not set [ 411.176402][ T29] audit: type=1400 audit(1738322348.574:1138): avc: denied { read } for pid=10770 comm="syz.0.1416" path="socket:[28120]" dev="sockfs" ino=28120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 412.163718][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.331375][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.990959][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.113426][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.577443][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.586977][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.596746][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.629176][ T29] audit: type=1400 audit(1738322352.034:1139): avc: denied { accept } for pid=10799 comm="syz.3.1422" path="socket:[28221]" dev="sockfs" ino=28221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 414.864866][ T29] audit: type=1400 audit(1738322352.274:1140): avc: denied { accept } for pid=10810 comm="syz.2.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 415.353718][T10819] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1429'. [ 415.362860][ T29] audit: type=1400 audit(1738322352.754:1141): avc: denied { shutdown } for pid=10818 comm="syz.1.1429" lport=41960 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 415.391813][ T29] audit: type=1326 audit(1738322352.774:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.1.1429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e0d38cda9 code=0x0 [ 415.392223][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.614567][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.779998][T10832] netlink: 'syz.2.1432': attribute type 11 has an invalid length. [ 416.675056][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.359422][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.956634][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.420912][ T29] audit: type=1400 audit(1738322355.824:1143): avc: denied { read } for pid=10862 comm="syz.4.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 419.237803][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.240186][T10881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1447'. [ 419.255053][T10881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1447'. [ 420.244468][ T8] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 420.266855][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.671091][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.294824][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.783698][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 422.574118][T10916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.682636][T10916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.763446][T10916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.850516][T10921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.103740][ T8] usb 5-1: device descriptor read/all, error -71 [ 423.110866][T10921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.119236][T10921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.127392][T10921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.135988][T10921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.144541][T10921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.154330][T10921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.232481][T10947] dlm: plock device version mismatch: kernel (1.2.0), user (1.33554432.0) [ 424.882611][T10960] ubi0: attaching mtd0 [ 424.887852][T10960] ubi0: scanning is finished [ 424.899587][T10960] ================================================================== [ 424.907681][T10960] BUG: KASAN: slab-out-of-bounds in notifier_chain_register+0x3ac/0x420 [ 424.916027][T10960] Read of size 4 at addr ffff8880251fd8d8 by task syz.0.1471/10960 [ 424.923926][T10960] [ 424.926254][T10960] CPU: 0 UID: 0 PID: 10960 Comm: syz.0.1471 Not tainted 6.13.0-syzkaller-09522-gd3d90cc2891c #0 [ 424.926278][T10960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 424.926290][T10960] Call Trace: [ 424.926296][T10960] [ 424.926303][T10960] dump_stack_lvl+0x116/0x1f0 [ 424.926326][T10960] print_report+0xc3/0x620 [ 424.926346][T10960] ? __virt_addr_valid+0x5e/0x590 [ 424.926366][T10960] ? __phys_addr+0xc6/0x150 [ 424.926386][T10960] kasan_report+0xd9/0x110 [ 424.926405][T10960] ? notifier_chain_register+0x3ac/0x420 [ 424.926428][T10960] ? notifier_chain_register+0x3ac/0x420 [ 424.926450][T10960] notifier_chain_register+0x3ac/0x420 [ 424.926471][T10960] blocking_notifier_chain_register+0x76/0xd0 [ 424.926494][T10960] ubi_wl_init+0x1018/0x17b0 [ 424.926525][T10960] ubi_attach+0x1b92/0x4c00 [ 424.926556][T10960] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 424.926584][T10960] ? lockdep_init_map_type+0x16d/0x7d0 [ 424.926609][T10960] ? __pfx_ubi_attach+0x10/0x10 [ 424.926638][T10960] ? ubi_attach_mtd_dev+0x1543/0x3590 [ 424.926658][T10960] ubi_attach_mtd_dev+0x158f/0x3590 [ 424.926679][T10960] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 424.926697][T10960] ? __pfx_get_mtd_device+0x10/0x10 [ 424.926723][T10960] ctrl_cdev_ioctl+0x339/0x3d0 [ 424.926741][T10960] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 424.926759][T10960] ? selinux_file_ioctl+0x180/0x270 [ 424.926784][T10960] ? selinux_file_ioctl+0xb4/0x270 [ 424.926811][T10960] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 424.926828][T10960] __x64_sys_ioctl+0x190/0x200 [ 424.926853][T10960] do_syscall_64+0xcd/0x250 [ 424.926872][T10960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.926897][T10960] RIP: 0033:0x7fdc5698cda9 [ 424.926912][T10960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.926930][T10960] RSP: 002b:00007fdc577be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.926947][T10960] RAX: ffffffffffffffda RBX: 00007fdc56ba5fa0 RCX: 00007fdc5698cda9 [ 424.926958][T10960] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000005 [ 424.926969][T10960] RBP: 00007fdc56a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 424.926979][T10960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.926997][T10960] R13: 0000000000000000 R14: 00007fdc56ba5fa0 R15: 00007ffce8955c38 [ 424.927013][T10960] [ 424.927019][T10960] [ 425.163743][T10960] Allocated by task 58: [ 425.167877][T10960] kasan_save_stack+0x33/0x60 [ 425.172537][T10960] kasan_save_track+0x14/0x30 [ 425.177191][T10960] __kasan_kmalloc+0xaa/0xb0 [ 425.181758][T10960] __kmalloc_node_track_caller_noprof+0x222/0x510 [ 425.188150][T10960] kmalloc_reserve+0xef/0x2c0 [ 425.192808][T10960] __alloc_skb+0x164/0x380 [ 425.197204][T10960] nsim_dev_trap_report_work+0x2af/0xd00 [ 425.202813][T10960] process_one_work+0x9c5/0x1ba0 [ 425.207733][T10960] worker_thread+0x6c8/0xf00 [ 425.212304][T10960] kthread+0x3af/0x750 [ 425.216354][T10960] ret_from_fork+0x45/0x80 [ 425.220754][T10960] ret_from_fork_asm+0x1a/0x30 [ 425.225495][T10960] [ 425.227800][T10960] Freed by task 58: [ 425.231578][T10960] kasan_save_stack+0x33/0x60 [ 425.236229][T10960] kasan_save_track+0x14/0x30 [ 425.240884][T10960] kasan_save_free_info+0x3b/0x60 [ 425.245888][T10960] __kasan_slab_free+0x51/0x70 [ 425.250628][T10960] kfree+0x2c4/0x4d0 [ 425.254509][T10960] skb_free_head+0x108/0x1d0 [ 425.259075][T10960] skb_release_data+0x560/0x730 [ 425.263905][T10960] consume_skb+0xbf/0x100 [ 425.268213][T10960] nsim_dev_trap_report_work+0x8cf/0xd00 [ 425.273822][T10960] process_one_work+0x9c5/0x1ba0 [ 425.278740][T10960] worker_thread+0x6c8/0xf00 [ 425.283311][T10960] kthread+0x3af/0x750 [ 425.287361][T10960] ret_from_fork+0x45/0x80 [ 425.291758][T10960] ret_from_fork_asm+0x1a/0x30 [ 425.296498][T10960] [ 425.298798][T10960] The buggy address belongs to the object at ffff8880251fc000 [ 425.298798][T10960] which belongs to the cache kmalloc-4k of size 4096 [ 425.312828][T10960] The buggy address is located 2264 bytes to the right of [ 425.312828][T10960] allocated 4096-byte region [ffff8880251fc000, ffff8880251fd000) [ 425.327639][T10960] [ 425.329942][T10960] The buggy address belongs to the physical page: [ 425.336328][T10960] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x251f8 [ 425.345062][T10960] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 425.353536][T10960] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 425.361057][T10960] page_type: f5(slab) [ 425.365016][T10960] raw: 00fff00000000040 ffff88801b042140 dead000000000122 0000000000000000 [ 425.373578][T10960] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 425.382138][T10960] head: 00fff00000000040 ffff88801b042140 dead000000000122 0000000000000000 [ 425.390784][T10960] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 425.399430][T10960] head: 00fff00000000003 ffffea0000947e01 ffffffffffffffff 0000000000000000 [ 425.408077][T10960] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 425.416719][T10960] page dumped because: kasan: bad access detected [ 425.423107][T10960] page_owner tracks the page as allocated [ 425.428794][T10960] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 58, tgid 58 (kworker/u8:3), ts 404459189836, free_ts 403993743274 [ 425.449352][T10960] post_alloc_hook+0x181/0x1b0 [ 425.454104][T10960] get_page_from_freelist+0xfce/0x2f80 [ 425.459539][T10960] __alloc_frozen_pages_noprof+0x221/0x2470 [ 425.465417][T10960] alloc_pages_mpol+0x1fc/0x540 [ 425.470247][T10960] new_slab+0x23d/0x330 [ 425.474388][T10960] ___slab_alloc+0xc5d/0x1720 [ 425.479050][T10960] __slab_alloc.constprop.0+0x56/0xb0 [ 425.484406][T10960] __kmalloc_node_track_caller_noprof+0x2f1/0x510 [ 425.490797][T10960] kmalloc_reserve+0xef/0x2c0 [ 425.495460][T10960] __alloc_skb+0x164/0x380 [ 425.499857][T10960] nsim_dev_trap_report_work+0x2af/0xd00 [ 425.505470][T10960] process_one_work+0x9c5/0x1ba0 [ 425.510392][T10960] worker_thread+0x6c8/0xf00 [ 425.514962][T10960] kthread+0x3af/0x750 [ 425.519010][T10960] ret_from_fork+0x45/0x80 [ 425.523494][T10960] ret_from_fork_asm+0x1a/0x30 [ 425.528241][T10960] page last free pid 5805 tgid 5805 stack trace: [ 425.534543][T10960] free_frozen_pages+0x6db/0xfb0 [ 425.539457][T10960] __folio_put+0x32a/0x450 [ 425.543865][T10960] put_page+0x21e/0x280 [ 425.548005][T10960] skb_release_data+0x4d7/0x730 [ 425.552835][T10960] __kfree_skb+0x4f/0x70 [ 425.557066][T10960] tcp_ack+0x1eb7/0x5ba0 [ 425.561288][T10960] tcp_rcv_established+0xcf5/0x20d0 [ 425.566469][T10960] tcp_v4_do_rcv+0x5ca/0xa90 [ 425.571041][T10960] __release_sock+0x31b/0x400 [ 425.575699][T10960] release_sock+0x5a/0x220 [ 425.580096][T10960] tcp_sendmsg+0x38/0x50 [ 425.584318][T10960] inet_sendmsg+0xb9/0x140 [ 425.588715][T10960] sock_write_iter+0x4ac/0x5b0 [ 425.593484][T10960] vfs_write+0x5ae/0x1150 [ 425.597796][T10960] ksys_write+0x207/0x250 [ 425.602107][T10960] do_syscall_64+0xcd/0x250 [ 425.606589][T10960] [ 425.608891][T10960] Memory state around the buggy address: [ 425.614497][T10960] ffff8880251fd780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 425.622532][T10960] ffff8880251fd800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 425.630569][T10960] >ffff8880251fd880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 425.638605][T10960] ^ [ 425.645513][T10960] ffff8880251fd900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 425.653549][T10960] ffff8880251fd980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 425.661583][T10960] ================================================================== [ 425.739754][T10960] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 425.746982][T10960] CPU: 1 UID: 0 PID: 10960 Comm: syz.0.1471 Not tainted 6.13.0-syzkaller-09522-gd3d90cc2891c #0 [ 425.757389][T10960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 425.767436][T10960] Call Trace: [ 425.770709][T10960] [ 425.773630][T10960] dump_stack_lvl+0x3d/0x1f0 [ 425.778221][T10960] panic+0x71d/0x800 [ 425.782114][T10960] ? __pfx_panic+0x10/0x10 [ 425.786527][T10960] ? irqentry_exit+0x3b/0x90 [ 425.791111][T10960] ? lockdep_hardirqs_on+0x7c/0x110 [ 425.796312][T10960] ? preempt_schedule_thunk+0x1a/0x30 [ 425.801685][T10960] ? preempt_schedule_common+0x44/0xc0 [ 425.807148][T10960] check_panic_on_warn+0xab/0xb0 [ 425.812085][T10960] end_report+0x117/0x180 [ 425.816499][T10960] kasan_report+0xe9/0x110 [ 425.820908][T10960] ? notifier_chain_register+0x3ac/0x420 [ 425.826536][T10960] ? notifier_chain_register+0x3ac/0x420 [ 425.832166][T10960] notifier_chain_register+0x3ac/0x420 [ 425.837626][T10960] blocking_notifier_chain_register+0x76/0xd0 [ 425.843777][T10960] ubi_wl_init+0x1018/0x17b0 [ 425.848377][T10960] ubi_attach+0x1b92/0x4c00 [ 425.852885][T10960] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 425.859214][T10960] ? lockdep_init_map_type+0x16d/0x7d0 [ 425.864678][T10960] ? __pfx_ubi_attach+0x10/0x10 [ 425.869532][T10960] ? ubi_attach_mtd_dev+0x1543/0x3590 [ 425.874902][T10960] ubi_attach_mtd_dev+0x158f/0x3590 [ 425.880102][T10960] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 425.885641][T10960] ? __pfx_get_mtd_device+0x10/0x10 [ 425.890839][T10960] ctrl_cdev_ioctl+0x339/0x3d0 [ 425.895601][T10960] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 425.900881][T10960] ? selinux_file_ioctl+0x180/0x270 [ 425.906082][T10960] ? selinux_file_ioctl+0xb4/0x270 [ 425.911195][T10960] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 425.916472][T10960] __x64_sys_ioctl+0x190/0x200 [ 425.921236][T10960] do_syscall_64+0xcd/0x250 [ 425.925737][T10960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.931634][T10960] RIP: 0033:0x7fdc5698cda9 [ 425.936050][T10960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.955667][T10960] RSP: 002b:00007fdc577be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.964087][T10960] RAX: ffffffffffffffda RBX: 00007fdc56ba5fa0 RCX: 00007fdc5698cda9 [ 425.972052][T10960] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000005 [ 425.980005][T10960] RBP: 00007fdc56a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 425.987958][T10960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.995906][T10960] R13: 0000000000000000 R14: 00007fdc56ba5fa0 R15: 00007ffce8955c38 [ 426.003877][T10960] [ 426.007098][T10960] Kernel Offset: disabled [ 426.011419][T10960] Rebooting in 86400 seconds..