last executing test programs: 11.840994214s ago: executing program 0 (id=2722): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) unshare(0x6020400) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_procfs$pagemap(0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.484435409s ago: executing program 0 (id=2727): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1261}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 9.460628082s ago: executing program 3 (id=2731): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_procfs(0x0, 0x0) read$watch_queue(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0x9, 0x40000) write$binfmt_elf64(r4, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x40) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r5, 0x4b48, &(0x7f0000000040)) 7.611908658s ago: executing program 3 (id=2737): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) unshare(0x6020400) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_procfs$pagemap(0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.480978914s ago: executing program 1 (id=2739): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) memfd_create(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) 7.187233026s ago: executing program 2 (id=2740): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40895}, 0x200480c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffea4}}, 0x40080c0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, 0x0, 0x18) sendmsg$inet6(r5, 0x0, 0x20000090) r7 = syz_open_dev$ndb(0x0, 0x0, 0x4000) ioctl$NBD_SET_SIZE(r7, 0xab02, 0xffffffff) 6.203118641s ago: executing program 1 (id=2741): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) creat(0x0, 0x4) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 5.337444215s ago: executing program 3 (id=2744): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) setresuid(0xee01, 0xee00, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 5.198467338s ago: executing program 2 (id=2745): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r1, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 4.76279493s ago: executing program 0 (id=2746): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r0, @ANYBLOB="b23d"], 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r1, &(0x7f0000002200)=ANY=[], 0xfffffcd9) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) 4.456972976s ago: executing program 2 (id=2747): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) readlinkat(0xffffffffffffff9c, 0x0, &(0x7f00000012c0)=""/168, 0xa8) readlinkat(0xffffffffffffff9c, 0x0, &(0x7f00000012c0)=""/168, 0xa8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f0000000100)="c29b2f3e44158b900500"/21, 0x15, 0x20000001, &(0x7f00000003c0)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1e}, 0x1c) shutdown(r4, 0x1) 4.419256544s ago: executing program 3 (id=2748): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0xa, 0x801, 0x84) open(&(0x7f0000000280)='.\x00', 0x400, 0x0) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) 4.267065543s ago: executing program 4 (id=2749): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x30, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x20, r3}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) 3.691784801s ago: executing program 4 (id=2750): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno', 0x4) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) 3.504434106s ago: executing program 1 (id=2751): add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e94937920fcba13ce0af61beaa44d66a6535daf1bc35fb3af1e9197d71d26589d077c88184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.462428372s ago: executing program 4 (id=2752): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xac1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mount$9p_fd(0x0, 0x0, 0x0, 0x814082, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = msgget$private(0x0, 0x1f3) msgrcv(r2, 0x0, 0x0, 0x3, 0x2000) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1}, 0x0, 0x0, 0x7ff, 0xfff, 0x1ed4, 0x0, 0x7, 0x1, 0xe, 0x3fd}) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f00000001c0)=0xfd87, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, 0x0, 0x40010) 3.450544137s ago: executing program 2 (id=2753): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) write$dsp(r0, &(0x7f0000000080)="9a", 0x1) close(r0) 3.378947335s ago: executing program 1 (id=2754): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) unshare(0x6020400) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_procfs$pagemap(0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.296870562s ago: executing program 3 (id=2755): setgroups(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = memfd_create(0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r7 = accept$alg(r2, 0x0, 0x0) r8 = dup3(r7, r2, 0x0) sendfile(r8, r1, 0x0, 0x1000009) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 1.364370151s ago: executing program 3 (id=2756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000010900010073797a3000000000080003400000000114"], 0x64}}, 0x4000000) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) fcntl$notify(r4, 0x402, 0x91ea6c12f182534) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r5, 0xc1007c00, 0x0) 1.345579086s ago: executing program 2 (id=2757): openat$vimc2(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x343802) socket$inet(0x2, 0x4000000000000001, 0x100) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.240544157s ago: executing program 0 (id=2758): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) setresuid(0xee01, 0xee00, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 1.187291343s ago: executing program 4 (id=2759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1}, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) getpgrp(r4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) 1.045552257s ago: executing program 0 (id=2760): socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) 460.246917ms ago: executing program 1 (id=2761): socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0x1, 0xc}, {0x8, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0ea79", 0x5}], 0x1, &(0x7f0000000540)}], 0x1, 0x40800) 454.158627ms ago: executing program 2 (id=2762): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r4, 0x6f6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r7, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) mmap(&(0x7f0000001000/0xe000)=nil, 0xe000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r8, 0x852ac000) socketpair(0x10, 0x3, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$MRT6_DEL_MIF(r9, 0x29, 0xcb, 0x0, 0x0) 217.167697ms ago: executing program 4 (id=2763): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='veno', 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) 186.719644ms ago: executing program 1 (id=2764): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) readlinkat(0xffffffffffffff9c, 0x0, &(0x7f00000012c0)=""/168, 0xa8) readlinkat(0xffffffffffffff9c, 0x0, &(0x7f00000012c0)=""/168, 0xa8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000e40)='highspeed', 0x9) shutdown(r4, 0x1) 1.353888ms ago: executing program 0 (id=2765): add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e94937920fcba13ce0af61beaa44d66a6535daf1bc35fb3af1e9197d71d26589d077c88184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 4 (id=2766): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) inotify_init1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 14323 Comm: syz.0.2160 Tainted: G L syzkaller #0 PREEMPT(full) [ 812.620480][T14323] Tainted: [L]=SOFTLOCKUP [ 812.620484][T14323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 812.620491][T14323] Call Trace: [ 812.620496][T14323] [ 812.620501][T14323] dump_stack_lvl+0x100/0x190 [ 812.620524][T14323] should_fail_ex.cold+0x5/0xa [ 812.620540][T14323] should_failslab+0xc2/0x120 [ 812.620554][T14323] __kmalloc_noprof+0xfc/0x820 [ 812.620565][T14323] ? rcu_is_watching+0x12/0xc0 [ 812.620582][T14323] ? tomoyo_realpath_from_path+0xb6/0x690 [ 812.620602][T14323] tomoyo_realpath_from_path+0xb6/0x690 [ 812.620621][T14323] tomoyo_path_number_perm+0x23c/0x580 [ 812.620634][T14323] ? tomoyo_path_number_perm+0x22e/0x580 [ 812.620649][T14323] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 812.620676][T14323] ? find_held_lock+0x2b/0x80 [ 812.620692][T14323] ? __fget_files+0x215/0x3d0 [ 812.620708][T14323] ? hook_file_ioctl_common+0x140/0x440 [ 812.620718][T14323] ? __fget_files+0x215/0x3d0 [ 812.620737][T14323] ? __fget_files+0x21f/0x3d0 [ 812.620756][T14323] security_file_ioctl+0xd3/0x230 [ 812.620771][T14323] __x64_sys_ioctl+0xb7/0x210 [ 812.620788][T14323] do_syscall_64+0x115/0x870 [ 812.620804][T14323] ? clear_bhb_loop+0x40/0x90 [ 812.620818][T14323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.620830][T14323] RIP: 0033:0x7f5b46b9de59 [ 812.620845][T14323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.620856][T14323] RSP: 002b:00007f5b44df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 812.620869][T14323] RAX: ffffffffffffffda RBX: 00007f5b46e25fa0 RCX: 00007f5b46b9de59 [ 812.620876][T14323] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 812.620882][T14323] RBP: 00007f5b44df6090 R08: 0000000000000000 R09: 0000000000000000 [ 812.620889][T14323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.620895][T14323] R13: 00007f5b46e26038 R14: 00007f5b46e25fa0 R15: 00007ffd0ad5b7e8 [ 812.620909][T14323] [ 812.620928][T14323] ERROR: Out of memory at tomoyo_realpath_from_path. [ 813.051936][T14332] syzkaller0: entered promiscuous mode [ 813.061418][T14332] syzkaller0: entered allmulticast mode [ 813.067968][T10205] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPIPE [ 813.085525][T10205] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPIPE [ 813.109670][T10205] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 813.120228][T10205] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 813.178327][T10205] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 813.256730][T10205] usb 2-1: USB disconnect, device number 113 [ 814.456716][ T994] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 814.473510][ T190] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 814.705237][ T190] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 814.725477][ T994] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 814.761866][ T190] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 814.787117][ T190] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 814.815876][ T190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.968347][T14339] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 814.985576][ T190] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 815.552172][T14351] fido_id[14351]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 817.149833][T14368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 817.255222][T14371] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2174'. [ 817.579878][T14375] /dev/sg0: Can't lookup blockdev [ 820.911040][T14382] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2178'. [ 820.933586][ T30] audit: type=1400 audit(1784128002.307:1480): avc: denied { bind } for pid=14377 comm="syz.3.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 821.102781][T14373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.115518][ T30] audit: type=1400 audit(1784128002.487:1481): avc: denied { setopt } for pid=14377 comm="syz.3.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 821.297700][T14373] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.332816][T14373] bridge0: port 3(dummy0) entered blocking state [ 821.342228][T14373] bridge0: port 3(dummy0) entered forwarding state [ 821.355381][T14373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.421723][T14373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.430979][T14373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.443108][T14373] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 821.454582][T14373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 821.468500][T14373] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 821.554525][ T5783] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 821.616476][ T9982] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.623736][ T9982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.716221][ T5707] usb 5-1: USB disconnect, device number 101 [ 821.735261][ T9982] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.742502][ T9982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.750367][ T5783] usb 3-1: Using ep0 maxpacket: 16 [ 821.771489][ T5783] usb 3-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config [ 821.801995][ T5783] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 822.298202][ T5783] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 822.379292][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.503482][ T5783] usb 3-1: Product: syz [ 822.528140][ T5783] usb 3-1: Manufacturer: syz [ 822.541253][ T5783] usb 3-1: SerialNumber: syz [ 822.581539][ T5783] usb 3-1: config 0 descriptor?? [ 822.799468][ T30] audit: type=1400 audit(1784128004.177:1482): avc: denied { bind } for pid=14410 comm="syz.1.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 823.350037][T14416] netlink: 'syz.3.2186': attribute type 50 has an invalid length. [ 823.476883][T14384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.485689][T14384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.554502][ T5783] appledisplay 3-1:0.0: Could not find int-in endpoint [ 825.574187][ T5783] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 825.608226][ T5783] usb 3-1: USB disconnect, device number 103 [ 825.883836][ T30] audit: type=1400 audit(1784128007.197:1483): avc: denied { accept } for pid=14435 comm="syz.4.2192" path="/449/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 826.174018][ T5840] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 826.385686][ T5840] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 826.571365][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 826.617527][ T5840] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 826.648444][ T5840] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 826.663515][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.684382][ T5840] usb 1-1: Product: syz [ 826.694963][ T5840] usb 1-1: Manufacturer: syz [ 826.706751][ T5840] usb 1-1: SerialNumber: syz [ 826.730211][ T5840] usb 1-1: config 0 descriptor?? [ 826.743850][T14442] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 826.987791][T14441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.004717][T14441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.030055][T14455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2195'. [ 827.044144][ T5840] usb 1-1: USB disconnect, device number 111 [ 827.091851][T14455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 827.179919][ T30] audit: type=1400 audit(1784128008.557:1484): avc: denied { read } for pid=14457 comm="syz.3.2196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 828.807713][ T30] audit: type=1400 audit(1784128010.187:1485): avc: denied { write } for pid=14467 comm="syz.4.2199" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 828.845180][T14469] binder: 14467:14469 ioctl 400c620e 200000000000 returned -22 [ 828.869361][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2200'. [ 829.221512][T14475] comedi comedi0: Cannot bond this driver to itself! [ 829.355118][T14485] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 829.826779][T14489] hfsplus: Unknown parameter 'barrierer0' [ 830.992908][ T30] audit: type=1400 audit(1784128012.367:1486): avc: denied { name_connect } for pid=14493 comm="syz.2.2207" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 831.027773][T14502] dlm: non-version read from control device 0 [ 831.054295][ T30] audit: type=1400 audit(1784128012.427:1487): avc: denied { read } for pid=14493 comm="syz.2.2207" lport=52597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 831.082946][T14503] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 831.210627][ T30] audit: type=1400 audit(1784128012.587:1488): avc: denied { setopt } for pid=14507 comm="syz.0.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 832.432927][ T30] audit: type=1400 audit(1784128013.807:1489): avc: denied { listen } for pid=14493 comm="syz.2.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 832.668509][ T30] audit: type=1400 audit(1784128013.807:1490): avc: denied { accept } for pid=14493 comm="syz.2.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 834.356622][T14544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.485135][ T994] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 834.926205][ T994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.937826][ T994] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 834.954055][ T994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.002469][ T994] usb 3-1: config 0 descriptor?? [ 835.264762][ T30] audit: type=1400 audit(1784128016.647:1491): avc: denied { getopt } for pid=14554 comm="syz.0.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 835.290968][ T994] usbhid 3-1:0.0: can't add hid device: -71 [ 835.377185][ T994] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 835.429064][ T994] usb 3-1: USB disconnect, device number 104 [ 835.439510][T14552] netlink: 'syz.4.2221': attribute type 10 has an invalid length. [ 835.777975][T14557] xt_hashlimit: size too large, truncated to 1048576 [ 835.793232][ T30] audit: type=1400 audit(1784128017.157:1492): avc: denied { bind } for pid=14550 comm="syz.4.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 836.074614][ T190] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 836.093591][ T994] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 836.211957][T14565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.243751][ T190] usb 2-1: Using ep0 maxpacket: 16 [ 836.271212][ T190] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 836.314485][ T994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.598743][ T994] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 836.609151][ T190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 836.623556][ T994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.634302][ T190] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 836.653017][ T994] usb 3-1: config 0 descriptor?? [ 836.660942][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.701287][ T190] usb 2-1: Product: syz [ 836.737285][ T190] usb 2-1: Manufacturer: syz [ 836.770711][ T190] usb 2-1: SerialNumber: syz [ 836.834727][ T190] usb 2-1: config 0 descriptor?? [ 836.849788][ T190] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 836.886415][ T190] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 836.937826][ T30] audit: type=1400 audit(1784128018.317:1493): avc: denied { getopt } for pid=14569 comm="syz.0.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 836.961865][T14570] 9pnet_fd: Insufficient options for proto=fd [ 837.026684][T14572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2226'. [ 837.283600][ T5840] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 837.443534][ T5840] usb 1-1: device descriptor read/64, error -71 [ 837.456043][ T190] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 837.530775][ T994] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 837.597599][ T994] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input80 [ 837.702568][ T5840] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 837.839598][ T190] em28xx 2-1:0.0: Config register raw data: 0x41 [ 837.964051][ T5840] usb 1-1: device descriptor read/64, error -71 [ 838.049049][T10205] usb 2-1: USB disconnect, device number 114 [ 838.066155][T10205] em28xx 2-1:0.0: Disconnecting em28xx [ 838.073946][ T5840] usb usb1-port1: attempt power cycle [ 838.085268][T14587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.181777][ T190] usb 3-1: USB disconnect, device number 105 [ 838.187946][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 838.188021][T10205] em28xx 2-1:0.0: Freeing device [ 838.423713][ T5840] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 838.464882][ T5840] usb 1-1: device descriptor read/8, error -71 [ 838.724312][ T5840] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 838.744161][ T5840] usb 1-1: device descriptor read/8, error -71 [ 838.853755][ T5840] usb usb1-port1: unable to enumerate USB device [ 839.250370][T14600] syzkaller0: entered promiscuous mode [ 839.262036][T14600] syzkaller0: entered allmulticast mode [ 839.289889][T14600] tipc: Enabled bearer , priority 0 [ 839.324195][T14600] FAULT_INJECTION: forcing a failure. [ 839.324195][T14600] name failslab, interval 1, probability 0, space 0, times 0 [ 839.338223][T14600] CPU: 1 UID: 0 PID: 14600 Comm: syz.1.2235 Tainted: G L syzkaller #0 PREEMPT(full) [ 839.338251][T14600] Tainted: [L]=SOFTLOCKUP [ 839.338257][T14600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 839.338266][T14600] Call Trace: [ 839.338272][T14600] [ 839.338278][T14600] dump_stack_lvl+0x100/0x190 [ 839.338305][T14600] should_fail_ex.cold+0x5/0xa [ 839.338327][T14600] should_failslab+0xc2/0x120 [ 839.338347][T14600] __kmalloc_noprof+0xfc/0x820 [ 839.338364][T14600] ? rcu_is_watching+0x12/0xc0 [ 839.338389][T14600] ? tomoyo_realpath_from_path+0xb6/0x690 [ 839.338422][T14600] tomoyo_realpath_from_path+0xb6/0x690 [ 839.338454][T14600] tomoyo_path_number_perm+0x23c/0x580 [ 839.338475][T14600] ? tomoyo_path_number_perm+0x22e/0x580 [ 839.338499][T14600] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 839.338546][T14600] ? find_held_lock+0x2b/0x80 [ 839.338572][T14600] ? __fget_files+0x215/0x3d0 [ 839.338599][T14600] ? hook_file_ioctl_common+0x140/0x440 [ 839.338616][T14600] ? __fget_files+0x215/0x3d0 [ 839.338646][T14600] ? __fget_files+0x21f/0x3d0 [ 839.338677][T14600] security_file_ioctl+0xd3/0x230 [ 839.338703][T14600] __x64_sys_ioctl+0xb7/0x210 [ 839.338748][T14600] do_syscall_64+0x115/0x870 [ 839.338774][T14600] ? clear_bhb_loop+0x40/0x90 [ 839.338797][T14600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.338815][T14600] RIP: 0033:0x7f1fb2b9de59 [ 839.338831][T14600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.338850][T14600] RSP: 002b:00007f1fb3abd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 839.338869][T14600] RAX: ffffffffffffffda RBX: 00007f1fb2e25fa0 RCX: 00007f1fb2b9de59 [ 839.338881][T14600] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000006 [ 839.338892][T14600] RBP: 00007f1fb3abd090 R08: 0000000000000000 R09: 0000000000000000 [ 839.338903][T14600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.338914][T14600] R13: 00007f1fb2e26038 R14: 00007f1fb2e25fa0 R15: 00007ffdf81a1648 [ 839.338937][T14600] [ 839.563939][T14600] ERROR: Out of memory at tomoyo_realpath_from_path. [ 839.577736][T14600] tipc: Resetting bearer [ 839.596356][T14599] tipc: Resetting bearer [ 839.634424][ T5840] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 839.770424][T14599] tipc: Disabling bearer [ 839.923558][ T5840] usb 3-1: Using ep0 maxpacket: 16 [ 839.936982][ T5840] usb 3-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 839.949283][ T5840] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 839.961796][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 839.992709][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 840.000674][T14609] 9p: Bad value for 'rfdno' [ 840.012309][ T5840] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 840.021947][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.030469][ T5840] usb 3-1: Product: syz [ 840.037065][ T5840] usb 3-1: Manufacturer: syz [ 840.041978][ T5840] usb 3-1: SerialNumber: syz [ 840.147642][ T994] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 840.223732][ T5707] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 840.224584][ T5840] usb 3-1: config 0 descriptor?? [ 840.334487][ T5840] appledisplay 3-1:0.0: Could not find int-in endpoint [ 840.343912][ T5840] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 840.364269][T14609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 840.405182][ T994] usb 5-1: unable to get BOS descriptor or descriptor too short [ 840.413519][ T994] usb 5-1: not running at top speed; connect to a high speed hub [ 840.414099][ T5707] usb 2-1: Using ep0 maxpacket: 8 [ 840.424983][ T994] usb 5-1: string descriptor 0 read error: -22 [ 840.433984][ T994] usb 5-1: New USB device found, idVendor=2013, idProduct=025c, bcdDevice=a6.f9 [ 840.434549][ T5707] usb 2-1: config 2 has an invalid interface number: 142 but max is 1 [ 840.443087][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.459954][ T5707] usb 2-1: config 2 has an invalid interface number: 30 but max is 1 [ 840.468343][ T5707] usb 2-1: config 2 has no interface number 0 [ 840.474838][ T5707] usb 2-1: config 2 has no interface number 1 [ 840.481059][ T5707] usb 2-1: config 2 interface 142 altsetting 12 has a duplicate endpoint with address 0x7, skipping [ 840.492527][ T5707] usb 2-1: config 2 interface 142 altsetting 12 bulk endpoint 0xD has invalid maxpacket 1023 [ 840.502973][ T5707] usb 2-1: config 2 interface 142 altsetting 12 has a duplicate endpoint with address 0x2, skipping [ 840.513965][ T5707] usb 2-1: config 2 interface 142 altsetting 12 bulk endpoint 0x3 has invalid maxpacket 1024 [ 840.524363][ T5707] usb 2-1: config 2 interface 30 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 840.535360][ T5707] usb 2-1: config 2 interface 30 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 840.548674][ T5707] usb 2-1: config 2 interface 30 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 840.559503][ T5707] usb 2-1: config 2 interface 30 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 840.571065][T14596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.581387][T14596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.591307][ T5707] usb 2-1: config 2 interface 142 has no altsetting 0 [ 840.598191][ T5707] usb 2-1: config 2 interface 30 has no altsetting 0 [ 840.607312][ T5707] usb 2-1: New USB device found, idVendor=0c52, idProduct=2103, bcdDevice=19.cf [ 840.616798][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.625122][ T5707] usb 2-1: Product: 鼒䛻䇪ᤕ槑㜘곻ꢊ킒犒珘み୿鑌橢鬞凂κ峾꧛즒䢅樊ᕥ!갑䵢嬞䉭ᔎꑅ봊ㄦ䆬즌稶ሷﶓ❝⫊ꏒ쉋뙝㏗䴅㏏⊴굻喞ﴑ蔺ٷ梦唐䆶Ｕ鄄微岍隁‖릠멊떠夸쌬뤧迤۶᭦롻ꁀ篱㯧隂츔㤂㕙柬즣䋳輻脢㨮᪖衵䗬ᤑ䟱藄扡硫ڿ阬䉹亂ಬ [ 840.658056][ T5707] usb 2-1: Manufacturer: 崍Ჾዠꢧ䟇仼㉚ﱘ緿ꨀ溼᳻Ƥ謱뽄扎淟✬᤭꒥朗ᒥ오檾ꐴ퇪◸᮫ꇜ魜鎿廧ꉸ᏿⍟튬쿳剞⾇훦⼽悏߆쯛닌獴䑌ࡴ髱ጲ㠫ޮ㶚틊⒜샜渖ᚱ䔇Ǘ풁⠨懔믱ﵸ彤头琗⹬檾縹┶ﻒ⛥걲퍒彭鍣⢢౸朷）竨⯁봋⹀힁泤쉗 [ 840.692142][T14607] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 840.699722][ T994] dvb-usb: found a 'PCTV 2002e' in warm state. [ 840.699789][T14607] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 840.720250][ T994] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 840.729677][ T994] dvbdev: DVB: registering new adapter (PCTV 2002e) [ 840.737442][ T994] usb 5-1: media controller created [ 840.745571][ T994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 840.786083][ T994] DVB: Unable to find symbol dib7000p_attach() [ 840.792309][ T994] dvb-usb: no frontend was attached by 'PCTV 2002e' [ 840.799837][ T994] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 840.809023][ T994] dvbdev: DVB: registering new adapter (PCTV 2002e) [ 840.819149][ T994] usb 5-1: media controller created [ 840.827606][ T994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 840.875683][ T994] DVB: Unable to find symbol dib7000p_attach() [ 840.882346][ T994] dvb-usb: no frontend was attached by 'PCTV 2002e' [ 841.081295][ T30] audit: type=1400 audit(1784128022.427:1494): avc: denied { name_bind } for pid=14606 comm="syz.1.2238" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 841.284035][ T30] audit: type=1400 audit(1784128022.657:1495): avc: denied { nlmsg_read } for pid=14606 comm="syz.1.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 841.323132][T14607] lo speed is unknown, defaulting to 1000 [ 841.662869][T10205] usb 3-1: USB disconnect, device number 106 [ 841.693554][ T994] rc_core: IR keymap rc-dib0700-rc5 not found [ 841.717686][ T994] Registered IR keymap rc-empty [ 841.735815][ T994] dvb-usb: could not initialize remote control. [ 841.763733][ T994] dvb-usb: PCTV 2002e successfully initialized and connected. [ 841.787146][T14624] netlink: 'syz.2.2241': attribute type 1 has an invalid length. [ 841.819101][ T994] usb 5-1: USB disconnect, device number 102 [ 841.854208][T14624] netlink: 'syz.2.2241': attribute type 2 has an invalid length. [ 841.876828][ T5707] ftdi_sio 2-1:2.142: FTDI USB Serial Device converter detected [ 841.912071][ T994] dvb-usb: PCTV 2002e successfully deinitialized and disconnected. [ 841.920105][ T5707] ftdi_sio ttyUSB0: unknown device type: 0x19cf [ 842.055622][ T5707] ftdi_sio 2-1:2.30: FTDI USB Serial Device converter detected [ 842.570787][ T5707] ftdi_sio ttyUSB1: unknown device type: 0x19cf [ 842.581723][ T5707] usb 2-1: USB disconnect, device number 115 [ 842.611761][ T5707] ftdi_sio 2-1:2.142: device disconnected [ 842.652913][ T5707] ftdi_sio 2-1:2.30: device disconnected [ 842.669651][T14633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 843.373623][ T5707] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 843.503592][ T30] audit: type=1400 audit(1784128024.857:1496): avc: denied { map } for pid=14647 comm="syz.4.2248" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 843.583762][ T5707] usb 3-1: device descriptor read/64, error -71 [ 843.592680][T14650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2249'. [ 843.692999][ T30] audit: type=1400 audit(1784128025.067:1497): avc: denied { read write } for pid=5622 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 843.837779][ T30] audit: type=1400 audit(1784128025.067:1498): avc: denied { open } for pid=5622 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 843.862933][ T5707] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 843.920023][ T30] audit: type=1400 audit(1784128025.077:1499): avc: denied { ioctl } for pid=5622 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 843.930457][T14648] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 843.952488][ T30] audit: type=1400 audit(1784128025.107:1500): avc: denied { ioctl } for pid=14631 comm="syz.2.2244" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 844.121283][ T30] audit: type=1400 audit(1784128025.107:1501): avc: denied { recv } for pid=9976 comm="kworker/u8:8" saddr=10.128.0.169 src=30006 daddr=10.128.0.77 dest=46000 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 844.147100][ T5707] usb 3-1: device descriptor read/64, error -71 [ 844.375786][ T5707] usb usb3-port1: attempt power cycle [ 844.384383][ T30] audit: type=1400 audit(1784128025.137:1502): avc: denied { read } for pid=14647 comm="syz.4.2248" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 844.517022][ T30] audit: type=1400 audit(1784128025.137:1503): avc: denied { open } for pid=14647 comm="syz.4.2248" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 844.573481][T10205] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 844.724790][T10205] usb 1-1: config 0 has an invalid interface number: 91 but max is 0 [ 844.741996][ T5707] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 844.753441][T10205] usb 1-1: config 0 has no interface number 0 [ 844.762963][T10205] usb 1-1: too many endpoints for config 0 interface 91 altsetting 24: 159, using maximum allowed: 30 [ 844.775353][T10205] usb 1-1: config 0 interface 91 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 159 [ 844.791904][ T5707] usb 3-1: device descriptor read/8, error -71 [ 844.798221][T10205] usb 1-1: config 0 interface 91 has no altsetting 0 [ 844.807169][T10205] usb 1-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=78.55 [ 844.816996][T10205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.825428][T10205] usb 1-1: Product: syz [ 844.829760][T10205] usb 1-1: Manufacturer: syz [ 844.835352][T10205] usb 1-1: SerialNumber: syz [ 844.844506][T10205] usb 1-1: config 0 descriptor?? [ 845.033463][ T5707] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 845.069529][ T5707] usb 3-1: device descriptor read/8, error -71 [ 845.207675][ T5707] usb usb3-port1: unable to enumerate USB device [ 845.326381][T14655] bridge7: entered promiscuous mode [ 845.333612][T14655] bridge7: entered allmulticast mode [ 846.251063][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 846.251079][ T30] audit: type=1400 audit(1784128027.627:1551): avc: denied { create } for pid=14674 comm="syz.1.2257" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 846.332876][ T30] audit: type=1400 audit(1784128027.677:1552): avc: denied { ioctl } for pid=14674 comm="syz.1.2257" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=48629 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 846.388588][T10205] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 846.621817][ T30] audit: type=1400 audit(1784128027.967:1553): avc: denied { create } for pid=14680 comm="syz.4.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 846.688979][T14685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.715518][T10205] usb 1-1: USB disconnect, device number 116 [ 846.875370][ T30] audit: type=1400 audit(1784128028.257:1554): avc: denied { read write } for pid=14687 comm="syz.4.2261" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 846.912096][ T30] audit: type=1400 audit(1784128028.257:1555): avc: denied { open } for pid=14687 comm="syz.4.2261" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 846.937654][ T30] audit: type=1400 audit(1784128028.257:1556): avc: denied { read } for pid=14687 comm="syz.4.2261" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 846.965711][ T30] audit: type=1400 audit(1784128028.257:1557): avc: denied { open } for pid=14687 comm="syz.4.2261" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 846.989782][ T30] audit: type=1400 audit(1784128028.287:1558): avc: denied { allowed } for pid=14687 comm="syz.4.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 847.010325][ T30] audit: type=1400 audit(1784128028.287:1559): avc: denied { map } for pid=14687 comm="syz.4.2261" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 847.038772][ T30] audit: type=1400 audit(1784128028.287:1560): avc: denied { read write } for pid=14687 comm="syz.4.2261" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 847.163585][ T994] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 847.313531][ T994] usb 5-1: Using ep0 maxpacket: 16 [ 847.321758][ T994] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 847.330530][ T994] usb 5-1: config 0 has no interface number 0 [ 847.339980][ T994] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 847.353498][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.372714][ T994] usb 5-1: Product: syz [ 847.393176][ T994] usb 5-1: Manufacturer: syz [ 847.412479][ T994] usb 5-1: SerialNumber: syz [ 847.437537][ T994] usb 5-1: config 0 descriptor?? [ 847.449420][ T994] hub 5-1:0.132: bad descriptor, ignoring hub [ 847.455999][ T994] hub 5-1:0.132: probe with driver hub failed with error -5 [ 847.473263][ T994] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input82 [ 848.213514][ T5783] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 848.323539][T10205] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 848.365996][ T5783] usb 2-1: Using ep0 maxpacket: 16 [ 848.373282][ T5783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.384765][ T5783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.395268][ T5783] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 848.408578][ T5783] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 848.419024][ T5783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.430958][ T5783] usb 2-1: config 0 descriptor?? [ 848.613562][T10205] usb 3-1: device descriptor read/64, error -71 [ 848.853445][T10205] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 848.856129][ T5783] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 848.894511][ T5783] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 848.909781][ T5783] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 848.946810][ T5783] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 848.954908][ T5783] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 848.962299][ T5783] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 848.973439][ T5783] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 848.976493][ T4966] usb 5-1: reset high-speed USB device number 103 using dummy_hcd [ 848.984603][ T5783] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 848.998985][ T5783] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 849.007151][ T5783] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 849.031621][ T5783] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 849.043491][T10205] usb 3-1: device descriptor read/64, error -71 [ 849.043655][ T5783] microsoft 0003:045E:07DA.000D: no inputs found [ 849.061078][ T5783] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 849.154238][ T4966] usb 5-1: device firmware changed [ 849.164092][T10205] usb usb3-port1: attempt power cycle [ 849.167826][ T994] usb 5-1: USB disconnect, device number 103 [ 849.323515][ T994] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 849.473444][ T994] usb 5-1: Using ep0 maxpacket: 16 [ 849.479849][ T994] usb 5-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 849.490403][ T994] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 849.503107][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 849.514244][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 849.523499][T10205] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 849.535690][ T994] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 849.544791][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.552817][ T994] usb 5-1: Product: syz [ 849.557157][ T994] usb 5-1: Manufacturer: syz [ 849.561755][ T994] usb 5-1: SerialNumber: syz [ 849.563936][T10205] usb 3-1: device descriptor read/8, error -71 [ 849.573781][ T994] usb 5-1: config 0 descriptor?? [ 849.593444][ T5707] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 849.755006][ T5707] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 849.769005][ T5707] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 849.778229][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 849.787392][ T5707] usb 1-1: SerialNumber: syz [ 849.823606][T10205] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 849.833734][ T994] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 849.844119][T10205] usb 3-1: device descriptor read/8, error -71 [ 849.844363][ T994] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 849.964328][T10205] usb usb3-port1: unable to enumerate USB device [ 850.704193][ T5707] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 850.927609][T10205] usb 2-1: USB disconnect, device number 116 [ 851.292051][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 851.292081][ T30] audit: type=1400 audit(1784128032.667:1575): avc: denied { read write } for pid=14731 comm="syz.1.2275" name="video8" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 851.417127][ T30] audit: type=1400 audit(1784128032.667:1576): avc: denied { open } for pid=14731 comm="syz.1.2275" path="/dev/video8" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 851.623329][ T30] audit: type=1400 audit(1784128032.997:1577): avc: denied { create } for pid=14737 comm="syz.2.2277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 851.776068][ T190] usb 5-1: USB disconnect, device number 104 [ 851.823967][ T30] audit: type=1400 audit(1784128033.027:1578): avc: denied { setopt } for pid=14737 comm="syz.2.2277" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 851.873662][ T30] audit: type=1400 audit(1784128033.157:1579): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 851.903810][ T30] audit: type=1400 audit(1784128033.157:1580): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 852.007842][ T30] audit: type=1400 audit(1784128033.387:1581): avc: denied { connect } for pid=14742 comm="syz.2.2279" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 852.367378][ T994] usb 1-1: USB disconnect, device number 117 [ 852.461032][ T30] audit: type=1400 audit(1784128033.817:1582): avc: denied { create } for pid=14749 comm="syz.0.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 852.575218][ T30] audit: type=1400 audit(1784128033.937:1583): avc: denied { write } for pid=14742 comm="syz.2.2279" path="socket:[49563]" dev="sockfs" ino=49563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 852.803491][ T994] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 853.247339][T14754] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 853.261007][T14754] Error validating options; rc = [-22] [ 854.000924][ T30] audit: type=1400 audit(1784128035.377:1584): avc: denied { bind } for pid=14756 comm="syz.3.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 854.095352][ T994] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 854.105975][ T994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 854.117042][ T994] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 854.129191][ T994] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 854.138670][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.147029][ T994] usb 1-1: Product: syz [ 854.151312][ T994] usb 1-1: Manufacturer: syz [ 854.156991][ T994] usb 1-1: SerialNumber: syz [ 854.164913][ T994] usb 1-1: config 0 descriptor?? [ 854.170935][T14750] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 854.293570][ T5783] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 854.401304][T14750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.410967][T14750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.422884][T10205] usb 1-1: USB disconnect, device number 118 [ 854.433591][ T5783] usb 2-1: device descriptor read/64, error -71 [ 854.673510][ T5783] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 854.803513][ T5783] usb 2-1: device descriptor read/64, error -71 [ 854.913691][ T5783] usb usb2-port1: attempt power cycle [ 855.610570][ T5783] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 855.665295][ T5783] usb 2-1: device descriptor read/8, error -71 [ 855.930963][ T5783] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 855.939114][ T994] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 855.973988][ T5783] usb 2-1: device descriptor read/8, error -71 [ 856.018216][T14776] syz.0.2290: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 856.035502][T14776] CPU: 1 UID: 0 PID: 14776 Comm: syz.0.2290 Tainted: G L syzkaller #0 PREEMPT(full) [ 856.035534][T14776] Tainted: [L]=SOFTLOCKUP [ 856.035541][T14776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 856.035550][T14776] Call Trace: [ 856.035555][T14776] [ 856.035560][T14776] dump_stack_lvl+0x100/0x190 [ 856.035579][T14776] warn_alloc.cold+0x94/0xa8 [ 856.035593][T14776] ? __pfx_warn_alloc+0x10/0x10 [ 856.035611][T14776] ? __pfx_slow_avc_audit+0x10/0x10 [ 856.035625][T14776] ? __lock_acquire+0x49f/0x1a40 [ 856.035639][T14776] ? find_held_lock+0x2b/0x80 [ 856.035655][T14776] ? avc_has_extended_perms+0x33a/0x1080 [ 856.035667][T14776] ? avc_has_extended_perms+0x33a/0x1080 [ 856.035683][T14776] __vmalloc_node_range_noprof+0x136c/0x1630 [ 856.035704][T14776] ? trace_contention_end+0x126/0x160 [ 856.035719][T14776] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 856.035741][T14776] ? dvb_demux_do_ioctl+0x929/0x1200 [ 856.035758][T14776] ? find_held_lock+0x2b/0x80 [ 856.035774][T14776] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 856.035788][T14776] ? __pfx___mutex_lock+0x10/0x10 [ 856.035809][T14776] ? tomoyo_path_number_perm+0x188/0x580 [ 856.035828][T14776] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 856.035842][T14776] __vmalloc_node_noprof+0xad/0xf0 [ 856.035857][T14776] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 856.035873][T14776] dvb_demux_do_ioctl+0x9e0/0x1200 [ 856.035889][T14776] ? do_vfs_ioctl+0x226/0x13e0 [ 856.035907][T14776] dvb_usercopy+0x167/0x340 [ 856.035921][T14776] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 856.035937][T14776] ? __pfx_dvb_usercopy+0x10/0x10 [ 856.035956][T14776] ? selinux_file_ioctl+0x13b/0x290 [ 856.035971][T14776] ? selinux_file_ioctl+0xb6/0x290 [ 856.035987][T14776] dvb_demux_ioctl+0x29/0x40 [ 856.036000][T14776] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 856.036013][T14776] __x64_sys_ioctl+0x18e/0x210 [ 856.036030][T14776] do_syscall_64+0x115/0x870 [ 856.036045][T14776] ? clear_bhb_loop+0x40/0x90 [ 856.036059][T14776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.036074][T14776] RIP: 0033:0x7f5b46b9de59 [ 856.036084][T14776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.036095][T14776] RSP: 002b:00007f5b44df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 856.036106][T14776] RAX: ffffffffffffffda RBX: 00007f5b46e25fa0 RCX: 00007f5b46b9de59 [ 856.036114][T14776] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000006 [ 856.036120][T14776] RBP: 00007f5b46c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 856.036127][T14776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.036133][T14776] R13: 00007f5b46e26038 R14: 00007f5b46e25fa0 R15: 00007ffd0ad5b7e8 [ 856.036148][T14776] [ 856.038049][T14776] Mem-Info: [ 856.086647][ T5783] usb usb2-port1: unable to enumerate USB device [ 856.099348][T14776] active_anon:26565 inactive_anon:0 isolated_anon:0 [ 856.099348][T14776] active_file:2 inactive_file:63195 isolated_file:0 [ 856.099348][T14776] unevictable:768 dirty:531 writeback:0 [ 856.099348][T14776] slab_reclaimable:7546 slab_unreclaimable:103815 [ 856.099348][T14776] mapped:31938 shmem:17769 pagetables:1329 [ 856.099348][T14776] sec_pagetables:0 bounce:0 [ 856.099348][T14776] kernel_misc_reclaimable:0 [ 856.099348][T14776] free:1264169 free_pcp:13750 free_cma:0 [ 856.119023][ T994] usb 3-1: Using ep0 maxpacket: 16 [ 856.374266][T14776] Node 0 active_anon:106360kB inactive_anon:0kB active_file:8kB inactive_file:252328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127604kB dirty:2124kB writeback:0kB shmem:69540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12588kB pagetables:5304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 856.423463][T14776] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:452kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 856.456861][T14776] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 856.492495][T14776] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 856.500024][T14776] Node 0 DMA32 free:1092292kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:106340kB inactive_anon:0kB active_file:8kB inactive_file:252328kB unevictable:1536kB writepending:2132kB zspages:0kB present:3129332kB managed:2532316kB mlocked:0kB bounce:0kB free_pcp:54676kB local_pcp:29636kB free_cma:0kB [ 856.536873][ T994] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 856.555963][T14776] lowmem_reserve[]: 0 0 0 0 0 [ 856.556461][ T994] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 856.572785][T14776] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 856.599459][ T994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 856.613812][T14776] lowmem_reserve[]: 0 0 0 0 0 [ 856.618876][T14776] Node 1 Normal free:3949060kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:452kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 856.653275][T14776] lowmem_reserve[]: 0 0 0 0 0 [ 856.653823][ T994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 856.669487][T14776] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 856.683557][T14776] Node 0 DMA32: 1029*4kB (UME) 904*8kB (UME) 569*16kB (UME) 559*32kB (UME) 262*64kB (UME) 311*128kB (UME) 62*256kB (UME) 71*512kB (UME) 27*1024kB (ME) 6*2048kB (UM) 221*4096kB (UM) = 1092292kB [ 856.704425][T14776] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 856.724359][ T994] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 856.742049][T14776] Node 1 Normal: 1*4kB (U) 2*8kB (U) 7*16kB (U) 6*32kB (UM) 11*64kB (UM) 4*128kB (UM) 2*256kB (U) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3949060kB [ 856.745665][ T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.762426][T14776] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 856.779881][ T994] usb 3-1: Product: syz [ 856.780888][T14776] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 856.794482][T14776] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 856.804415][ T994] usb 3-1: Manufacturer: syz [ 856.804616][T14776] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 856.819019][T14776] 80943 total pagecache pages [ 856.823559][ T994] usb 3-1: SerialNumber: syz [ 856.824281][T14776] 0 pages in swap cache [ 856.832659][T14776] Free swap = 124996kB [ 856.837222][T14776] Total swap = 124996kB [ 856.841522][T14776] 2097051 pages RAM [ 856.846196][T14776] 0 pages HighMem/MovableOnly [ 856.850933][T14776] 432261 pages reserved [ 856.859911][T14776] 0 pages cma reserved [ 856.860007][ T994] usb 3-1: config 0 descriptor?? [ 857.145652][ T994] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 857.159932][ T994] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 857.188690][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 857.188706][ T30] audit: type=1400 audit(1784128038.567:1598): avc: denied { write } for pid=14784 comm="syz.0.2293" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 857.252615][ T30] audit: type=1400 audit(1784128038.567:1599): avc: denied { module_request } for pid=14786 comm="syz.3.2295" kmod="net-pf-10-proto-5-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 857.604900][ T30] audit: type=1400 audit(1784128038.607:1600): avc: denied { map } for pid=14784 comm="syz.0.2293" path="socket:[48830]" dev="sockfs" ino=48830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 857.833470][ T30] audit: type=1400 audit(1784128038.657:1601): avc: denied { create } for pid=14784 comm="syz.0.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 857.930201][ T30] audit: type=1400 audit(1784128038.657:1602): avc: denied { write } for pid=14784 comm="syz.0.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 858.082349][ T30] audit: type=1400 audit(1784128038.987:1603): avc: denied { read } for pid=14786 comm="syz.3.2295" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 858.216297][T10205] usb 3-1: USB disconnect, device number 115 [ 858.247391][ T30] audit: type=1400 audit(1784128038.987:1604): avc: denied { open } for pid=14786 comm="syz.3.2295" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 858.330069][ T30] audit: type=1400 audit(1784128039.287:1605): avc: denied { mounton } for pid=14801 comm="syz.3.2297" path="/449/file0" dev="tmpfs" ino=2551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 858.402291][ T30] audit: type=1400 audit(1784128039.357:1606): avc: denied { bind } for pid=14801 comm="syz.3.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 858.492515][ T30] audit: type=1400 audit(1784128039.357:1607): avc: denied { write } for pid=14801 comm="syz.3.2297" path="socket:[49665]" dev="sockfs" ino=49665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 858.823090][T14815] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2299'. [ 858.917479][ T5840] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 859.078407][ T5840] usb 2-1: Using ep0 maxpacket: 32 [ 859.310061][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.345536][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.368397][ T5840] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 859.377970][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.429279][ T5840] usb 2-1: config 0 descriptor?? [ 859.474630][ T5840] hub 2-1:0.0: USB hub found [ 859.715160][ T5840] hub 2-1:0.0: 1 port detected [ 861.013035][ T5783] hub 2-1:0.0: activate --> -90 [ 861.095852][T14839] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2308'. [ 861.186568][ T5783] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 861.194286][ T5840] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 861.416953][ T5783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.445271][ T5783] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 861.448563][T14811] 9p: Bad value for 'rfdno' [ 861.459881][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.495646][ T5840] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 861.517939][ T5783] usb 3-1: config 0 descriptor?? [ 861.532354][ T5840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 861.545831][ T5840] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 861.566987][ T5840] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 861.578080][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.588337][ T24] usb 2-1: USB disconnect, device number 121 [ 861.606146][ T5840] usb 5-1: Product: syz [ 861.618365][ T5840] usb 5-1: Manufacturer: syz [ 861.623191][ T5840] usb 5-1: SerialNumber: syz [ 861.643775][ T5840] usb 5-1: config 0 descriptor?? [ 861.652577][T14831] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 861.773419][T14846] FAULT_INJECTION: forcing a failure. [ 861.773419][T14846] name failslab, interval 1, probability 0, space 0, times 0 [ 861.787114][T14846] CPU: 0 UID: 0 PID: 14846 Comm: syz.3.2310 Tainted: G L syzkaller #0 PREEMPT(full) [ 861.787141][T14846] Tainted: [L]=SOFTLOCKUP [ 861.787147][T14846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 861.787157][T14846] Call Trace: [ 861.787163][T14846] [ 861.787170][T14846] dump_stack_lvl+0x100/0x190 [ 861.787194][T14846] should_fail_ex.cold+0x5/0xa [ 861.787211][T14846] should_failslab+0xc2/0x120 [ 861.787224][T14846] __kmalloc_noprof+0xfc/0x820 [ 861.787236][T14846] ? iovec_from_user+0x8d/0x140 [ 861.787257][T14846] iovec_from_user+0x8d/0x140 [ 861.787272][T14846] __import_iovec+0x81/0x640 [ 861.787284][T14846] ? __might_fault+0xa0/0x140 [ 861.787300][T14846] ? __might_fault+0xc5/0x140 [ 861.787318][T14846] import_iovec+0x101/0x130 [ 861.787332][T14846] copy_msghdr_from_user+0x2c6/0x4c0 [ 861.787349][T14846] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 861.787370][T14846] ___sys_sendmsg+0x106/0x1e0 [ 861.787385][T14846] ? __pfx____sys_sendmsg+0x10/0x10 [ 861.787400][T14846] ? preempt_schedule_thunk+0x16/0x40 [ 861.787416][T14846] ? __rcu_read_unlock+0x26a/0x5e0 [ 861.787437][T14846] __sys_sendmmsg+0x20c/0x440 [ 861.787450][T14846] ? __pfx___sys_sendmmsg+0x10/0x10 [ 861.787475][T14846] ? __pfx___schedule+0x10/0x10 [ 861.787503][T14846] __x64_sys_sendmmsg+0x9c/0x100 [ 861.787520][T14846] ? lockdep_hardirqs_on+0x78/0x100 [ 861.787536][T14846] do_syscall_64+0x115/0x870 [ 861.787551][T14846] ? clear_bhb_loop+0x40/0x90 [ 861.787565][T14846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.787576][T14846] RIP: 0033:0x7f0ff079de59 [ 861.787586][T14846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.787596][T14846] RSP: 002b:00007f0ff1687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 861.787608][T14846] RAX: ffffffffffffffda RBX: 00007f0ff0a26090 RCX: 00007f0ff079de59 [ 861.787615][T14846] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000004 [ 861.787622][T14846] RBP: 00007f0ff1687090 R08: 0000000000000000 R09: 0000000000000000 [ 861.787628][T14846] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 861.787634][T14846] R13: 00007f0ff0a26128 R14: 00007f0ff0a26090 R15: 00007ffcb4aba528 [ 861.787648][T14846] [ 862.364601][ T994] usb 2-1-port1: config error [ 862.377523][ T9] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 862.398675][ T5783] usbhid 3-1:0.0: can't add hid device: -71 [ 862.422640][ T5783] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 862.462593][T14848] netlink: 'syz.3.2311': attribute type 50 has an invalid length. [ 862.468210][ T5783] usb 3-1: USB disconnect, device number 116 [ 862.475552][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 862.475567][ T30] audit: type=1400 audit(1784128043.847:1625): avc: denied { create } for pid=14847 comm="syz.3.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 862.520342][T14831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.529090][ T30] audit: type=1400 audit(1784128043.887:1626): avc: denied { setopt } for pid=14847 comm="syz.3.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 862.575468][ T9] usb 1-1: config 0 has an invalid interface number: 91 but max is 0 [ 862.579414][ T30] audit: type=1400 audit(1784128043.887:1627): avc: denied { ioctl } for pid=14847 comm="syz.3.2311" path="socket:[49735]" dev="sockfs" ino=49735 ioctlcmd=0x5867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 862.646336][T14831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.699428][ T9] usb 1-1: config 0 has no interface number 0 [ 862.744174][ T9] usb 1-1: too many endpoints for config 0 interface 91 altsetting 24: 159, using maximum allowed: 30 [ 862.763488][ T9] usb 1-1: config 0 interface 91 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 159 [ 862.780993][ T994] usb 5-1: USB disconnect, device number 105 [ 862.789143][ T9] usb 1-1: config 0 interface 91 has no altsetting 0 [ 862.802907][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=78.55 [ 862.812129][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.821009][ T9] usb 1-1: Product: syz [ 862.827767][ T9] usb 1-1: Manufacturer: syz [ 862.834228][ T9] usb 1-1: SerialNumber: syz [ 862.854905][ T9] usb 1-1: config 0 descriptor?? [ 862.953461][ T24] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 863.005605][ T5783] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 863.102314][T14843] bridge8: entered promiscuous mode [ 863.105228][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 863.107740][T14843] bridge8: entered allmulticast mode [ 863.143873][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 863.168825][ T24] usb 2-1: string descriptor 0 read error: -22 [ 863.183985][ T24] usb 2-1: New USB device found, idVendor=2013, idProduct=025c, bcdDevice=a6.f9 [ 863.185946][ T5783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.205663][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.246900][ T5783] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 863.300920][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.349741][ T5783] usb 3-1: config 0 descriptor?? [ 863.465841][ T24] dvb-usb: found a 'PCTV 2002e' in warm state. [ 863.482927][ T24] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 863.508340][ T24] dvbdev: DVB: registering new adapter (PCTV 2002e) [ 863.517661][ T24] usb 2-1: media controller created [ 863.528238][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 863.596428][ T24] DVB: Unable to find symbol dib7000p_attach() [ 863.604655][ T24] dvb-usb: no frontend was attached by 'PCTV 2002e' [ 863.612078][ T24] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 863.636262][ T24] dvbdev: DVB: registering new adapter (PCTV 2002e) [ 863.655272][ T24] usb 2-1: media controller created [ 863.729001][ T30] audit: type=1400 audit(1784128045.107:1628): avc: denied { create } for pid=14849 comm="syz.1.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 863.753628][ T994] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 863.755952][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 864.066899][ T24] DVB: Unable to find symbol dib7000p_attach() [ 864.094949][ T24] dvb-usb: no frontend was attached by 'PCTV 2002e' [ 864.096030][ T9] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 864.149866][ T9] usb 1-1: USB disconnect, device number 119 [ 864.199848][ T994] usb 5-1: unable to get BOS descriptor or descriptor too short [ 864.210787][ T994] usb 5-1: config 64 has an invalid interface number: 44 but max is 0 [ 864.216905][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 864.219571][ T994] usb 5-1: config 64 has no interface number 0 [ 864.232378][ T994] usb 5-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 864.247736][ T994] usb 5-1: config 64 interface 44 has no altsetting 0 [ 864.249774][ T24] Registered IR keymap rc-empty [ 864.257601][ T994] usb 5-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 864.276861][ T24] dvb-usb: could not initialize remote control. [ 864.279425][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.299728][ T994] usb 5-1: Product: syz [ 864.307742][ T24] dvb-usb: PCTV 2002e successfully initialized and connected. [ 864.536022][ T5783] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 864.545628][ T24] usb 2-1: USB disconnect, device number 122 [ 864.555914][ T994] usb 5-1: Manufacturer: syz [ 864.568035][ T994] usb 5-1: SerialNumber: syz [ 864.572878][ T5783] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input84 [ 864.577919][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.589993][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.660592][ T30] audit: type=1400 audit(1784128046.037:1629): avc: denied { ioctl } for pid=4966 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4615 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 864.663328][ T2363] pvrusb2: request_firmware fatal error with code=-110 [ 864.732321][ T5783] usb 3-1: USB disconnect, device number 117 [ 864.738411][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 864.747505][ T24] dvb-usb: PCTV 2002e successfully deinitialized and disconnected. [ 864.755296][ T2363] pvrusb2: Failure uploading firmware1 [ 864.768477][ T2363] pvrusb2: Device initialization was not successful. [ 864.775400][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 864.804937][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 864.816509][ T805] pvrusb2: Device being rendered inoperable [ 864.817008][ T2363] usb 4-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 864.837444][ T2363] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 864.864930][ T30] audit: type=1400 audit(1784128046.217:1630): avc: denied { firmware_load } for pid=2363 comm="pvrusb2-context" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 864.954986][T14855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.971219][T14855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.022270][ T30] audit: type=1400 audit(1784128046.397:1631): avc: denied { write } for pid=14854 comm="syz.4.2313" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 865.040610][T14855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.977385][ T30] audit: type=1400 audit(1784128046.407:1632): avc: denied { ioctl } for pid=14854 comm="syz.4.2313" path="/dev/input/event2" dev="devtmpfs" ino=923 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 866.042938][T14855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.421518][ T994] iowarrior 5-1:64.44: no interrupt-out endpoint found [ 867.441343][ T994] usb 5-1: USB disconnect, device number 106 [ 867.583080][T14898] Bluetooth: MGMT ver 1.23 [ 868.290266][T14901] devpts: Unknown parameter 'IDLETIMER' [ 868.507780][ T30] audit: type=1400 audit(1784128049.677:1633): avc: denied { write } for pid=14900 comm="syz.0.2329" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 869.845990][ T30] audit: type=1400 audit(1784128051.227:1634): avc: denied { nlmsg_write } for pid=14912 comm="syz.1.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 871.137266][ T30] audit: type=1400 audit(1784128052.517:1635): avc: denied { remount } for pid=14930 comm="syz.3.2324" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 871.484606][T14935] binder: 14932:14935 ioctl c0306201 0 returned -14 [ 872.183658][ T30] audit: type=1400 audit(1784128052.807:1636): avc: denied { read } for pid=14932 comm="syz.1.2341" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 872.232466][ T30] audit: type=1400 audit(1784128052.817:1637): avc: denied { open } for pid=14932 comm="syz.1.2341" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 872.384543][ T30] audit: type=1400 audit(1784128052.827:1638): avc: denied { ioctl } for pid=14932 comm="syz.1.2341" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 872.530315][ T30] audit: type=1400 audit(1784128052.837:1639): avc: denied { set_context_mgr } for pid=14932 comm="syz.1.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 874.478417][ T30] audit: type=1400 audit(1784128055.327:1640): avc: denied { create } for pid=14946 comm="syz.4.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 874.507811][ T30] audit: type=1400 audit(1784128055.327:1641): avc: denied { bind } for pid=14946 comm="syz.4.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 874.527791][ T30] audit: type=1400 audit(1784128055.327:1642): avc: denied { connect } for pid=14946 comm="syz.4.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 874.561248][ T30] audit: type=1400 audit(1784128055.937:1643): avc: denied { ioctl } for pid=14950 comm="syz.3.2346" path="socket:[49061]" dev="sockfs" ino=49061 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 874.749779][ T30] audit: type=1400 audit(1784128056.107:1644): avc: denied { setopt } for pid=14952 comm="syz.3.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 875.010665][ T30] audit: type=1400 audit(1784128056.127:1645): avc: denied { connect } for pid=14952 comm="syz.3.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 875.564520][ T30] audit: type=1400 audit(1784128056.947:1646): avc: denied { bind } for pid=14961 comm="syz.2.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 875.566434][T14962] tipc: Failed to remove unknown binding: 66,0,0/3549488355:2561345110/2561345112 [ 875.792068][ T30] audit: type=1400 audit(1784128056.947:1647): avc: denied { setopt } for pid=14961 comm="syz.2.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 876.019537][T14962] tipc: Failed to remove unknown binding: 66,0,0/3549488355:2561345110/2561345111 [ 876.029019][T14962] tipc: Failed to remove unknown binding: 66,0,0/3549488355:2561345110/2561345112 [ 876.030359][ T30] audit: type=1400 audit(1784128057.027:1648): avc: denied { write } for pid=14958 comm="syz.1.2343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 876.038740][T14962] tipc: Failed to remove unknown binding: 66,0,0/3549488355:2561345110/2561345111 [ 876.073610][ T30] audit: type=1400 audit(1784128057.227:1649): avc: denied { getopt } for pid=14961 comm="syz.2.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 876.501452][T14965] Process accounting resumed [ 877.191808][T14983] x_tables: unsorted underflow at hook 3 [ 879.929009][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 879.929026][ T30] audit: type=1400 audit(1784128061.307:1656): avc: denied { write } for pid=15018 comm="syz.0.2366" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 880.078718][T15025] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15025 comm=syz.3.2368 [ 880.127671][ T30] audit: type=1400 audit(1784128061.507:1657): avc: denied { watch_reads } for pid=15020 comm="syz.4.2367" path="/491" dev="tmpfs" ino=2695 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 882.809156][T15041] devpts: Unknown parameter 'IDLETIMER' [ 884.216010][ T30] audit: type=1400 audit(1784128065.587:1658): avc: denied { mount } for pid=15054 comm="syz.1.2375" name="/" dev="ramfs" ino=50484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 884.827696][ T30] audit: type=1400 audit(1784128066.197:1659): avc: denied { create } for pid=15058 comm="syz.2.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 885.655679][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2377'. [ 885.901432][T15074] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15074 comm=syz.3.2379 [ 886.165589][ T29] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 886.497353][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 886.511466][ T29] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 886.555086][ T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 887.070328][ T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 887.096072][ T29] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 887.115519][ T29] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 887.124964][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.366195][ T29] usb 1-1: GET_CAPABILITIES returned 0 [ 887.406197][ T29] usbtmc 1-1:16.0: can't read capabilities [ 887.764414][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 888.374913][ T9] usb 1-1: USB disconnect, device number 120 [ 889.220648][T15096] random: crng reseeded on system resumption [ 889.227445][ T30] audit: type=1400 audit(1784128070.607:1660): avc: denied { write } for pid=15095 comm="syz.3.2385" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 889.303689][ T30] audit: type=1400 audit(1784128070.607:1661): avc: denied { open } for pid=15095 comm="syz.3.2385" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 891.488383][T15065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 891.507997][T15065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.567894][T15105] ip6tnl0: entered promiscuous mode [ 891.586529][T15105] ip6tnl0: left promiscuous mode [ 891.707243][T15117] blkio.reset_stats is deprecated [ 891.985085][ T30] audit: type=1400 audit(1784128073.327:1662): avc: denied { create } for pid=15118 comm="syz.1.2394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 892.429488][ T30] audit: type=1400 audit(1784128073.807:1663): avc: denied { write } for pid=15116 comm="syz.2.2393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 893.444063][ T5707] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 893.500163][ T30] audit: type=1400 audit(1784128074.857:1664): avc: denied { write } for pid=15139 comm="syz.3.2391" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 893.755424][ T30] audit: type=1400 audit(1784128074.867:1665): avc: denied { listen } for pid=15139 comm="syz.3.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 893.947127][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.527234][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.558163][ T30] audit: type=1400 audit(1784128075.937:1666): avc: denied { sys_module } for pid=15143 comm="syz.1.2400" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 894.580910][ T5707] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 894.611339][ T5707] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 894.640006][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.688315][ T5707] usb 1-1: config 0 descriptor?? [ 895.317755][T15164] virtio-fs: tag not found [ 895.974455][ T4932] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 896.078984][ T5707] usbhid 1-1:0.0: can't add hid device: -71 [ 896.094072][ T5707] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 896.116717][ T5707] usb 1-1: USB disconnect, device number 121 [ 896.258426][ T30] audit: type=1400 audit(1784128077.627:1667): avc: denied { cmd } for pid=15171 comm="iou-wrk-15172" path="socket:[51415]" dev="sockfs" ino=51415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 896.725982][T15177] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2409'. [ 897.207964][T15179] vivid-000: disconnect [ 897.481533][T15172] vivid-000: reconnect [ 897.569161][ T30] audit: type=1400 audit(1784128078.927:1668): avc: denied { bind } for pid=15184 comm="syz.3.2412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 897.644185][T15188] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2413'. [ 897.716721][ T30] audit: type=1400 audit(1784128078.937:1669): avc: denied { write } for pid=15184 comm="syz.3.2412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 898.230029][T15199] binder: 15192:15199 ioctl c0306201 200000000540 returned -22 [ 898.555978][ T30] audit: type=1400 audit(1784128079.597:1670): avc: denied { read } for pid=15192 comm="syz.1.2415" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 898.633559][ T30] audit: type=1400 audit(1784128079.597:1671): avc: denied { open } for pid=15192 comm="syz.1.2415" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 898.700456][ T30] audit: type=1400 audit(1784128079.597:1672): avc: denied { ioctl } for pid=15192 comm="syz.1.2415" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 899.571914][ T30] audit: type=1400 audit(1784128080.397:1673): avc: denied { create } for pid=15202 comm="syz.4.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 899.631496][ T30] audit: type=1400 audit(1784128080.417:1674): avc: denied { append } for pid=15202 comm="syz.4.2407" name="ubi_ctrl" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 899.686113][ T30] audit: type=1400 audit(1784128080.977:1675): avc: denied { listen } for pid=15202 comm="syz.4.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 899.724676][ T30] audit: type=1400 audit(1784128080.977:1676): avc: denied { bind } for pid=15202 comm="syz.4.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 899.744578][T15208] syzkaller0: entered promiscuous mode [ 899.769557][T15208] syzkaller0: entered allmulticast mode [ 899.845670][T15215] wlan0 speed is unknown, defaulting to 1000 [ 899.851991][T15215] wlan0 speed is unknown, defaulting to 1000 [ 899.864213][T15215] wlan0 speed is unknown, defaulting to 1000 [ 899.873497][T15215] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 899.887734][T15215] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 899.904668][T15215] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 899.956326][T15215] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 900.028425][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2418'. [ 900.049819][T15217] xt_TPROXY: Can be used only with -p tcp or -p udp [ 900.108147][T15215] wlan0 speed is unknown, defaulting to 1000 [ 900.121240][T15215] wlan0 speed is unknown, defaulting to 1000 [ 900.134609][T15215] wlan0 speed is unknown, defaulting to 1000 [ 900.148579][T15215] wlan0 speed is unknown, defaulting to 1000 [ 900.160794][T15215] wlan0 speed is unknown, defaulting to 1000 [ 900.394589][ T30] audit: type=1400 audit(1784128080.977:1677): avc: denied { write } for pid=15202 comm="syz.4.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 900.530499][ T30] audit: type=1400 audit(1784128080.977:1678): avc: denied { setopt } for pid=15202 comm="syz.4.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 900.573462][ T30] audit: type=1400 audit(1784128081.087:1679): avc: denied { create } for pid=15209 comm="syz.1.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 900.682779][ T30] audit: type=1400 audit(1784128081.197:1680): avc: denied { write } for pid=15209 comm="syz.1.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 900.980002][ T30] audit: type=1400 audit(1784128081.417:1681): avc: denied { append } for pid=15209 comm="syz.1.2418" name="001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 901.064844][ T30] audit: type=1400 audit(1784128082.157:1682): avc: denied { write } for pid=15211 comm="syz.0.2420" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 904.939689][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 904.939703][ T30] audit: type=1400 audit(1784128086.317:1686): avc: denied { bind } for pid=15261 comm="syz.0.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 905.057970][ T30] audit: type=1400 audit(1784128086.347:1687): avc: denied { node_bind } for pid=15261 comm="syz.0.2424" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 905.170239][T15270] block device autoloading is deprecated and will be removed. [ 906.083667][ T30] audit: type=1400 audit(1784128087.457:1688): avc: denied { connect } for pid=15277 comm="syz.3.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 906.127338][ T30] audit: type=1400 audit(1784128087.487:1689): avc: denied { read } for pid=15277 comm="syz.3.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 906.218826][ T30] audit: type=1400 audit(1784128087.587:1690): avc: denied { ioctl } for pid=15277 comm="syz.3.2437" path="socket:[51654]" dev="sockfs" ino=51654 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 906.273514][ T30] audit: type=1400 audit(1784128087.587:1691): avc: denied { write } for pid=15277 comm="syz.3.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 906.407767][T15289] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 906.601137][T15294] tipc: Enabled bearer , priority 0 [ 906.679172][T15294] tipc: Resetting bearer [ 906.741704][T15291] tipc: Disabling bearer [ 906.866091][T15302] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2446'. [ 906.882663][T15302] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2446'. [ 907.798354][ T30] audit: type=1400 audit(1784128088.847:1692): avc: denied { read } for pid=15308 comm="syz.1.2449" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 908.336626][ T30] audit: type=1400 audit(1784128088.847:1693): avc: denied { open } for pid=15308 comm="syz.1.2449" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 908.410668][ T30] audit: type=1400 audit(1784128088.847:1694): avc: denied { ioctl } for pid=15308 comm="syz.1.2449" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 908.919685][T15334] ip6t_srh: unknown srh match flags FF3F [ 908.960780][T15325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.127423][T15337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2457'. [ 909.145275][ T30] audit: type=1400 audit(1784128089.177:1695): avc: denied { mount } for pid=15311 comm="syz.2.2450" name="/" dev="pstore" ino=3986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 910.783161][T15344] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2460'. [ 910.799142][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 910.799158][ T30] audit: type=1400 audit(1784128092.177:1697): avc: denied { map } for pid=15341 comm="syz.3.2459" path="socket:[51165]" dev="sockfs" ino=51165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 911.300128][T15357] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 911.314774][T15357] Error validating options; rc = [-22] [ 911.530329][ T30] audit: type=1400 audit(1784128092.517:1698): avc: denied { read } for pid=15345 comm="syz.4.2458" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 911.581099][ T30] audit: type=1400 audit(1784128092.517:1699): avc: denied { open } for pid=15345 comm="syz.4.2458" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 911.618686][ T30] audit: type=1400 audit(1784128092.527:1700): avc: denied { execute_no_trans } for pid=15345 comm="syz.4.2458" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 911.763890][T15361] tmpfs: Unknown parameter '/dev/cpu/#/msr' [ 912.085653][ T30] audit: type=1400 audit(1784128093.387:1701): avc: denied { mounton } for pid=15359 comm="syz.0.2463" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 912.159602][ T30] audit: type=1400 audit(1784128093.397:1702): avc: denied { mount } for pid=15359 comm="syz.0.2463" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 912.240496][ T30] audit: type=1400 audit(1784128093.507:1703): avc: denied { write } for pid=15362 comm="syz.4.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 912.287182][ T30] audit: type=1400 audit(1784128093.517:1704): avc: denied { mount } for pid=15364 comm="syz.2.2465" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 912.365096][ T30] audit: type=1400 audit(1784128093.517:1705): avc: denied { unmount } for pid=15364 comm="syz.2.2465" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 913.167389][ T30] audit: type=1400 audit(1784128094.547:1706): avc: denied { read } for pid=15359 comm="syz.0.2463" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 913.448671][T15388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2468'. [ 916.422617][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 916.422651][ T30] audit: type=1400 audit(1784128097.797:1712): avc: denied { getopt } for pid=15433 comm="syz.3.2477" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 916.882020][T15447] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 918.062208][T15463] syz.2.2486 (15463): drop_caches: 2 [ 918.109623][ T30] audit: type=1400 audit(1784128099.487:1713): avc: denied { bind } for pid=15462 comm="syz.1.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 918.209049][ T30] audit: type=1400 audit(1784128099.487:1714): avc: denied { name_bind } for pid=15462 comm="syz.1.2487" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 918.376027][ T30] audit: type=1400 audit(1784128099.487:1715): avc: denied { node_bind } for pid=15462 comm="syz.1.2487" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 918.848524][T15478] lo speed is unknown, defaulting to 1000 [ 918.855663][T15478] wlan0 speed is unknown, defaulting to 1000 [ 920.416972][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 920.425240][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 920.637088][T15466] ceph: No mds server is up or the cluster is laggy [ 920.719813][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 921.207711][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 921.499028][T15503] tmpfs: Unknown parameter ' [ 921.499028][T15503] veth0_to_team 001414AC 00000000 0001 0 0 0 00FFFFFF 0 0 0 [ 921.499028][T15503] veth1_to_team 001414AC 00000000 0001 0 0 0 00FFFFFF 0 0 0 [ 921.499028][T15503] veth0_to_hsr 001414AC 00000000 0001 0 0 0 00FFFFFF 0 0 0 [ 921.499028][T15503] veth1_to_hsr 001414AC 00000000 0001 0 0 0 00FFFFFF 0 0 0 [ 921.499028][T15503] hsr0 001414AC 00000000 0001 0 0 0 00FFFFFF 0 0 0 [ 921.499028][T15503] dummy0 001414AC 00000000 0001 0 0 0 00FFFFFF 0 0 0 [ 921.499028][T15503] nlmon0 001414AC 00000000 0001 0 0 0 00FFFFFF 0 0 0 [ 921.499028][T15503] vxcan0 001414AC 00000000 0001 0 0 0 00FFFFFF 0 0 0 [ 923.595594][T15511] lo speed is unknown, defaulting to 1000 [ 923.851182][T15522] netlink: 'syz.4.2502': attribute type 1 has an invalid length. [ 923.859412][T15522] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2502'. [ 923.869599][T15522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2502'. [ 923.928154][T15511] lo speed is unknown, defaulting to 1000 [ 924.181660][T15511] lo speed is unknown, defaulting to 1000 [ 924.217279][ T30] audit: type=1400 audit(1784128105.587:1716): avc: denied { connect } for pid=15520 comm="syz.4.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 924.640730][ T30] audit: type=1400 audit(1784128106.017:1717): avc: denied { block_suspend } for pid=15537 comm="syz.2.2504" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 924.874183][T10205] lo speed is unknown, defaulting to 1000 [ 924.882333][T15511] infiniband syz1: set active [ 924.902634][T15511] infiniband syz1: added lo [ 925.086983][T15511] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 925.110936][T15511] infiniband syz1: Couldn't open port 1 [ 925.134070][T15511] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 925.164659][T15511] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 925.976702][T15511] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 926.025725][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.027354][ T2363] pvrusb2: request_firmware fatal error with code=-110 [ 926.039426][ T2363] pvrusb2: Failure uploading firmware1 [ 926.046017][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.057338][ T2363] pvrusb2: Device initialization was not successful. [ 926.065179][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 926.076366][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 926.086942][ T805] pvrusb2: Device being rendered inoperable [ 926.094654][ T24] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 926.795690][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 926.849314][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 926.874979][T15511] RDS/IB: syz1: added [ 926.911013][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 927.800604][T15511] smc: adding ib device syz1 with port count 1 [ 928.701262][ T30] audit: type=1400 audit(1784128110.077:1718): avc: denied { sqpoll } for pid=15548 comm="syz.0.2500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 928.721269][T15511] smc: ib device syz1 port 1 has no pnetid [ 928.727460][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.746518][T15558] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 928.756877][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 928.820327][ T994] lo speed is unknown, defaulting to 1000 [ 928.894889][T15511] lo speed is unknown, defaulting to 1000 [ 929.029508][ T805] usb 1-1: USB disconnect, device number 122 [ 929.048500][ T30] audit: type=1400 audit(1784128110.427:1719): avc: denied { mount } for pid=15578 comm="syz.1.2516" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 929.315574][T15511] lo speed is unknown, defaulting to 1000 [ 929.684089][T15511] lo speed is unknown, defaulting to 1000 [ 930.957652][ T30] audit: type=1400 audit(1784128112.337:1720): avc: denied { listen } for pid=15593 comm="syz.2.2520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 931.603464][ T30] audit: type=1400 audit(1784128112.947:1721): avc: denied { accept } for pid=15593 comm="syz.2.2520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 932.041008][T15511] lo speed is unknown, defaulting to 1000 [ 932.854145][T15607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 932.966017][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2521'. [ 932.975058][T15608] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2521'. [ 932.984188][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2521'. [ 932.993045][T15608] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2521'. [ 933.002140][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2521'. [ 933.094365][ T30] audit: type=1400 audit(1784128114.467:1722): avc: denied { write } for pid=15606 comm="syz.4.2515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 934.258033][T15511] lo speed is unknown, defaulting to 1000 [ 934.678410][T15617] loop5: detected capacity change from 0 to 1 [ 934.748191][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 934.758834][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 934.768094][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 934.780998][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 934.790271][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 934.803920][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 934.813155][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 934.823529][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 934.832726][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 934.847267][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 934.856510][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 934.918025][ T30] audit: type=1400 audit(1784128116.287:1723): avc: denied { open } for pid=15618 comm="syz.1.2525" path="/dev/ttyq7" dev="devtmpfs" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 935.018724][T15622] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 935.025274][T15622] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 935.276240][T15622] vhci_hcd vhci_hcd.0: Device attached [ 935.281781][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 935.294458][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 935.303653][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 935.313372][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 935.322552][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 935.331067][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 935.331929][ T24] usb 1-1: new low-speed USB device number 123 using dummy_hcd [ 935.340317][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 935.341437][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 935.355423][ T30] audit: type=1400 audit(1784128116.287:1724): avc: denied { bind } for pid=15618 comm="syz.1.2525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 935.364974][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 935.474191][T10205] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 935.537327][T10205] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 935.572338][ T24] usb 1-1: config 0 has no interfaces? [ 935.578723][ T24] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 935.593753][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.615708][ T24] usb 1-1: config 0 descriptor?? [ 936.087400][ T30] audit: type=1400 audit(1784128117.467:1725): avc: denied { ioctl } for pid=15636 comm="syz.1.2531" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 936.113875][T15623] vhci_hcd: unknown pdu 2 [ 936.118776][ T9982] vhci_hcd vhci_hcd.0: stop threads [ 936.133802][ T24] usb 1-1: USB disconnect, device number 123 [ 936.142285][ T9982] vhci_hcd vhci_hcd.0: release socket [ 936.162972][ T9982] vhci_hcd vhci_hcd.0: disconnect device [ 936.203514][T10205] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 939.262221][ T30] audit: type=1400 audit(1784128120.187:1726): avc: denied { connect } for pid=15659 comm="syz.1.2538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 941.009268][T15681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2545'. [ 944.419173][ T29] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 944.623483][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 945.552759][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.617786][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.628818][ T29] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 945.639355][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.709691][ T29] usb 3-1: config 0 descriptor?? [ 945.748629][ T30] audit: type=1400 audit(1784128127.127:1727): avc: denied { call } for pid=15709 comm="syz.3.2552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 945.768076][T15711] binder_alloc: 15709: binder_alloc_buf, no vma [ 946.277631][ T29] hid_parser_main: 3 callbacks suppressed [ 946.277804][ T29] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 946.404756][ T29] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 946.600828][ T29] ft260 0003:0403:6030.000E: chip code: 0000 0000 [ 946.755643][ T29] ft260 0003:0403:6030.000E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 947.989499][ T29] ft260 0003:0403:6030.000E: failed to retrieve status: -71, no wakeup [ 948.030845][ T29] ft260 0003:0403:6030.000E: failed to retrieve status: -71 [ 948.092908][ T29] ft260 0003:0403:6030.000E: failed to reset I2C controller: -71 [ 948.175471][T15731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2558'. [ 949.834146][ T29] usb 3-1: USB disconnect, device number 118 [ 952.127675][ T30] audit: type=1400 audit(1784128133.497:1728): avc: denied { setopt } for pid=15762 comm="syz.3.2557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 952.869472][ T30] audit: type=1400 audit(1784128134.247:1729): avc: denied { listen } for pid=15773 comm="syz.2.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 952.986548][T15782] ALSA: mixer_oss: invalid OSS volume 'IGAI' [ 954.798848][ T30] audit: type=1400 audit(1784128136.177:1730): avc: denied { ioctl } for pid=15801 comm="syz.0.2576" path="socket:[53155]" dev="sockfs" ino=53155 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 956.533494][ T9] usb 3-1: new low-speed USB device number 119 using dummy_hcd [ 956.695891][ T9] usb 3-1: config index 0 descriptor too short (expected 561, got 49) [ 956.723637][ T9] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 956.757467][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.791611][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 956.825980][ T9] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 956.850817][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.874182][ T9] usb 3-1: config 0 descriptor?? [ 956.894128][ T9] cdc_acm 3-1:0.0: Zero length descriptor references [ 956.912551][ T9] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 957.368872][ T29] usb 3-1: USB disconnect, device number 119 [ 958.570688][T15833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2584'. [ 960.723818][ T30] audit: type=1400 audit(1784128142.097:1731): avc: denied { recv } for pid=5616 comm="syz-executor" saddr=10.128.0.169 src=46654 daddr=10.128.0.77 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 961.093413][ T24] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 961.219994][T15855] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 961.384251][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 961.397511][ T24] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 961.413414][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 961.433391][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 961.473011][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 961.971499][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 962.208794][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 962.243493][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.679966][ T24] usb 1-1: usb_control_msg returned -32 [ 962.744841][T15872] xt_TPROXY: Can be used only with -p tcp or -p udp [ 963.206556][ T24] usbtmc 1-1:16.0: can't read capabilities [ 964.444400][ T9] usb 1-1: USB disconnect, device number 124 [ 964.457930][ T30] audit: type=1400 audit(1784128145.837:1732): avc: denied { append } for pid=15884 comm="syz.2.2599" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 965.214946][T15894] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.059062][ T30] audit: type=1400 audit(1784128148.437:1733): avc: denied { write } for pid=15917 comm="syz.3.2610" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 967.637685][ T30] audit: type=1400 audit(1784128148.557:1734): avc: denied { read } for pid=15919 comm="syz.4.2612" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 967.752275][ T30] audit: type=1400 audit(1784128148.557:1735): avc: denied { open } for pid=15919 comm="syz.4.2612" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 967.852811][T15930] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2613'. [ 968.123430][ T30] audit: type=1400 audit(1784128148.577:1736): avc: denied { ioctl } for pid=15919 comm="syz.4.2612" path="/dev/usbmon0" dev="devtmpfs" ino=717 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 969.070671][T15939] ceph: No mds server is up or the cluster is laggy [ 969.137671][ T30] audit: type=1400 audit(1784128149.967:1737): avc: denied { bind } for pid=15936 comm="syz.1.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 969.149049][ T805] libceph: connect (1)[c::]:6789 error -101 [ 969.177943][ T30] audit: type=1400 audit(1784128149.977:1738): avc: denied { create } for pid=15936 comm="syz.1.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 969.204503][ T30] audit: type=1400 audit(1784128149.977:1739): avc: denied { bind } for pid=15936 comm="syz.1.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 969.279871][ T805] libceph: mon0 (1)[c::]:6789 connect error [ 973.322954][ T30] audit: type=1400 audit(1784128154.267:1740): avc: denied { getopt } for pid=15970 comm="syz.0.2626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 973.565581][ T30] audit: type=1400 audit(1784128154.947:1741): avc: denied { read write } for pid=15980 comm="syz.3.2629" name="sg0" dev="devtmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 973.702043][ T30] audit: type=1400 audit(1784128155.007:1742): avc: denied { open } for pid=15980 comm="syz.3.2629" path="/dev/sg0" dev="devtmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 974.754510][ T30] audit: type=1400 audit(1784128155.027:1743): avc: denied { append } for pid=15980 comm="syz.3.2629" name="sg0" dev="devtmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 976.917088][ T30] audit: type=1400 audit(1784128157.887:1744): avc: denied { watch } for pid=16009 comm="syz.4.2636" path="/538/file0" dev="tmpfs" ino=2944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 976.961834][ T30] audit: type=1400 audit(1784128157.887:1745): avc: denied { watch_sb watch_reads } for pid=16009 comm="syz.4.2636" path="/538/file0" dev="tmpfs" ino=2944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 979.497439][T16016] bridge0: port 3(dummy0) entered disabled state [ 979.504244][T16016] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.854282][ T29] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 980.052541][T16016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 980.062965][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 980.078661][ T29] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 980.094119][ T29] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 980.121676][ T29] usb 5-1: config 8 has no interface number 0 [ 980.137682][ T29] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 980.167731][ T29] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 980.202076][ T29] usb 5-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 981.703429][ T29] usb 5-1: config 8 interface 206 has no altsetting 0 [ 982.069786][T16016] ve: left promiscuous mode [ 982.076312][ T29] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 982.092674][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.100981][ T29] usb 5-1: Product: syz [ 982.105972][ T29] usb 5-1: Manufacturer: syz [ 982.110671][ T29] usb 5-1: SerialNumber: syz [ 982.174363][T16019] : renamed from bond_slave_0 (while UP) [ 982.727650][ T30] audit: type=1326 audit(1784128164.107:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16058 comm="syz.2.2650" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc03f59de59 code=0x0 [ 982.888975][ T29] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 982.920488][ T29] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 982.939027][ T29] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 982.959665][ T29] usb 5-1: USB disconnect, device number 107 [ 982.975134][ T29] garmin_gps 5-1:8.206: device disconnected [ 984.935500][ T30] audit: type=1400 audit(1784128166.307:1747): avc: denied { read write } for pid=16083 comm="syz.0.2662" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 984.995978][ T30] audit: type=1400 audit(1784128166.307:1748): avc: denied { open } for pid=16083 comm="syz.0.2662" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 985.059633][ T30] audit: type=1326 audit(1784128166.377:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16084 comm="syz.2.2661" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc03f59de59 code=0x0 [ 985.253659][ T805] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 985.424574][ T805] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 985.447098][ T805] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 985.458557][ T805] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 985.469547][ T805] usb 4-1: config 0 interface 0 has no altsetting 0 [ 985.477408][ T805] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 985.487067][ T805] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 985.498241][ T805] usb 4-1: config 0 interface 0 has no altsetting 0 [ 985.506251][ T805] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 985.515505][ T805] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 985.526611][ T805] usb 4-1: config 0 interface 0 has no altsetting 0 [ 985.534630][ T805] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 985.545939][ T805] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 985.556836][ T805] usb 4-1: config 0 interface 0 has no altsetting 0 [ 985.564471][ T805] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 985.573465][ T805] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 985.584436][ T805] usb 4-1: config 0 interface 0 has no altsetting 0 [ 985.591873][ T805] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 985.600854][ T805] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 985.611730][ T805] usb 4-1: config 0 interface 0 has no altsetting 0 [ 985.619224][ T805] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 985.628602][ T805] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 985.639507][ T805] usb 4-1: config 0 interface 0 has no altsetting 0 [ 985.647095][ T805] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 985.656293][ T805] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 985.667234][ T805] usb 4-1: config 0 interface 0 has no altsetting 0 [ 985.675700][ T805] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 985.684767][ T805] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 985.693235][ T805] usb 4-1: Product: syz [ 985.697947][ T805] usb 4-1: Manufacturer: syz [ 985.702545][ T805] usb 4-1: SerialNumber: syz [ 985.709237][ T805] usb 4-1: config 0 descriptor?? [ 985.718965][ T805] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 985.837801][ T30] audit: type=1326 audit(1784128167.217:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16101 comm="syz.0.2666" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b46b9de59 code=0x7ffc0000 [ 985.870663][ T30] audit: type=1326 audit(1784128167.217:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16101 comm="syz.0.2666" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b46b9de59 code=0x7ffc0000 [ 985.900811][ T30] audit: type=1326 audit(1784128167.247:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16101 comm="syz.0.2666" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f5b46b9de59 code=0x7ffc0000 [ 985.928393][ T30] audit: type=1326 audit(1784128167.247:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16101 comm="syz.0.2666" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b46b9de59 code=0x7ffc0000 [ 985.956246][ T30] audit: type=1326 audit(1784128167.247:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16101 comm="syz.0.2666" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b46b9de59 code=0x7ffc0000 [ 986.081956][T16104] netlink: 'syz.0.2667': attribute type 10 has an invalid length. [ 986.125846][T16104] bridge0: port 3(syz_tun) entered disabled state [ 986.137183][T16104] syz_tun: left allmulticast mode [ 986.145858][T16104] bridge0: port 3(syz_tun) entered disabled state [ 986.168379][T16104] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 986.707820][T16122] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 986.720537][ T30] audit: type=1400 audit(1784128168.087:1755): avc: denied { shutdown } for pid=16118 comm="syz.0.2673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 987.454174][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.460566][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 988.795441][ T5840] usb 4-1: USB disconnect, device number 102 [ 988.811000][ T5840] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 989.442682][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 989.442699][ T30] audit: type=1400 audit(1784128170.817:1757): avc: denied { append } for pid=16144 comm="syz.3.2682" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 990.535620][ T805] usb 1-1: new low-speed USB device number 125 using dummy_hcd [ 990.703524][ T805] usb 1-1: device descriptor read/64, error -71 [ 991.055190][ T805] usb 1-1: new low-speed USB device number 126 using dummy_hcd [ 991.283760][ T805] usb 1-1: device descriptor read/64, error -71 [ 991.310933][T16179] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 991.422187][ T805] usb usb1-port1: attempt power cycle [ 992.175174][ T805] usb 1-1: new low-speed USB device number 127 using dummy_hcd [ 992.298040][T16191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2696'. [ 992.315324][ T805] usb 1-1: device descriptor read/8, error -71 [ 993.967133][ T30] audit: type=1400 audit(1784128175.347:1758): avc: denied { setopt } for pid=16199 comm="syz.0.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 996.096332][ T805] usb 3-1: new low-speed USB device number 120 using dummy_hcd [ 996.313562][ T805] usb 3-1: device descriptor read/64, error -71 [ 997.902996][ T805] usb 3-1: new low-speed USB device number 121 using dummy_hcd [ 998.253781][ T805] usb 3-1: device descriptor read/64, error -71 [ 998.498801][ T805] usb usb3-port1: attempt power cycle [ 1000.801810][T16293] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1002.310774][T16303] lo: entered allmulticast mode [ 1002.327872][T16303] tunl0: entered allmulticast mode [ 1002.345141][T16303] gre0: entered allmulticast mode [ 1002.460304][T16303] gretap0: entered allmulticast mode [ 1002.486783][T16303] erspan0: entered allmulticast mode [ 1002.567267][T16303] ip_vti0: entered allmulticast mode [ 1002.632610][T16303] ip6_vti0: entered allmulticast mode [ 1002.692996][T16303] sit0: entered allmulticast mode [ 1002.751931][T16303] ip6tnl0: entered allmulticast mode [ 1002.799599][T16303] ip6gre0: entered allmulticast mode [ 1002.867891][T16303] syz_tun: left promiscuous mode [ 1002.911135][T16303] syz_tun: entered allmulticast mode [ 1002.964081][T16303] bond0: (slave syz_tun): Releasing backup interface [ 1002.995476][T16303] ip6gretap0: entered allmulticast mode [ 1003.012183][T16303] bridge0: entered allmulticast mode [ 1003.036212][T16303] vcan0: entered allmulticast mode [ 1003.061362][T16303] bond0: entered allmulticast mode [ 1003.074413][T16303] bond_slave_0: entered allmulticast mode [ 1003.093121][T16303] bond_slave_1: entered allmulticast mode [ 1004.068394][T16303] team0: entered allmulticast mode [ 1004.099050][T16303] team_slave_0: entered allmulticast mode [ 1004.229716][T16303] team_slave_1: entered allmulticast mode [ 1004.238656][T16303] geneve1: entered allmulticast mode [ 1004.246522][T16303] dummy0: entered allmulticast mode [ 1004.265485][T16303] nlmon0: entered allmulticast mode [ 1004.274492][T16303] batadv0: entered allmulticast mode [ 1004.286696][T16303] vxcan0: entered allmulticast mode [ 1004.301280][T16303] vxcan1: entered allmulticast mode [ 1004.316667][T16303] veth0: entered allmulticast mode [ 1004.332932][T16303] veth1: entered allmulticast mode [ 1004.344334][T16303] wg0: entered allmulticast mode [ 1004.372011][T16303] wg1: entered allmulticast mode [ 1004.391292][T16303] wg2: entered allmulticast mode [ 1004.410067][T16303] veth0_to_bridge: entered allmulticast mode [ 1005.637925][T16303] bridge_slave_0: left promiscuous mode [ 1005.654972][T16303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.685298][T16303] veth1_to_bridge: entered allmulticast mode [ 1005.692501][T16303] bridge_slave_1: left promiscuous mode [ 1005.710648][T16303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.856356][T16303] veth0_to_bond: entered allmulticast mode [ 1005.880205][T16303] bond0: (slave bond_slave_0): Releasing backup interface [ 1005.901332][T16303] veth1_to_bond: entered allmulticast mode [ 1006.414951][T16303] bond0: (slave bond_slave_1): Releasing backup interface [ 1006.437640][T16303] veth0_to_team: entered allmulticast mode [ 1006.450830][T16303] team0: Port device team_slave_0 removed [ 1006.457946][T16303] veth1_to_team: entered allmulticast mode [ 1006.468370][T16303] team0: Port device team_slave_1 removed [ 1006.475662][T16303] veth0_to_batadv: entered allmulticast mode [ 1006.492736][T16303] batadv_slave_0: entered allmulticast mode [ 1006.504126][T16303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.511552][T16303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.525003][T16303] veth1_to_batadv: entered allmulticast mode [ 1006.531714][T16303] batadv_slave_1: entered allmulticast mode [ 1006.539375][T16303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.550620][T16303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.604426][T16303] xfrm0: entered allmulticast mode [ 1006.617031][T16303] veth0_to_hsr: entered allmulticast mode [ 1006.648043][T16303] hsr_slave_0: entered allmulticast mode [ 1006.715651][T16303] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1006.817407][ T805] lo speed is unknown, defaulting to 1000 [ 1007.884662][ T30] audit: type=1400 audit(1784128189.257:1759): avc: denied { accept } for pid=16363 comm="syz.3.2748" lport=53204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1007.956524][ T805] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1008.165667][ T805] usb 1-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 1008.201240][ T805] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1008.225421][ T805] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1008.241348][ T805] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1008.254994][T16371] overlayfs: failed to resolve './bus': -2 [ 1008.256126][ T805] usb 1-1: Product: syz [ 1008.267219][ T805] usb 1-1: Manufacturer: syz [ 1008.271886][ T805] usb 1-1: SerialNumber: syz [ 1008.286110][ T805] usb 1-1: config 0 descriptor?? [ 1008.296899][T16359] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1008.347117][T16375] kvm: vcpu 0: requested 16 ns lapic timer period limited to 200000 ns [ 1008.397891][ T805] usb 1-1: selecting invalid altsetting 0 [ 1008.629262][ T30] audit: type=1400 audit(1784128190.007:1760): avc: denied { read } for pid=16379 comm="syz.4.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1008.758671][ T30] audit: type=1400 audit(1784128190.087:1761): avc: denied { setopt } for pid=16379 comm="syz.4.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1009.527959][T16359] usb 1-1: BOGUS urb xfer, pipe 0 != type 3 [ 1010.583489][ T5840] usb 1-1: USB disconnect, device number 3 [ 1011.143954][ T30] audit: type=1400 audit(1784128192.497:1762): avc: denied { write } for pid=16409 comm="syz.0.2760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1011.428596][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'. [ 1011.451512][T16416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2761'. [ 1011.460697][T16416] netlink: 'syz.1.2761': attribute type 15 has an invalid length. [ 1011.477752][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 1011.486269][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'. [ 1011.496901][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 1011.500578][ T30] audit: type=1400 audit(1784128192.877:1763): avc: denied { map } for pid=16415 comm="syz.2.2762" path="socket:[56651]" dev="sockfs" ino=56651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1011.505870][T16416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2761'. [ 1011.549125][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 1011.561029][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 1011.579801][T16416] netlink: 'syz.1.2761': attribute type 15 has an invalid length. [ 1012.345563][T16431] [ 1012.347923][T16431] ============================================ [ 1012.354066][T16431] WARNING: possible recursive locking detected [ 1012.360200][T16431] syzkaller #0 Tainted: G L [ 1012.366158][T16431] -------------------------------------------- [ 1012.372283][T16431] syz.4.2766/16431 is trying to acquire lock: [ 1012.378322][T16431] ffffffff8fc4e3d0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 1012.388575][T16431] [ 1012.388575][T16431] but task is already holding lock: [ 1012.395914][T16431] ffffffff8fc4e3d0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 1012.406154][T16431] [ 1012.406154][T16431] other info that might help us debug this: [ 1012.414187][T16431] Possible unsafe locking scenario: [ 1012.414187][T16431] [ 1012.421610][T16431] CPU0 [ 1012.424902][T16431] ---- [ 1012.428178][T16431] lock(qp_broker_list.mutex); [ 1012.433007][T16431] lock(qp_broker_list.mutex); [ 1012.437836][T16431] [ 1012.437836][T16431] *** DEADLOCK *** [ 1012.437836][T16431] [ 1012.445954][T16431] May be due to missing lock nesting notation [ 1012.445954][T16431] [ 1012.454251][T16431] 1 lock held by syz.4.2766/16431: [ 1012.459338][T16431] #0: ffffffff8fc4e3d0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 1012.470017][T16431] [ 1012.470017][T16431] stack backtrace: [ 1012.475889][T16431] CPU: 1 UID: 0 PID: 16431 Comm: syz.4.2766 Tainted: G L syzkaller #0 PREEMPT(full) [ 1012.475913][T16431] Tainted: [L]=SOFTLOCKUP [ 1012.475919][T16431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1012.475929][T16431] Call Trace: [ 1012.475936][T16431] [ 1012.475943][T16431] dump_stack_lvl+0x100/0x190 [ 1012.475963][T16431] print_deadlock_bug.cold+0xbd/0xca [ 1012.475989][T16431] __lock_acquire+0x1256/0x1a40 [ 1012.476011][T16431] lock_acquire+0x1b9/0x370 [ 1012.476027][T16431] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 1012.476043][T16431] ? __pfx___might_resched+0x10/0x10 [ 1012.476059][T16431] ? kasan_save_stack+0x3f/0x50 [ 1012.476076][T16431] __mutex_lock+0x1a4/0x1bd0 [ 1012.476098][T16431] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 1012.476112][T16431] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 1012.476125][T16431] ? vmci_host_close+0x115/0x1a0 [ 1012.476144][T16431] ? __fput+0x3ff/0xb50 [ 1012.476158][T16431] ? task_work_run+0x150/0x240 [ 1012.476171][T16431] ? exit_to_user_mode_loop+0x1d8/0x6f0 [ 1012.476189][T16431] ? do_syscall_64+0x666/0x870 [ 1012.476210][T16431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.476225][T16431] ? __pfx___mutex_lock+0x10/0x10 [ 1012.476257][T16431] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 1012.476271][T16431] vmci_qp_broker_detach+0x14c/0x11e0 [ 1012.476286][T16431] ? kasan_quarantine_put+0x104/0x240 [ 1012.476300][T16431] ? lockdep_hardirqs_on+0x78/0x100 [ 1012.476320][T16431] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1012.476334][T16431] ? ctx_free_ctx+0x4a0/0xda0 [ 1012.476351][T16431] ? ctx_free_ctx+0x4bd/0xda0 [ 1012.476367][T16431] ? kfree+0x22b/0x6c0 [ 1012.476390][T16431] ctx_free_ctx+0x517/0xda0 [ 1012.476408][T16431] ? __pfx_ctx_free_ctx+0x10/0x10 [ 1012.476425][T16431] ? find_held_lock+0x2b/0x80 [ 1012.476445][T16431] ? vmci_ctx_enqueue_datagram+0x477/0x5f0 [ 1012.476461][T16431] ? vmci_ctx_enqueue_datagram+0x477/0x5f0 [ 1012.476479][T16431] vmci_ctx_enqueue_datagram+0x4be/0x5f0 [ 1012.476497][T16431] vmci_datagram_dispatch+0x3db/0xc60 [ 1012.476515][T16431] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 1012.476533][T16431] ? find_held_lock+0x2b/0x80 [ 1012.476552][T16431] ? vmci_qp_broker_detach+0xef9/0x11e0 [ 1012.476568][T16431] qp_notify_peer+0x1a6/0x230 [ 1012.476588][T16431] ? __pfx_qp_notify_peer+0x10/0x10 [ 1012.476609][T16431] ? vmci_ctx_qp_exists+0x65/0x170 [ 1012.476627][T16431] ? __pfx_vmci_ctx_qp_exists+0x10/0x10 [ 1012.476645][T16431] vmci_qp_broker_detach+0xa20/0x11e0 [ 1012.476661][T16431] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1012.476674][T16431] ? ctx_free_ctx+0x4a0/0xda0 [ 1012.476688][T16431] ? ctx_free_ctx+0x4bd/0xda0 [ 1012.476702][T16431] ? kfree+0x22b/0x6c0 [ 1012.476720][T16431] ? ctx_free_ctx+0x4b5/0xda0 [ 1012.476736][T16431] ctx_free_ctx+0x517/0xda0 [ 1012.476753][T16431] ? __pfx_ctx_free_ctx+0x10/0x10 [ 1012.476767][T16431] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1012.476793][T16431] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1012.476811][T16431] vmci_ctx_destroy+0x150/0x1c0 [ 1012.476826][T16431] vmci_host_close+0x115/0x1a0 [ 1012.476846][T16431] ? __pfx_vmci_host_close+0x10/0x10 [ 1012.476865][T16431] __fput+0x3ff/0xb50 [ 1012.476882][T16431] task_work_run+0x150/0x240 [ 1012.476896][T16431] ? __pfx_task_work_run+0x10/0x10 [ 1012.476912][T16431] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1012.476929][T16431] ? rcu_is_watching+0x12/0xc0 [ 1012.476949][T16431] do_syscall_64+0x666/0x870 [ 1012.476970][T16431] ? clear_bhb_loop+0x40/0x90 [ 1012.476986][T16431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.477000][T16431] RIP: 0033:0x7fbdb7b9de59 [ 1012.477014][T16431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.477028][T16431] RSP: 002b:00007fbdb89f2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1012.477043][T16431] RAX: 0000000000000000 RBX: 00007fbdb7e26090 RCX: 00007fbdb7b9de59 [ 1012.477053][T16431] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000006 [ 1012.477063][T16431] RBP: 00007fbdb7c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1012.477073][T16431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.477083][T16431] R13: 00007fbdb7e26128 R14: 00007fbdb7e26090 R15: 00007ffc655fe868 [ 1012.477098][T16431] [ 1012.967478][T16434] PM: Image not found (code -22) [ 1013.249368][T16438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2756'.