last executing test programs: 14.400449177s ago: executing program 1 (id=2670): r0 = socket(0x10, 0x1, 0xc000000) r1 = io_uring_setup(0x669, &(0x7f0000001080)={0x0, 0x80, 0x0, 0x0, 0x2}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001040)={'wpan0\x00'}) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'vxcan1\x00'}}, 0x1e) setresuid(0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket(0x11, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a310000000078000000030a01040000000000000000010000014c0008800c00014000000000000000000c0001400000000000007fff0c00014000000000000000060c00014000000000000000010c00014000000000000000000c00014000000000000000060c00024000000000000000010900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x8040}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000001100)={r0}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206cd0c91446a3d05000000000000000000050000000c00078008000800000000400900020073797a3200000000050004000000000000050001000600000011000300686173683a69702c6d61726b0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x80) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c38303231"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x0) 14.068535816s ago: executing program 1 (id=2673): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) openat$audio(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@remote, @in=@loopback, 0x4e23, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {0x1000000000000, 0xfc73, 0xffffffffffffffff, 0x1000000000001, 0x8, 0x1000, 0x7f, 0x4}, {0x4, 0x8, 0xdf95, 0x82}, 0x3, 0x6e6bc0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x33}, 0xa, @in6=@empty, 0x3506, 0x0, 0x0, 0xb, 0x3, 0xa58, 0x10000}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$vim2m(&(0x7f00000002c0), 0x7ff, 0x2) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) 10.65847963s ago: executing program 1 (id=2681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r4) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0105b08, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000001000040"]) 10.149682488s ago: executing program 0 (id=2686): r0 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x5710, 0x80}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x110, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[], 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r1}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYRESHEX=r1, @ANYRESDEC, @ANYBLOB="01000100"/20, @ANYRES32=r3, @ANYBLOB="7ff7119adafb82f7c42d3d337cfb5cfb615be7e1da3dd40a8e0d9c3b7c5d4cc1eb548edff4b3d2afa41bbe80e25e44b6a68f0d15026955931b398eb2d930e7d4caa3d174da47053f0cb11cfff45595d184e0f58fdbb8cc4bef2349033a9f10a77940d5b17b68a1eebdf2a91cc99c541808d33037096a215851d953456639ad5c3db603553782466b5e74b28ee87a21e876017ca838d1ecd800367b1501bfdef60a1077d34cf8c6f988cf547b170f6ef8f01149086b30216a137790314736fe19c05e0acb222f2136e6", @ANYBLOB="04000000010000000200"/24, @ANYRES32=r4, @ANYBLOB="1f3b933364227fe471100670fcb6320e65cc558952f192387bef683ee3d825bf52dbb5ac25aea47acc13e80e9d12b4c973275d71f5a34697e5bc685a149fd0fcabbdb902cefa9ed1ae8cf982e35ab0a33a0c353bd33937040d83452a0efde28074a648745f36fea7dcf1f38bfe65aad457760ba6b0"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaa00000000000886dd684b3813e2a69e7a488cc300282901fe8000000000000000ff020000000000000000ac000000000c0220c53c3f58b562ec28bf6593d32e44221b2e45a61804272e23415ce8aa00000000000000"], 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r2], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) ppoll(&(0x7f0000000340)=[{r5, 0x4000}, {0xffffffffffffffff, 0x2640}, {r0, 0x4300}], 0x3, &(0x7f0000000380), &(0x7f00000003c0)={[0x1]}, 0x8) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='ac,,']) 8.960423675s ago: executing program 0 (id=2688): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r2 = io_uring_setup(0x6ee0, &(0x7f0000000000)={0x0, 0x43d2, 0x8, 0x3, 0x20}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000005b40)=ANY=[@ANYRES64=r2, @ANYRES16, @ANYRES64=r2, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="a9d414f68e2cc86bf3316e1d69a692b0b3503203b53d6ba4985cd280a2505326954b7d7d8d5f307932e8b6694aafea443d4f5b8d5ee1d00d0be052581e59b21c57b03c8adaf3c0597afef63a779aa656e60034a26bc14e2c293c4c3c22697161faddaf3d5605d1ca244989cd946efb9ce6e3795a5b7e3c7159f77c1e7ebfdfb3581ea28cca53f4786cdbba766146ed00b9cbc1a04d76117f858aeec3e0ba0767c65dbeb4e94c526021019c63280c276a91407a59b7d264effcc826b5ce7cdf52e273e2b73b988c45ac3bb567aba98ae765241986f1b78723839817d1090982914e39", @ANYRESOCT=r0, @ANYRESDEC, @ANYBLOB="09792333f2e100fa4abbf3fcc88845ffa3b24c171595019f0b7feaeb851964722370e05a83a1840f915e8015191ffc"], 0xff2e) 8.683933996s ago: executing program 0 (id=2690): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="3d0000000700000000020000ff07000060220000", @ANYRES32=0x1, @ANYBLOB="3d08000125a4", @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000040)="c0", 0x1, 0x0, &(0x7f0000000a80)={0x11, 0x2, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) timer_create(0xb, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) 7.2951718s ago: executing program 0 (id=2692): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) io_setup(0x6, &(0x7f0000001380)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@remote, @in=@loopback, 0x4e23, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {0x1000000000000, 0xfc73, 0xffffffffffffffff, 0x1000000000001, 0x8, 0x1000, 0x7f, 0x4}, {0x4, 0x8, 0xdf95, 0x82}, 0x3, 0x6e6bc0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x33}, 0xa, @in6=@empty, 0x3506, 0x0, 0x0, 0xb, 0x3, 0xa58, 0x10000}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$vim2m(&(0x7f00000002c0), 0x7ff, 0x2) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) 6.495295523s ago: executing program 3 (id=2694): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$kcm(0x23, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000340)={0xfffffffe}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x10, 0x100}}}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 6.475089239s ago: executing program 4 (id=2695): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000001500)) splice(0xffffffffffffffff, &(0x7f00000006c0)=0x8, r0, &(0x7f0000001dc0)=0x95, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003f80)=[{{&(0x7f0000000340)=@rc, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/35, 0x23}, {&(0x7f0000000400)=""/148, 0x94}, {&(0x7f00000004c0)=""/33, 0x21}], 0x3}, 0xc}, {{&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/138, 0x8a}, {&(0x7f0000004240)=""/171, 0xab}, {&(0x7f0000000740)=""/211, 0xd3}, {&(0x7f0000000840)=""/224, 0xe0}], 0x4, &(0x7f0000000980)=""/170, 0xaa}, 0x200}, {{&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000ac0)=""/73, 0x49}, {&(0x7f0000000b40)=""/3, 0x3}, {&(0x7f0000000b80)=""/244, 0xf4}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/121, 0x79}, {&(0x7f0000001d00)=""/29, 0x1d}], 0x6, &(0x7f0000000680)=""/62, 0x3e}, 0x200}, {{&(0x7f0000001e40)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001ec0)=""/154, 0x9a}, {0x0}, {&(0x7f0000002100)=""/15, 0xf}], 0x3, &(0x7f0000002180)=""/26, 0x1a}, 0x7}, {{&(0x7f0000002540)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002680)=[{0x0}, {&(0x7f0000002640)=""/33, 0x21}], 0x2}, 0x3}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000039c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000003c80), 0x0, &(0x7f0000003cc0)=""/24, 0x18}, 0xcadb}, {{&(0x7f00000041c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000003f40)=[{0x0}, {&(0x7f0000003e40)=""/34, 0x22}, {&(0x7f0000003e80)=""/101, 0x65}, {&(0x7f0000003f00)=""/2, 0x2}], 0x4}, 0xffffffc0}], 0x8, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) 6.299195389s ago: executing program 4 (id=2696): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$inet(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x400, 0x0, 0xffffffffffffffff, 0x0, 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140"], 0x122}}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x50, r3, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000000)={'veth0_vlan\x00', {0x2, 0x4e23, @multicast1}}) socket$inet_smc(0x2b, 0x1, 0x0) 6.232503319s ago: executing program 3 (id=2697): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) fallocate(r3, 0x3, 0x4, 0x101000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10) 6.201354969s ago: executing program 2 (id=2698): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r6, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000000)={@broadcast, @empty, @void, {@llc={0x4, {@snap={0x0, 0x0, "e3", "ff782c"}}}}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 6.140225299s ago: executing program 4 (id=2699): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x2, 0x2, 0x288}, &(0x7f0000001140)=0x0, &(0x7f0000000140)=0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000002ff7120c40911001cb00102030109022400010004100009047e100226d5180809050602ff0300000009d82c27eab6a310cf02bcdc7746d755e86d538e332043fc5b2aac0ad4f10f8aaadb9cf7ade70199ccb371d6fd6644d44c"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f00000007c0)={0x14, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r3, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r3, &(0x7f0000000100)={0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="40150c0000000c07000000ec204f00000084b86e52af495c4dcf23430ea8f542cd43c6bd75f763621ff088edf5b12bfadbdaf9137c3ad103f0582e1958198ce4c386afbcff07546a38f13b7796eb1d4b67482658b862f953dbadabfada518416a183a28adfa89e"], 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r4, &(0x7f0000000300)={&(0x7f0000000800), 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x1, 0x0, 0x0, "2000000d000000f0"}, 0x10}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usbip_server_init(0x1) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)={0x48, 0x0, 0x1, 0x401, 0xd, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8045}, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x4, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r7, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r7, @ANYRES8=r7, @ANYRESHEX=r7], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x44014) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) fcntl$notify(r6, 0x402, 0x10) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r11, @ANYBLOB="010000"], 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendto$inet6(r9, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) 6.00758315s ago: executing program 1 (id=2700): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r2 = io_uring_setup(0x6ee0, &(0x7f0000000000)={0x0, 0x43d2, 0x8, 0x3, 0x20}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000005b40)=ANY=[@ANYRES64=r2, @ANYRES16, @ANYRES64=r2, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="a9d414f68e2cc86bf3316e1d69a692b0b3503203b53d6ba4985cd280a2505326954b7d7d8d5f307932e8b6694aafea443d4f5b8d5ee1d00d0be052581e59b21c57b03c8adaf3c0597afef63a779aa656e60034a26bc14e2c293c4c3c22697161faddaf3d5605d1ca244989cd946efb9ce6e3795a5b7e3c7159f77c1e7ebfdfb3581ea28cca53f4786cdbba766146ed00b9cbc1a04d76117f858aeec3e0ba0767c65dbeb4e94c526021019c63280c276a91407a59b7d264effcc826b5ce7cdf52e273e2b73b988c45ac3bb567aba98ae765241986f1b78723839817d1090982914e39", @ANYRESOCT=r0, @ANYRESDEC, @ANYBLOB="09792333f2e100fa4abbf3fcc88845ffa3b24c171595019f0b7feaeb851964722370e05a83a1840f915e8015191ffc"], 0xff2e) 5.888018913s ago: executing program 2 (id=2701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d0000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x9) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000440)=0x3, 0x7) r5 = fsopen(&(0x7f00000001c0)='nilfs2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) 5.629887547s ago: executing program 1 (id=2702): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002080)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x20004800) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, 0x0, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r4, 0x0, 0x0, 0x1001f0) fallocate(r4, 0x3, 0x4, 0x101000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10) 4.946893078s ago: executing program 2 (id=2703): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x4, 0x101000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 4.891936027s ago: executing program 0 (id=2704): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 4.368046266s ago: executing program 0 (id=2705): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f00000000c0), 0x4) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x123000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() (fail_nth: 1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.032449369s ago: executing program 3 (id=2706): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000001500)) splice(0xffffffffffffffff, &(0x7f00000006c0)=0x8, r0, &(0x7f0000001dc0)=0x95, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003f80)=[{{&(0x7f0000000340)=@rc, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/35, 0x23}, {&(0x7f0000000400)=""/148, 0x94}, {&(0x7f00000004c0)=""/33, 0x21}], 0x3}, 0xc}, {{&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/138, 0x8a}, {&(0x7f0000004240)=""/171, 0xab}, {&(0x7f0000000740)=""/211, 0xd3}, {&(0x7f0000000840)=""/224, 0xe0}], 0x4, &(0x7f0000000980)=""/170, 0xaa}, 0x200}, {{&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000ac0)=""/73, 0x49}, {&(0x7f0000000b40)=""/3, 0x3}, {&(0x7f0000000b80)=""/244, 0xf4}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/121, 0x79}, {&(0x7f0000001d00)=""/29, 0x1d}], 0x6, &(0x7f0000000680)=""/62, 0x3e}, 0x200}, {{&(0x7f0000001e40)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001ec0)=""/154, 0x9a}, {0x0}, {0x0}, {&(0x7f0000002100)=""/15, 0xf}], 0x4, &(0x7f0000002180)=""/26, 0x1a}, 0x7}, {{&(0x7f0000002540)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002680)=[{0x0}, {&(0x7f0000002640)=""/33, 0x21}], 0x2}, 0x3}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000039c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000003c80), 0x0, &(0x7f0000003cc0)=""/24, 0x18}, 0xcadb}, {{&(0x7f00000041c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000003f40)=[{0x0}, {&(0x7f0000003e40)=""/34, 0x22}, {&(0x7f0000003e80)=""/101, 0x65}, {&(0x7f0000003f00)=""/2, 0x2}], 0x4}, 0xffffffc0}], 0x8, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) 2.807634297s ago: executing program 3 (id=2707): write$sysctl(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000000280)=0xe8) write$P9_RSTATu(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=r3], 0x5b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000200)={0x11, 0x8808, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$media(0x0, 0x9, 0x2) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001a00010000000000000000000a00000000000000000000001400020000"], 0x44}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r8) 2.365239659s ago: executing program 1 (id=2708): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) fallocate(r3, 0x3, 0x4, 0x101000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10) 2.305306387s ago: executing program 3 (id=2709): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000300)={0x0, 0x0, 0x13580, 0x2, 0x83}, 0x0, 0x0) io_uring_enter(r1, 0x6b4d, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000040)={0x14, &(0x7f0000000440)={0x0, 0x7, 0x99, {0x99, 0x5, "9f6118d71dc03b0542462bd56dac1f7a69b52dff3ab54da7025c0ad651d0e27538d7836415d177c2686d727d653fbf106b65deb4114cd505c6827b315befbaaedfa011c6c80c2f9942906ec8ab7a896576bc55d605614e80d8b593e7417856d124576a67f3235cdfdd37f5ea3ec54f29bb7b74e6d1d0b6da04afa76b3f3f23dd80c190eaa93fcc7bd80151877340513d6ff086bb9e47d2"}}, &(0x7f0000000500)={0x0, 0x3, 0xbb, @string={0xbb, 0x3, "980d8774715bbe5f199042efa16790bfb8b5a82ed0c2283fcc877ec297a56051155a868d10587b13295d9c32a81cbb17f1ea8b945de543133b3661d57e5f09ea915d85f32b5d6ea75371e56e329c1ea571b52d156162b53d68bd1446654e570945cbc7ee1703137692038e35926da82145fc632dad1453bf0b331e00bc51fcc0d7f6b89507e0babaf25269d943b4a019f3850fda33a6183168b4db422e193f5dcd420952d87fe9599bbbc6df1c45516f89cc5ce2f115b72f33"}}}, &(0x7f0000000740)={0x44, &(0x7f0000000600)={0x40, 0x15, 0x88, "20de5002793949d898e09787f499c3ef53558bf460896d35a69eabf89235c0dfb18704e5fda5349ede90f0a43495322241af4022ee05fd00151da6b861b54e50182027b9ea3437e67d4d38952590e41a2a027ed5a245ec7bcf9c238e9bd02e5b90e3ee11e45329b5cec6ea9d33ebbfcd0d2e3317dc80996742522173f29646c21e24d13cc64adbac"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xbf}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000002c0)={0x20, 0x81, 0x2, ' a'}, &(0x7f0000000380)={0x20, 0x82, 0x3, "d5e72a"}, &(0x7f00000003c0)={0x20, 0x83, 0x1, "c8"}, &(0x7f00000006c0)={0x20, 0x84, 0x2, 'Bo'}, &(0x7f0000000700)={0x20, 0x85, 0x3, "494699"}}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) 2.000456892s ago: executing program 4 (id=2710): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@mpls_getroute={0x24, 0x1a, 0x9, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x1d4ce113}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {0xc64}, {}, {}, {}, {}, {}, {0x400000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3da}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x4000) 1.55418317s ago: executing program 2 (id=2711): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000012000101000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001f"], 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x72, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x3c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x4, {[@nop, @sack={0x5, 0x2}, @timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x6, 0xf989, "e6ff"}, @window={0x3, 0xffffffffffffff40, 0x8}, @nop, @nop, @fastopen={0x22, 0xd, '\x00'/11}]}}}}}}}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT, @ANYRES16=r4, @ANYRESHEX=r1], 0x24}}, 0x0) recvmmsg$unix(r4, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000001580)=""/173, 0xad}, {&(0x7f0000002780)=""/194, 0xc2}, {&(0x7f0000002880)=""/252, 0xfc}, {&(0x7f00000001c0)=""/110, 0x6e}], 0x7}}], 0x1, 0x40010122, 0x0) write(r4, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r5 = getpid() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00000f5000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8010, r3, 0x53b3e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x403, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adf9a5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast1}]}}}]}, 0x3c}}, 0x2000c0c4) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000003c0), 0x100000001, 0x2) 1.405268424s ago: executing program 4 (id=2712): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r2 = io_uring_setup(0x6ee0, &(0x7f0000000000)={0x0, 0x43d2, 0x8, 0x3, 0x20}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000005b40)=ANY=[@ANYRES64=r2, @ANYRES16, @ANYRES64=r2, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="a9d414f68e2cc86bf3316e1d69a692b0b3503203b53d6ba4985cd280a2505326954b7d7d8d5f307932e8b6694aafea443d4f5b8d5ee1d00d0be052581e59b21c57b03c8adaf3c0597afef63a779aa656e60034a26bc14e2c293c4c3c22697161faddaf3d5605d1ca244989cd946efb9ce6e3795a5b7e3c7159f77c1e7ebfdfb3581ea28cca53f4786cdbba766146ed00b9cbc1a04d76117f858aeec3e0ba0767c65dbeb4e94c526021019c63280c276a91407a59b7d264effcc826b5ce7cdf52e273e2b73b988c45ac3bb567aba98ae765241986f1b78723839817d1090982914e39", @ANYRESOCT=r0, @ANYRESDEC, @ANYBLOB="09792333f2e100fa4abbf3fcc88845ffa3b24c171595019f0b7feaeb851964722370e05a83a1840f915e8015191ffc"], 0xff2e) 1.220596031s ago: executing program 2 (id=2713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d0000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x9) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000440)=0x3, 0x7) r5 = fsopen(&(0x7f00000001c0)='nilfs2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) 417.897828ms ago: executing program 3 (id=2714): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) io_setup(0x6, &(0x7f0000001380)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@remote, @in=@loopback, 0x4e23, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {0x1000000000000, 0xfc73, 0xffffffffffffffff, 0x1000000000001, 0x8, 0x1000, 0x7f, 0x4}, {0x4, 0x8, 0xdf95, 0x82}, 0x3, 0x6e6bc0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x33}, 0xa, @in6=@empty, 0x3506, 0x0, 0x0, 0xb, 0x3, 0xa58, 0x10000}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$vim2m(&(0x7f00000002c0), 0x7ff, 0x2) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) 228.825733ms ago: executing program 2 (id=2715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x1, 0x0, 0x8, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 0s ago: executing program 4 (id=2716): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x1, 0x103, 0xd}, 0x20) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x48, r4, 0x2, 0x0, 0x4, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x48}, 0x4, 0x700000000000000}, 0x0) getpgid(r1) kernel console output (not intermixed with test programs): [ 761.452174][ T5898] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 761.474528][ T30] audit: type=1400 audit(1746064608.220:3974): avc: denied { recv } for pid=14886 comm="modprobe" saddr=10.128.0.169 src=30006 daddr=10.128.10.32 dest=42664 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 761.695079][ T5891] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 761.836466][ T30] audit: type=1400 audit(1746064608.310:3975): avc: denied { create } for pid=14878 comm="syz.0.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 761.923547][ T5898] usb 4-1: USB disconnect, device number 95 [ 761.932536][ T30] audit: type=1400 audit(1746064608.320:3976): avc: denied { setopt } for pid=14878 comm="syz.0.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 761.955190][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 761.996008][ T30] audit: type=1400 audit(1746064608.320:3977): avc: denied { write } for pid=14878 comm="syz.0.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 762.023726][ T30] audit: type=1400 audit(1746064608.320:3978): avc: denied { read } for pid=14878 comm="syz.0.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 762.041644][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.055435][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 762.066328][ T5891] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 762.075683][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.083709][ T5891] usb 5-1: Product: syz [ 762.087985][ T5891] usb 5-1: Manufacturer: syz [ 762.092611][ T5891] usb 5-1: SerialNumber: syz [ 762.100127][ T5891] usb 5-1: config 0 descriptor?? [ 762.108551][ T5891] hub 5-1:0.0: bad descriptor, ignoring hub [ 762.114558][ T5891] hub 5-1:0.0: probe with driver hub failed with error -5 [ 762.145115][ T30] audit: type=1400 audit(1746064608.350:3979): avc: denied { name_bind } for pid=14878 comm="syz.0.2411" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 762.218677][ T30] audit: type=1400 audit(1746064608.350:3980): avc: denied { node_bind } for pid=14878 comm="syz.0.2411" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 762.245126][ T5860] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 762.258273][ T5891] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 762.295375][ T8357] usb 5-1: Failed to submit usb control message: -71 [ 762.302724][ T8357] usb 5-1: unable to send the bmi data to the device: -71 [ 762.325294][ T30] audit: type=1400 audit(1746064608.490:3981): avc: denied { ioctl } for pid=14882 comm="syz.4.2413" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 762.371866][ T8357] usb 5-1: unable to get target info from device [ 762.378521][ T8357] usb 5-1: could not get target info (-71) [ 762.384368][ T8357] usb 5-1: could not probe fw (-71) [ 762.402121][ T30] audit: type=1400 audit(1746064608.730:3982): avc: denied { read write } for pid=14890 comm="syz.1.2414" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 762.496603][ T5860] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 762.513361][ T5860] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 762.610486][T14905] fuse: Bad value for 'fd' [ 763.569559][ T5860] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 763.578772][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.858546][ T5860] usb 2-1: usb_control_msg returned -32 [ 763.870030][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 763.870054][ T30] audit: type=1400 audit(1746064610.620:4010): avc: denied { egress } for pid=14897 comm="syz.0.2417" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 764.350637][ T5860] usbtmc 2-1:16.0: can't read capabilities [ 764.535275][ T5899] usb 5-1: USB disconnect, device number 97 [ 764.560683][ T30] audit: type=1400 audit(1746064610.620:4011): avc: denied { sendto } for pid=14897 comm="syz.0.2417" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 764.584119][ T5891] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 764.644496][ T30] audit: type=1400 audit(1746064611.160:4012): avc: denied { write } for pid=14910 comm="syz.2.2420" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 764.670028][ T30] audit: type=1400 audit(1746064611.170:4013): avc: denied { open } for pid=14910 comm="syz.2.2420" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 764.867532][ T5891] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 764.881829][ T5891] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 764.899911][ T5891] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 764.957209][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.004906][T14921] fuse: Bad value for 'fd' [ 765.756408][ T5860] usb 2-1: USB disconnect, device number 21 [ 765.881666][ T30] audit: type=1400 audit(1746064612.620:4014): avc: denied { setopt } for pid=14918 comm="syz.4.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 765.922797][ T30] audit: type=1400 audit(1746064612.620:4015): avc: denied { bind } for pid=14918 comm="syz.4.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 765.952314][ T5891] usb 4-1: usb_control_msg returned -32 [ 765.961466][ T5891] usbtmc 4-1:16.0: can't read capabilities [ 766.067572][ T30] audit: type=1400 audit(1746064612.620:4016): avc: denied { name_bind } for pid=14918 comm="syz.4.2422" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 766.090240][ T30] audit: type=1400 audit(1746064612.620:4017): avc: denied { node_bind } for pid=14918 comm="syz.4.2422" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 766.732170][T14935] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2419'. [ 766.742236][T14935] netlink: zone id is out of range [ 766.747866][T14935] netlink: get zone limit has 8 unknown bytes [ 766.769112][ T30] audit: type=1400 audit(1746064612.700:4018): avc: denied { create } for pid=14928 comm="syz.0.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 766.991259][ T30] audit: type=1400 audit(1746064612.720:4019): avc: denied { read } for pid=14908 comm="syz.3.2419" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 768.274025][ T5891] usb 4-1: USB disconnect, device number 96 [ 769.278721][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 769.278750][ T30] audit: type=1400 audit(1746064616.020:4035): avc: denied { ioctl } for pid=14954 comm="syz.2.2430" path="socket:[43667]" dev="sockfs" ino=43667 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 769.435278][T14957] sp0: Synchronizing with TNC [ 769.529523][ T30] audit: type=1400 audit(1746064616.030:4036): avc: denied { create } for pid=14954 comm="syz.2.2430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 769.562256][ T30] audit: type=1400 audit(1746064616.030:4037): avc: denied { module_request } for pid=14954 comm="syz.2.2430" kmod="net-pf-10-proto-132-type-4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 769.794675][T14967] fuse: Bad value for 'fd' [ 770.304977][ T5899] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 770.325273][T14967] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 770.425808][ T5891] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 770.594988][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 771.425204][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.436197][ T5899] usb 3-1: config 0 interface 0 has no altsetting 0 [ 771.453603][ T30] audit: type=1400 audit(1746064618.160:4038): avc: denied { read } for pid=14980 comm="syz.1.2435" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 771.965192][ T5899] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 771.974553][ T30] audit: type=1400 audit(1746064618.200:4039): avc: denied { open } for pid=14980 comm="syz.1.2435" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 771.998058][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.006628][ T5899] usb 3-1: Product: syz [ 772.011146][ T5899] usb 3-1: Manufacturer: syz [ 772.018351][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 772.037038][ T5899] usb 3-1: SerialNumber: syz [ 772.042806][ T30] audit: type=1400 audit(1746064618.200:4040): avc: denied { ioctl } for pid=14980 comm="syz.1.2435" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 772.080279][ T5891] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 772.089744][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.126217][ T5899] usb 3-1: config 0 descriptor?? [ 772.132455][ T5891] usb 4-1: config 0 descriptor?? [ 772.139102][ T5899] hub 3-1:0.0: bad descriptor, ignoring hub [ 772.155171][ T5899] hub 3-1:0.0: probe with driver hub failed with error -5 [ 772.165303][ T5891] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 772.181367][ T5899] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 772.411535][ T1151] usb 3-1: Failed to submit usb control message: -71 [ 773.134901][T14955] [U] è [ 773.141679][ T1151] usb 3-1: unable to send the bmi data to the device: -71 [ 773.159683][ T1151] usb 3-1: unable to get target info from device [ 773.168145][ T1151] usb 3-1: could not get target info (-71) [ 773.177265][ T1151] usb 3-1: could not probe fw (-71) [ 773.304912][ T5899] usb 3-1: USB disconnect, device number 107 [ 773.399274][ T30] audit: type=1400 audit(1746064620.150:4041): avc: denied { read write } for pid=14996 comm="syz.4.2439" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 773.453809][ T30] audit: type=1400 audit(1746064620.170:4042): avc: denied { open } for pid=14996 comm="syz.4.2439" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 773.463599][ T5860] usb 4-1: USB disconnect, device number 97 [ 773.528408][ T30] audit: type=1400 audit(1746064620.240:4044): avc: denied { module_request } for pid=14997 comm="syz.1.2440" kmod="net-pf-10-proto-132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 773.612692][ T30] audit: type=1400 audit(1746064620.240:4043): avc: denied { recv } for pid=5898 comm="kworker/1:8" saddr=10.128.0.169 src=30006 daddr=10.128.10.32 dest=42664 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 773.694962][T13249] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 773.745116][ T5899] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 773.775256][ T5858] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 773.962050][T13249] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 774.017706][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 774.055179][T13249] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 774.092490][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.104238][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 774.158101][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.171693][ T5858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.182022][T13249] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 774.185396][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2441'. [ 774.195022][ T5858] usb 2-1: config 0 interface 0 has no altsetting 0 [ 774.207518][T13249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.215651][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 774.230298][ T5899] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 774.242986][ T5858] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 774.253388][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.261636][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.270320][ T5858] usb 2-1: Product: syz [ 774.274577][ T5858] usb 2-1: Manufacturer: syz [ 774.280968][ T5858] usb 2-1: SerialNumber: syz [ 774.286672][ T5899] usb 3-1: config 0 descriptor?? [ 774.299430][ T5858] usb 2-1: config 0 descriptor?? [ 774.307218][ T5858] hub 2-1:0.0: bad descriptor, ignoring hub [ 774.313284][ T5858] hub 2-1:0.0: probe with driver hub failed with error -5 [ 774.338799][ T5858] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 774.354368][ T12] usb 2-1: Failed to submit usb control message: -71 [ 774.361975][ T12] usb 2-1: unable to send the bmi data to the device: -71 [ 774.369306][ T12] usb 2-1: unable to get target info from device [ 774.378784][ T12] usb 2-1: could not get target info (-71) [ 774.384878][ T12] usb 2-1: could not probe fw (-71) [ 774.455079][T13249] usb 5-1: usb_control_msg returned -32 [ 774.465028][T13249] usbtmc 5-1:16.0: can't read capabilities [ 774.516241][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 774.516268][ T30] audit: type=1400 audit(1746064621.270:4069): avc: denied { write } for pid=14994 comm="syz.2.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 774.726787][ T30] audit: type=1326 audit(1746064621.440:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14997 comm="syz.1.2440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f417f38e969 code=0x0 [ 774.756652][ T5899] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0035/input/input109 [ 774.799495][ T5860] usb 2-1: USB disconnect, device number 22 [ 774.816793][ T30] audit: type=1400 audit(1746064621.520:4071): avc: denied { read } for pid=5168 comm="acpid" name="mouse1" dev="devtmpfs" ino=3825 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 775.283866][ T5899] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0035/input/input110 [ 775.309613][T13249] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 775.492562][ T30] audit: type=1400 audit(1746064621.520:4072): avc: denied { open } for pid=5168 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3825 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 775.558922][ T5899] kye 0003:0458:5011.0035: input,hiddev1,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 775.580178][T13249] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 775.585314][ T30] audit: type=1400 audit(1746064621.570:4073): avc: denied { read } for pid=14996 comm="syz.4.2439" dev="nsfs" ino=4026533134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 775.630425][T13249] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 775.652947][ T30] audit: type=1400 audit(1746064621.570:4074): avc: denied { open } for pid=14996 comm="syz.4.2439" path="net:[4026533134]" dev="nsfs" ino=4026533134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 775.675253][ T5899] usb 3-1: USB disconnect, device number 108 [ 775.676602][ T30] audit: type=1400 audit(1746064621.850:4075): avc: denied { create } for pid=15018 comm="syz.3.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 775.713889][T13249] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 775.726292][T13249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.752060][ T30] audit: type=1400 audit(1746064621.850:4076): avc: denied { setopt } for pid=15018 comm="syz.3.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 775.810180][ T30] audit: type=1400 audit(1746064621.850:4077): avc: denied { write } for pid=15018 comm="syz.3.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 775.832727][ T30] audit: type=1400 audit(1746064621.850:4078): avc: denied { read } for pid=15018 comm="syz.3.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 776.199975][T13249] usb 1-1: usb_control_msg returned -32 [ 776.273148][T13249] usbtmc 1-1:16.0: can't read capabilities [ 776.613218][T13249] usb 5-1: USB disconnect, device number 98 [ 776.936474][T15041] ref_ctr_offset mismatch. inode: 0x9f7 offset: 0x0 ref_ctr_offset(old): 0xffff00 ref_ctr_offset(new): 0x0 [ 777.481810][T15041] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2445'. [ 777.554954][T13249] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 777.763547][T13249] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 777.768814][T15059] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 777.912674][T13249] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 778.011396][T15059] bond2: entered promiscuous mode [ 778.019343][T13249] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 778.094098][T13249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.211134][ T5860] usb 1-1: USB disconnect, device number 110 [ 778.401076][T13249] usb 3-1: usb_control_msg returned -32 [ 778.901068][T13249] usbtmc 3-1:16.0: can't read capabilities [ 779.545114][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 779.545151][ T30] audit: type=1400 audit(1746064626.190:4115): avc: denied { create } for pid=15076 comm="syz.1.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 779.933789][T15082] 9pnet_fd: Insufficient options for proto=fd [ 779.952163][T13249] usb 3-1: USB disconnect, device number 109 [ 780.008034][ T30] audit: type=1400 audit(1746064626.670:4116): avc: denied { create } for pid=15076 comm="syz.1.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 780.996827][ T30] audit: type=1400 audit(1746064626.680:4117): avc: denied { mounton } for pid=15079 comm="syz.3.2458" path="/474/file0" dev="tmpfs" ino=2563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 781.027143][ T30] audit: type=1400 audit(1746064627.040:4118): avc: denied { listen } for pid=15073 comm="syz.4.2456" lport=53489 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 781.263394][ T30] audit: type=1400 audit(1746064627.040:4119): avc: denied { accept } for pid=15073 comm="syz.4.2456" lport=53489 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 781.440148][T15094] fuse: Bad value for 'fd' [ 781.757473][ T30] audit: type=1400 audit(1746064627.050:4120): avc: denied { getopt } for pid=15073 comm="syz.4.2456" lport=53489 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 781.783451][ T30] audit: type=1400 audit(1746064627.050:4121): avc: denied { bind } for pid=15073 comm="syz.4.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 781.823986][ T30] audit: type=1400 audit(1746064628.120:4122): avc: denied { execute_no_trans } for pid=15088 comm="syz.3.2459" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 781.897277][ T30] audit: type=1400 audit(1746064628.650:4123): avc: denied { create } for pid=15091 comm="syz.0.2460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 781.899069][T15097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2460'. [ 782.311797][ T30] audit: type=1400 audit(1746064628.980:4124): avc: denied { ioctl } for pid=15091 comm="syz.0.2460" path="socket:[43986]" dev="sockfs" ino=43986 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 783.648401][T15110] overlayfs: failed to resolve './file1': -2 [ 784.422152][T15127] 9pnet_fd: Insufficient options for proto=fd [ 784.450199][T15122] sp0: Synchronizing with TNC [ 784.588461][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 784.588482][ T30] audit: type=1400 audit(1746064631.340:4152): avc: denied { map_create } for pid=15131 comm="syz.3.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 784.676629][T15133] FAULT_INJECTION: forcing a failure. [ 784.676629][T15133] name failslab, interval 1, probability 0, space 0, times 0 [ 784.689563][T15133] CPU: 1 UID: 0 PID: 15133 Comm: syz.2.2468 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 784.689595][T15133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 784.689605][T15133] Call Trace: [ 784.689616][T15133] [ 784.689625][T15133] dump_stack_lvl+0x16c/0x1f0 [ 784.689661][T15133] should_fail_ex+0x512/0x640 [ 784.689689][T15133] ? fs_reclaim_acquire+0xae/0x150 [ 784.689716][T15133] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 784.689744][T15133] should_failslab+0xc2/0x120 [ 784.689765][T15133] __kmalloc_noprof+0xd2/0x510 [ 784.689802][T15133] tomoyo_realpath_from_path+0xc2/0x6e0 [ 784.689830][T15133] ? tomoyo_fill_path_info+0x233/0x420 [ 784.689861][T15133] tomoyo_mount_acl+0x1ae/0x850 [ 784.689886][T15133] ? finish_task_switch.isra.0+0x21c/0xc10 [ 784.689913][T15133] ? rcu_is_watching+0x12/0xc0 [ 784.689936][T15133] ? finish_task_switch.isra.0+0x221/0xc10 [ 784.689959][T15133] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 784.689980][T15133] ? finish_task_switch.isra.0+0x221/0xc10 [ 784.690036][T15133] ? tomoyo_domain+0xbb/0x150 [ 784.690052][T15133] ? tomoyo_profile+0x47/0x60 [ 784.690083][T15133] tomoyo_mount_permission+0x16d/0x420 [ 784.690105][T15133] ? tomoyo_mount_permission+0x14f/0x420 [ 784.690129][T15133] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 784.690151][T15133] ? lockdep_hardirqs_on+0x7c/0x110 [ 784.690190][T15133] security_sb_mount+0x9b/0x260 [ 784.690217][T15133] path_mount+0x128/0x1f20 [ 784.690240][T15133] ? kmem_cache_free+0x2d4/0x4d0 [ 784.690266][T15133] ? __pfx_path_mount+0x10/0x10 [ 784.690288][T15133] ? putname+0x154/0x1a0 [ 784.690313][T15133] __x64_sys_mount+0x28d/0x310 [ 784.690333][T15133] ? __pfx___x64_sys_mount+0x10/0x10 [ 784.690361][T15133] do_syscall_64+0xcd/0x260 [ 784.690387][T15133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.690407][T15133] RIP: 0033:0x7f5fd198e969 [ 784.690424][T15133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.690441][T15133] RSP: 002b:00007f5fcf7d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 784.690460][T15133] RAX: ffffffffffffffda RBX: 00007f5fd1bb6160 RCX: 00007f5fd198e969 [ 784.690472][T15133] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000200000000140 [ 784.690483][T15133] RBP: 00007f5fcf7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 784.690494][T15133] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 784.690504][T15133] R13: 0000000000000000 R14: 00007f5fd1bb6160 R15: 00007fff601d2148 [ 784.690530][T15133] [ 784.690556][T15133] ERROR: Out of memory at tomoyo_realpath_from_path. [ 784.987800][ T30] audit: type=1400 audit(1746064631.710:4153): avc: denied { create } for pid=15128 comm="syz.2.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 785.053830][ T30] audit: type=1400 audit(1746064631.770:4154): avc: denied { read } for pid=15134 comm="syz.1.2471" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 785.076571][ C1] vkms_vblank_simulate: vblank timer overrun [ 785.715563][ T30] audit: type=1400 audit(1746064631.770:4155): avc: denied { open } for pid=15134 comm="syz.1.2471" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 785.739434][ C1] vkms_vblank_simulate: vblank timer overrun [ 785.745906][ T30] audit: type=1400 audit(1746064631.800:4156): avc: denied { read write } for pid=15116 comm="syz.4.2467" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 785.879379][ T5858] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 785.997694][ T30] audit: type=1400 audit(1746064631.800:4157): avc: denied { open } for pid=15116 comm="syz.4.2467" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 786.021459][ C1] vkms_vblank_simulate: vblank timer overrun [ 786.155066][T15144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2472'. [ 786.164453][ T5858] usb 5-1: Using ep0 maxpacket: 16 [ 786.171096][ T30] audit: type=1400 audit(1746064631.800:4158): avc: denied { ioctl } for pid=15116 comm="syz.4.2467" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 786.218806][ T5858] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.221233][ T30] audit: type=1400 audit(1746064631.890:4159): avc: denied { create } for pid=15131 comm="syz.3.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 786.285281][ T30] audit: type=1400 audit(1746064631.900:4160): avc: denied { setopt } for pid=15131 comm="syz.3.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 786.305270][ C1] vkms_vblank_simulate: vblank timer overrun [ 786.531571][ T5858] usb 5-1: config 0 interface 0 has no altsetting 0 [ 786.554510][ T30] audit: type=1400 audit(1746064631.900:4161): avc: denied { write } for pid=15131 comm="syz.3.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 786.579883][ T5858] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 786.650669][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.661942][ T5858] usb 5-1: Product: syz [ 786.666970][ T5858] usb 5-1: Manufacturer: syz [ 786.736735][ T5858] usb 5-1: SerialNumber: syz [ 786.830014][T15155] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2475'. [ 786.917711][ T5858] usb 5-1: config 0 descriptor?? [ 787.098605][ T5858] usb 5-1: can't set config #0, error -71 [ 787.103284][T15116] [U] è [ 787.107278][ T5858] usb 5-1: USB disconnect, device number 99 [ 787.475330][T15177] 9pnet_fd: Insufficient options for proto=fd [ 787.485002][ T5860] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 788.138070][ T5860] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 788.159315][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.203989][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.224905][ T5860] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 788.341562][ T5860] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 788.355042][ T5860] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 788.363492][ T5860] usb 1-1: Manufacturer: syz [ 788.378076][T15179] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2481'. [ 788.391777][ T5860] usb 1-1: config 0 descriptor?? [ 789.460355][ T5860] usbhid 1-1:0.0: can't add hid device: -71 [ 789.577626][ T5860] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 789.589466][ T5860] usb 1-1: USB disconnect, device number 111 [ 790.469000][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 790.469027][ T30] audit: type=1400 audit(1746064637.220:4197): avc: denied { getopt } for pid=15197 comm="syz.3.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 790.593519][ T30] audit: type=1400 audit(1746064637.260:4198): avc: denied { name_connect } for pid=15197 comm="syz.3.2485" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 790.683857][T15210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2488'. [ 791.014055][ T30] audit: type=1400 audit(1746064637.320:4199): avc: denied { sys_module } for pid=15197 comm="syz.3.2485" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 791.429723][ T30] audit: type=1400 audit(1746064638.040:4200): avc: denied { bind } for pid=15207 comm="syz.1.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 791.706727][ T30] audit: type=1400 audit(1746064638.040:4201): avc: denied { name_bind } for pid=15207 comm="syz.1.2486" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 791.728792][ T30] audit: type=1400 audit(1746064638.040:4202): avc: denied { node_bind } for pid=15207 comm="syz.1.2486" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 791.762141][T15213] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2487'. [ 791.805035][ T30] audit: type=1400 audit(1746064638.550:4203): avc: denied { append } for pid=15218 comm="syz.4.2490" name="nbd4" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 791.890440][ T30] audit: type=1400 audit(1746064638.550:4204): avc: denied { create } for pid=15218 comm="syz.4.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 791.917435][ T30] audit: type=1400 audit(1746064638.550:4205): avc: denied { ioctl } for pid=15218 comm="syz.4.2490" path="socket:[45179]" dev="sockfs" ino=45179 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 791.942993][ T30] audit: type=1400 audit(1746064638.550:4206): avc: denied { bind } for pid=15218 comm="syz.4.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 792.658942][T15219] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 792.795203][ T5860] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 792.825082][ T5899] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 793.061717][ T5899] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 793.124735][ T5899] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 793.149325][ T5899] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 794.118371][ T5860] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 794.123128][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.128609][ T5860] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 794.153725][ T5860] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 794.208449][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.452743][ T5899] usb 2-1: usb_control_msg returned -32 [ 794.459417][ T5899] usbtmc 2-1:16.0: can't read capabilities [ 794.583425][T15253] sp0: Synchronizing with TNC [ 794.698304][ T5860] usb 1-1: usb_control_msg returned -32 [ 794.704100][ T5860] usbtmc 1-1:16.0: can't read capabilities [ 794.857525][T13249] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 795.494907][T13249] usb 3-1: Using ep0 maxpacket: 16 [ 795.506983][T13249] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.528573][T13249] usb 3-1: config 0 interface 0 has no altsetting 0 [ 795.538387][T13249] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 795.553374][T13249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.562434][T13249] usb 3-1: Product: syz [ 795.568854][T13249] usb 3-1: Manufacturer: syz [ 795.573751][T13249] usb 3-1: SerialNumber: syz [ 795.729348][T13249] usb 3-1: config 0 descriptor?? [ 795.895131][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 795.895168][ T30] audit: type=1400 audit(1746064642.620:4212): avc: denied { egress } for pid=15234 comm="syz.0.2494" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 796.155361][T13249] hub 3-1:0.0: bad descriptor, ignoring hub [ 796.161481][T13249] hub 3-1:0.0: probe with driver hub failed with error -5 [ 796.170057][ T30] audit: type=1400 audit(1746064642.620:4213): avc: denied { sendto } for pid=15234 comm="syz.0.2494" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 796.211895][T13249] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 796.229874][ T36] usb 3-1: Failed to submit usb control message: -71 [ 796.244843][ T36] usb 3-1: unable to send the bmi data to the device: -71 [ 796.261437][ T36] usb 3-1: unable to get target info from device [ 796.270914][ T36] usb 3-1: could not get target info (-71) [ 796.277041][ T36] usb 3-1: could not probe fw (-71) [ 796.497015][T15274] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2500'. [ 796.728558][ T30] audit: type=1326 audit(1746064643.480:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.2.2498" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fd198e969 code=0x0 [ 796.787045][T15252] [U] è [ 796.794439][T13249] usb 2-1: USB disconnect, device number 23 [ 796.886708][ T5899] usb 3-1: USB disconnect, device number 110 [ 797.734930][ T30] audit: type=1400 audit(1746064643.950:4215): avc: denied { read } for pid=15278 comm="syz.3.2501" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 797.877550][T15284] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2502'. [ 797.933867][ T30] audit: type=1400 audit(1746064643.960:4216): avc: denied { open } for pid=15278 comm="syz.3.2501" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 797.980222][ T5899] usb 1-1: USB disconnect, device number 112 [ 798.117895][ T30] audit: type=1400 audit(1746064643.970:4217): avc: denied { ioctl } for pid=15278 comm="syz.3.2501" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 798.150990][T15282] bridge0: port 3(netdevsim0) entered blocking state [ 798.157848][T15282] bridge0: port 3(netdevsim0) entered disabled state [ 798.164693][T15282] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 798.173036][T15282] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 798.180796][T15282] bridge0: port 3(netdevsim0) entered blocking state [ 798.187598][T15282] bridge0: port 3(netdevsim0) entered forwarding state [ 799.020348][ T30] audit: type=1400 audit(1746064645.670:4218): avc: denied { create } for pid=15293 comm="syz.1.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 800.024840][ T30] audit: type=1400 audit(1746064645.770:4219): avc: denied { bind } for pid=15293 comm="syz.1.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 800.450715][ T30] audit: type=1400 audit(1746064647.170:4220): avc: denied { append } for pid=15306 comm="syz.1.2509" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 802.774886][ T30] audit: type=1400 audit(1746064649.500:4221): avc: denied { read write } for pid=15326 comm="syz.1.2514" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 803.173068][ T30] audit: type=1400 audit(1746064649.500:4222): avc: denied { open } for pid=15326 comm="syz.1.2514" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 803.414833][ T5898] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 804.025905][ T30] audit: type=1400 audit(1746064649.510:4223): avc: denied { map } for pid=15326 comm="syz.1.2514" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 804.054055][ T30] audit: type=1400 audit(1746064649.510:4224): avc: denied { execute } for pid=15326 comm="syz.1.2514" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 804.079238][T15335] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2515'. [ 804.092787][ T30] audit: type=1400 audit(1746064649.850:4225): avc: denied { connect } for pid=15326 comm="syz.1.2514" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 804.114455][ T30] audit: type=1400 audit(1746064649.910:4226): avc: denied { read } for pid=5165 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 804.449200][ T5898] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 804.478665][ T30] audit: type=1400 audit(1746064649.910:4227): avc: denied { search } for pid=5165 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.518249][ T5898] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 804.526364][ T30] audit: type=1400 audit(1746064649.910:4228): avc: denied { append } for pid=5165 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 804.563259][ T30] audit: type=1400 audit(1746064649.910:4229): avc: denied { open } for pid=5165 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 804.585062][ T5898] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 804.599586][ T30] audit: type=1400 audit(1746064649.910:4230): avc: denied { getattr } for pid=5165 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 804.704686][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.605961][ T5899] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 805.633837][T13249] IPVS: starting estimator thread 0... [ 805.721067][ T5898] usb 4-1: usb_control_msg returned -71 [ 805.740656][ T5898] usbtmc 4-1:16.0: can't read capabilities [ 805.754476][ T5898] usb 4-1: USB disconnect, device number 98 [ 805.784116][T15354] netlink: 'syz.4.2520': attribute type 5 has an invalid length. [ 805.805380][T15351] IPVS: using max 52 ests per chain, 124800 per kthread [ 806.091600][T15359] vivid-004: disconnect [ 806.460384][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 806.471004][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.503355][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.640579][T15353] vivid-004: reconnect [ 806.654909][ T5899] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 806.679958][ T5899] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 807.211538][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.223881][ T5899] usb 2-1: config 0 descriptor?? [ 807.852580][ T5899] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0036/input/input111 [ 807.868721][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 807.868735][ T30] audit: type=1400 audit(1746064654.620:4241): avc: denied { read } for pid=5168 comm="acpid" name="mouse1" dev="devtmpfs" ino=3847 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 807.901585][ T30] audit: type=1400 audit(1746064654.620:4242): avc: denied { open } for pid=5168 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3847 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 807.952146][ T5899] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0036/input/input112 [ 807.982175][ T5899] kye 0003:0458:5011.0036: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 808.017542][ T30] audit: type=1400 audit(1746064654.690:4243): avc: denied { ioctl } for pid=5168 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3847 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 808.049956][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.064079][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.115635][ T5899] usb 2-1: USB disconnect, device number 24 [ 808.273393][T13249] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 808.294412][T15386] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2529'. [ 808.860067][T13249] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 808.884109][T13249] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 808.941140][T13249] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 808.964234][T13249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.195296][T13249] usb 3-1: usb_control_msg returned -32 [ 809.201613][T13249] usbtmc 3-1:16.0: can't read capabilities [ 809.244906][T11904] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 809.265142][ T5860] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 809.272991][ T5898] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 809.404645][T11904] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 809.419397][T11904] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 809.466167][ T5860] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 809.476637][T11904] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 809.492232][ T5898] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 809.503193][ T5860] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 809.516575][T11904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.525797][ T5898] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 809.549685][ T5860] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 809.559290][ T5898] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 809.589700][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.598015][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.088758][ T5898] usb 2-1: usb_control_msg returned -32 [ 810.095669][ T5898] usbtmc 2-1:16.0: can't read capabilities [ 810.112735][T11904] usb 1-1: usb_control_msg returned -32 [ 810.119261][ T24] usb 3-1: USB disconnect, device number 111 [ 810.129075][T11904] usbtmc 1-1:16.0: can't read capabilities [ 810.205262][ T30] audit: type=1400 audit(1746064656.950:4244): avc: denied { nlmsg_write } for pid=15394 comm="syz.0.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 810.514170][ T5860] usb 5-1: usb_control_msg returned -32 [ 810.538077][T11904] usb 1-1: USB disconnect, device number 113 [ 810.635542][ T5860] usbtmc 5-1:16.0: can't read capabilities [ 810.656425][ T30] audit: type=1400 audit(1746064656.960:4245): avc: denied { nlmsg_read } for pid=15394 comm="syz.0.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 811.920673][ T30] audit: type=1400 audit(1746064658.670:4246): avc: denied { ioctl } for pid=15414 comm="syz.2.2538" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 811.945773][T15418] sp0: Synchronizing with TNC [ 812.005833][ T30] audit: type=1400 audit(1746064658.760:4247): avc: denied { recv } for pid=15410 comm="syz.3.2537" saddr=10.128.0.169 src=30006 daddr=10.128.10.32 dest=42664 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 812.054120][ T30] audit: type=1400 audit(1746064658.800:4248): avc: denied { read write } for pid=15410 comm="syz.3.2537" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 812.083468][ T30] audit: type=1400 audit(1746064658.800:4249): avc: denied { open } for pid=15410 comm="syz.3.2537" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 812.258620][ T5899] usb 2-1: USB disconnect, device number 25 [ 812.261342][ T30] audit: type=1400 audit(1746064658.830:4250): avc: denied { ioctl } for pid=15410 comm="syz.3.2537" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 812.385144][ T24] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 812.654972][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 812.738623][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.849323][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 812.860093][ T24] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 812.880389][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.899524][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 812.899555][ T30] audit: type=1400 audit(1746064659.650:4272): avc: denied { prog_run } for pid=15423 comm="syz.2.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 812.960740][ T5860] usb 5-1: USB disconnect, device number 100 [ 812.985021][ T24] usb 4-1: Product: syz [ 812.989390][ T24] usb 4-1: Manufacturer: syz [ 812.994123][ T24] usb 4-1: SerialNumber: syz [ 812.994172][ T30] audit: type=1400 audit(1746064659.740:4273): avc: denied { execute } for pid=15423 comm="syz.2.2540" path="/449/file0" dev="tmpfs" ino=2431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 813.059076][ T30] audit: type=1804 audit(1746064659.740:4274): pid=15427 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2540" name="/newroot/449/file0" dev="tmpfs" ino=2431 res=1 errno=0 [ 813.078679][ T24] usb 4-1: config 0 descriptor?? [ 813.089124][ T24] hub 4-1:0.0: bad descriptor, ignoring hub [ 813.096169][ T24] hub 4-1:0.0: probe with driver hub failed with error -5 [ 813.103516][T15427] ref_ctr_offset mismatch. inode: 0x97f offset: 0x0 ref_ctr_offset(old): 0xffff00 ref_ctr_offset(new): 0x0 [ 813.106355][ T30] audit: type=1400 audit(1746064659.810:4275): avc: denied { allowed } for pid=15428 comm="syz.1.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 813.135963][T15430] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2540'. [ 813.145452][T15427] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 813.145501][T15427] ref_ctr decrement failed for inode: 0x97f offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880350f5000 [ 813.145565][T15427] uprobe: syz.2.2540:15427 failed to unregister, leaking uprobe [ 813.157892][ T30] audit: type=1400 audit(1746064659.860:4276): avc: denied { create } for pid=15428 comm="syz.1.2541" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 813.281607][ T24] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 813.521893][ T52] usb 4-1: Failed to submit usb control message: -71 [ 813.545074][ T52] usb 4-1: unable to send the bmi data to the device: -71 [ 813.552440][ T52] usb 4-1: unable to get target info from device [ 813.574971][ T30] audit: type=1400 audit(1746064659.900:4277): avc: denied { create } for pid=15428 comm="syz.1.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 813.595777][ T52] usb 4-1: could not get target info (-71) [ 813.601679][ T52] usb 4-1: could not probe fw (-71) [ 813.654957][ T30] audit: type=1400 audit(1746064659.950:4278): avc: denied { create } for pid=15423 comm="syz.2.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 813.679439][ T30] audit: type=1400 audit(1746064659.960:4279): avc: denied { write } for pid=15428 comm="syz.1.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 813.720346][ T30] audit: type=1400 audit(1746064659.980:4280): avc: denied { read write } for pid=15428 comm="syz.1.2541" name="mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 813.860127][T15445] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2544'. [ 814.009007][ T30] audit: type=1400 audit(1746064659.980:4281): avc: denied { open } for pid=15428 comm="syz.1.2541" path="/dev/input/mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 814.075725][T13249] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 814.112556][T15410] [U] è [ 814.196118][ T5898] usb 4-1: USB disconnect, device number 99 [ 814.284880][T13249] usb 1-1: Using ep0 maxpacket: 32 [ 814.302970][T13249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.336755][T13249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.354836][T13249] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 814.404933][T13249] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 814.419914][T13249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.452592][T13249] usb 1-1: config 0 descriptor?? [ 814.675343][ T5898] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 814.843929][T15459] IPVS: set_ctl: invalid protocol: 150 127.0.0.1:0 [ 814.850778][ T5899] IPVS: starting estimator thread 0... [ 814.887651][ T5898] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 814.928652][ T5898] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 814.955209][ T5898] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 814.977154][T15460] IPVS: using max 55 ests per chain, 132000 per kthread [ 814.990633][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.026876][T13249] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0037/input/input113 [ 815.180501][T15470] sp0: Synchronizing with TNC [ 815.193270][T13249] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0037/input/input114 [ 815.477178][ T5898] usb 5-1: usb_control_msg returned -32 [ 815.550725][ T5898] usbtmc 5-1:16.0: can't read capabilities [ 815.658073][T13249] kye 0003:0458:5011.0037: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 815.676695][T13249] usb 1-1: USB disconnect, device number 114 [ 815.957098][ T24] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 816.610286][T13249] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 817.116346][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 817.259012][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.326428][T13249] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 817.337465][T13249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.348490][T13249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.374220][T13249] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 817.385004][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 817.398101][ T24] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 817.410554][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.419715][ T24] usb 4-1: Product: syz [ 817.424226][ T24] usb 4-1: Manufacturer: syz [ 817.431698][ T24] usb 4-1: SerialNumber: syz [ 817.449538][ T24] usb 4-1: config 0 descriptor?? [ 817.473841][ T24] hub 4-1:0.0: bad descriptor, ignoring hub [ 817.478149][T13249] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 817.490708][T13249] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 817.499291][T13249] usb 1-1: Manufacturer: syz [ 817.508257][ T24] hub 4-1:0.0: probe with driver hub failed with error -5 [ 817.521222][T13249] usb 1-1: config 0 descriptor?? [ 817.574001][ T24] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 817.613926][ T36] usb 4-1: Failed to submit usb control message: -71 [ 817.622943][ T36] usb 4-1: unable to send the bmi data to the device: -71 [ 817.631064][ T36] usb 4-1: unable to get target info from device [ 817.640837][ T36] usb 4-1: could not get target info (-71) [ 817.646902][ T36] usb 4-1: could not probe fw (-71) [ 817.740111][T15462] [U] è [ 817.847297][ T24] usb 4-1: USB disconnect, device number 100 [ 817.952513][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 817.952542][ T30] audit: type=1400 audit(1746064664.700:4351): avc: denied { create } for pid=15476 comm="syz.0.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 817.989772][ T30] audit: type=1400 audit(1746064664.740:4352): avc: denied { setopt } for pid=15476 comm="syz.0.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 818.012584][ T30] audit: type=1400 audit(1746064664.750:4353): avc: denied { read write } for pid=15476 comm="syz.0.2554" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 818.015846][T15495] FAULT_INJECTION: forcing a failure. [ 818.015846][T15495] name failslab, interval 1, probability 0, space 0, times 0 [ 818.038127][T13249] usbhid 1-1:0.0: can't add hid device: -71 [ 818.056791][T13249] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 818.081906][ T30] audit: type=1400 audit(1746064664.750:4354): avc: denied { open } for pid=15476 comm="syz.0.2554" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 818.085007][T15495] CPU: 1 UID: 0 PID: 15495 Comm: syz.1.2557 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 818.085041][T15495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 818.085051][T15495] Call Trace: [ 818.085059][T15495] [ 818.085066][T15495] dump_stack_lvl+0x16c/0x1f0 [ 818.085105][T15495] should_fail_ex+0x512/0x640 [ 818.085133][T15495] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 818.085163][T15495] should_failslab+0xc2/0x120 [ 818.085183][T15495] __kmalloc_cache_noprof+0x6a/0x3e0 [ 818.085205][T15495] ? alloc_mnt_ns+0xd2/0x520 [ 818.085235][T15495] alloc_mnt_ns+0xd2/0x520 [ 818.085257][T15495] copy_mnt_ns+0x112/0xac0 [ 818.085273][T15495] ? trace_kmem_cache_alloc+0x28/0xc0 [ 818.085292][T15495] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 818.085316][T15495] ? create_new_namespaces+0x30/0xad0 [ 818.085344][T15495] create_new_namespaces+0xd3/0xad0 [ 818.085362][T15495] ? bpf_lsm_capable+0x9/0x10 [ 818.085400][T15495] ? security_capable+0x7e/0x260 [ 818.085423][T15495] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 818.085445][T15495] ksys_unshare+0x45b/0xa40 [ 818.085477][T15495] ? __pfx_ksys_unshare+0x10/0x10 [ 818.085497][T15495] ? ksys_write+0x1b9/0x240 [ 818.085538][T15495] ? rcu_is_watching+0x12/0xc0 [ 818.085565][T15495] __x64_sys_unshare+0x31/0x40 [ 818.085585][T15495] do_syscall_64+0xcd/0x260 [ 818.085610][T15495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.085626][T15495] RIP: 0033:0x7f417f38e969 [ 818.085644][T15495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.085659][T15495] RSP: 002b:00007f418010e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 818.085678][T15495] RAX: ffffffffffffffda RBX: 00007f417f5b5fa0 RCX: 00007f417f38e969 [ 818.085688][T15495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020480 [ 818.085697][T15495] RBP: 00007f418010e090 R08: 0000000000000000 R09: 0000000000000000 [ 818.085706][T15495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.085716][T15495] R13: 0000000000000000 R14: 00007f417f5b5fa0 R15: 00007ffc2921d668 [ 818.085736][T15495] [ 818.325764][T13249] usb 1-1: USB disconnect, device number 115 [ 818.338080][ T30] audit: type=1400 audit(1746064664.750:4355): avc: denied { ioctl } for pid=15476 comm="syz.0.2554" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 818.363633][ T30] audit: type=1400 audit(1746064665.010:4356): avc: denied { name_bind } for pid=15498 comm="syz.1.2559" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 818.370759][T11904] usb 5-1: USB disconnect, device number 101 [ 818.425063][ T5898] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 818.462099][ T30] audit: type=1400 audit(1746064665.210:4357): avc: denied { execute } for pid=15501 comm="syz.3.2560" path="/495/file0" dev="tmpfs" ino=2678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 818.538179][ T30] audit: type=1804 audit(1746064665.210:4358): pid=15502 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2560" name="/newroot/495/file0" dev="tmpfs" ino=2678 res=1 errno=0 [ 818.546656][T15504] IPVS: set_ctl: invalid protocol: 150 127.0.0.1:0 [ 818.577312][ T24] IPVS: starting estimator thread 0... [ 818.641939][ T5898] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 818.652723][ T5898] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 818.675385][T15505] IPVS: using max 54 ests per chain, 129600 per kthread [ 818.695465][ T5898] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 818.707413][ T30] audit: type=1400 audit(1746064665.460:4359): avc: denied { map_read map_write } for pid=15506 comm="syz.4.2562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 818.737832][T15509] ./file0: Can't lookup blockdev [ 818.793843][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.820366][ T30] audit: type=1400 audit(1746064665.490:4360): avc: denied { create } for pid=15506 comm="syz.4.2562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 819.105667][T11904] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 819.284044][ T5898] usb 3-1: usb_control_msg returned -32 [ 819.336719][ T5898] usbtmc 3-1:16.0: can't read capabilities [ 819.495183][T11904] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 819.666424][T11904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.683220][T11904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.725804][T11904] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 820.018199][T11904] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 820.036798][T11904] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 820.046469][T11904] usb 4-1: Manufacturer: syz [ 820.053715][T11904] usb 4-1: config 0 descriptor?? [ 820.323122][T15542] sp0: Synchronizing with TNC [ 820.375166][ T5899] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 820.501583][T11904] usbhid 4-1:0.0: can't add hid device: -71 [ 820.508603][T11904] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 820.520773][T11904] usb 4-1: USB disconnect, device number 101 [ 820.536928][ T5899] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 820.550468][ T5899] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 820.563915][ T5899] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 820.573197][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.574993][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 820.658152][ T5898] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 820.745441][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 820.753552][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.764227][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 820.776189][ T24] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 820.785723][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.793884][ T24] usb 2-1: Product: syz [ 820.797100][ T5899] usb 1-1: usb_control_msg returned -32 [ 820.800019][ T24] usb 2-1: Manufacturer: syz [ 820.804355][ T5899] usbtmc 1-1:16.0: can't read capabilities [ 820.808599][ T24] usb 2-1: SerialNumber: syz [ 820.822729][ T24] usb 2-1: config 0 descriptor?? [ 820.829705][ T24] hub 2-1:0.0: bad descriptor, ignoring hub [ 820.836467][ T24] hub 2-1:0.0: probe with driver hub failed with error -5 [ 820.845114][ T5898] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 820.855987][ T5898] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 820.869924][ T5898] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 820.880068][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.890098][ T24] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 820.907989][ T8361] usb 2-1: Failed to submit usb control message: -71 [ 820.915800][ T8361] usb 2-1: unable to send the bmi data to the device: -71 [ 820.923150][ T8361] usb 2-1: unable to get target info from device [ 820.929722][ T8361] usb 2-1: could not get target info (-71) [ 820.935749][ T8361] usb 2-1: could not probe fw (-71) [ 821.069231][T15537] [U] è [ 821.107661][ T5898] usb 5-1: usb_control_msg returned -32 [ 821.113636][ T5898] usbtmc 5-1:16.0: can't read capabilities [ 821.175344][ T5899] usb 2-1: USB disconnect, device number 26 [ 821.316700][ T24] usb 3-1: USB disconnect, device number 112 [ 822.735437][ T5899] usb 1-1: USB disconnect, device number 116 [ 822.986612][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 822.986641][ T30] audit: type=1400 audit(1746064669.680:4422): avc: denied { create } for pid=15564 comm="syz.2.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 823.025881][T15569] IPVS: set_ctl: invalid protocol: 150 127.0.0.1:0 [ 823.102082][ T30] audit: type=1400 audit(1746064669.700:4423): avc: denied { mounton } for pid=15566 comm="syz.3.2577" path=2F3439392FE91F7189591E9233614B dev="tmpfs" ino=2699 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 823.195052][ T30] audit: type=1400 audit(1746064669.710:4424): avc: denied { ioctl } for pid=15564 comm="syz.2.2575" path="socket:[45977]" dev="sockfs" ino=45977 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 823.367137][T15568] sctp: [Deprecated]: syz.2.2575 (pid 15568) Use of int in maxseg socket option. [ 823.367137][T15568] Use struct sctp_assoc_value instead [ 823.443853][ T30] audit: type=1400 audit(1746064670.060:4425): avc: denied { map_create } for pid=15571 comm="syz.0.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 823.464291][ T30] audit: type=1400 audit(1746064670.120:4426): avc: denied { setopt } for pid=15564 comm="syz.2.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 823.500000][ T30] audit: type=1400 audit(1746064670.190:4427): avc: denied { map_read map_write } for pid=15571 comm="syz.0.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 823.556949][ T30] audit: type=1400 audit(1746064670.240:4428): avc: denied { create } for pid=15564 comm="syz.2.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 823.767971][ T24] usb 5-1: USB disconnect, device number 102 [ 823.808449][ T30] audit: type=1400 audit(1746064670.300:4429): avc: denied { create } for pid=15578 comm="syz.1.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 824.433805][ T30] audit: type=1400 audit(1746064670.300:4430): avc: denied { prog_run } for pid=15571 comm="syz.0.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 824.453207][ T30] audit: type=1400 audit(1746064670.300:4431): avc: denied { create } for pid=15571 comm="syz.0.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 825.415124][T15606] ref_ctr_offset mismatch. inode: 0x9d9 offset: 0x0 ref_ctr_offset(old): 0xffff00 ref_ctr_offset(new): 0x0 [ 825.449352][T15606] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 825.481358][T15606] ref_ctr decrement failed for inode: 0x9d9 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807a789400 [ 825.494853][T14621] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 825.521617][T15606] uprobe: syz.4.2581:15606 failed to unregister, leaking uprobe [ 825.550471][T15614] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2581'. [ 825.691065][T14621] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 825.702678][T14621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.715099][T14621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.726638][T14621] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 825.741986][T14621] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 825.776207][T14621] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 825.784667][T14621] usb 3-1: Manufacturer: syz [ 825.934531][T14621] usb 3-1: config 0 descriptor?? [ 825.959173][ T5899] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 826.186556][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 826.353699][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.364314][ T5899] usb 1-1: config 0 interface 0 has no altsetting 0 [ 826.378313][ T5899] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 826.387801][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.396194][ T5899] usb 1-1: Product: syz [ 826.400475][ T5899] usb 1-1: Manufacturer: syz [ 826.435153][ T5899] usb 1-1: SerialNumber: syz [ 826.440230][T14621] usbhid 3-1:0.0: can't add hid device: -71 [ 826.452198][T14621] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 826.463862][T14621] usb 3-1: USB disconnect, device number 113 [ 826.472245][ T5899] usb 1-1: config 0 descriptor?? [ 826.481652][ T5899] hub 1-1:0.0: bad descriptor, ignoring hub [ 826.487978][ T5899] hub 1-1:0.0: probe with driver hub failed with error -5 [ 826.529295][ T5899] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 826.541271][ T1151] usb 1-1: Failed to submit usb control message: -71 [ 826.553121][ T1151] usb 1-1: unable to send the bmi data to the device: -71 [ 826.560580][ T1151] usb 1-1: unable to get target info from device [ 826.567074][ T1151] usb 1-1: could not get target info (-71) [ 826.605432][ T1151] usb 1-1: could not probe fw (-71) [ 826.881929][ T5899] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 827.075534][ T5899] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 827.086841][ T5899] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 827.115842][ T5899] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 827.119706][T15628] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2590'. [ 827.134626][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.408822][ T5899] usb 2-1: usb_control_msg returned -32 [ 827.529294][ T5899] usbtmc 2-1:16.0: can't read capabilities [ 828.038620][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 828.038646][ T30] audit: type=1400 audit(1746064674.790:4488): avc: denied { create } for pid=15625 comm="syz.1.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 828.341662][T15612] Falling back ldisc for ttyprintk. [ 829.964705][T14621] usb 2-1: USB disconnect, device number 27 [ 830.043356][ T30] audit: type=1400 audit(1746064676.790:4489): avc: denied { read } for pid=15632 comm="syz.2.2591" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 830.080760][ T5899] usb 1-1: USB disconnect, device number 117 [ 830.105021][ T30] audit: type=1400 audit(1746064676.790:4490): avc: denied { open } for pid=15632 comm="syz.2.2591" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 830.183911][ T30] audit: type=1400 audit(1746064676.790:4491): avc: denied { ioctl } for pid=15632 comm="syz.2.2591" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 830.231744][ T30] audit: type=1400 audit(1746064676.870:4492): avc: denied { setopt } for pid=15635 comm="syz.0.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 830.271675][ T30] audit: type=1400 audit(1746064676.930:4493): avc: denied { write } for pid=15634 comm="syz.1.2593" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 830.297890][ T30] audit: type=1400 audit(1746064677.000:4494): avc: denied { name_bind } for pid=15638 comm="syz.3.2594" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 830.315190][ T24] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 830.323195][ T30] audit: type=1400 audit(1746064677.000:4495): avc: denied { node_bind } for pid=15638 comm="syz.3.2594" saddr=::1 src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 830.370790][T15645] overlayfs: invalid redirect ((null)) [ 830.378489][T15637] fuse: Unknown parameter '00000000000000000000000' [ 830.485133][ T30] audit: type=1400 audit(1746064677.110:4496): avc: denied { mounton } for pid=15635 comm="syz.0.2592" path="/498/file0" dev="tmpfs" ino=2649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 830.516993][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 830.536764][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 830.553896][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 830.567040][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.581213][ T30] audit: type=1400 audit(1746064677.110:4497): avc: denied { mount } for pid=15635 comm="syz.0.2592" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 830.814040][ T24] usb 3-1: usb_control_msg returned -32 [ 830.898197][ T24] usbtmc 3-1:16.0: can't read capabilities [ 832.033011][T15665] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2599'. [ 832.286921][T15666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2600'. [ 833.283335][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 833.283356][ T30] audit: type=1400 audit(1746064679.770:4514): avc: denied { create } for pid=15668 comm="syz.1.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 833.608816][ T30] audit: type=1400 audit(1746064679.870:4515): avc: denied { write } for pid=15668 comm="syz.1.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 833.669819][ T30] audit: type=1400 audit(1746064679.870:4516): avc: denied { connect } for pid=15668 comm="syz.1.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 833.689864][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.732622][T15679] sp0: Synchronizing with TNC [ 833.792446][ T30] audit: type=1400 audit(1746064679.870:4517): avc: denied { name_connect } for pid=15668 comm="syz.1.2601" dest=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 833.872955][T15681] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2604'. [ 833.920400][ T24] usb 3-1: USB disconnect, device number 114 [ 833.930085][ T30] audit: type=1400 audit(1746064680.000:4518): avc: denied { read } for pid=15668 comm="syz.1.2601" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 833.959943][ T30] audit: type=1400 audit(1746064680.000:4519): avc: denied { open } for pid=15668 comm="syz.1.2601" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 833.997657][ T30] audit: type=1400 audit(1746064680.000:4520): avc: denied { ioctl } for pid=15668 comm="syz.1.2601" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 834.023079][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.031651][ T30] audit: type=1400 audit(1746064680.010:4521): avc: denied { execute } for pid=15670 comm="syz.0.2602" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 834.096479][ T30] audit: type=1400 audit(1746064680.020:4522): avc: denied { execute_no_trans } for pid=15670 comm="syz.0.2602" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 834.126293][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.153991][ T30] audit: type=1400 audit(1746064680.020:4523): avc: denied { create } for pid=15670 comm="syz.0.2602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 834.175335][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.245638][ T5898] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 834.315328][T11904] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 834.332070][T15689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2607'. [ 834.486531][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 834.503255][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.521476][T11904] usb 1-1: not running at top speed; connect to a high speed hub [ 834.536778][T11904] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 834.553501][T11904] usb 1-1: config 95 has no interface number 0 [ 834.566877][ T5898] usb 4-1: config 0 interface 0 has no altsetting 0 [ 834.595260][T11904] usb 1-1: config 95 interface 1 has no altsetting 0 [ 834.624565][ T5898] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 834.645776][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.653894][ T5898] usb 4-1: Product: syz [ 834.670649][ T5898] usb 4-1: Manufacturer: syz [ 834.676210][ T5898] usb 4-1: SerialNumber: syz [ 834.681071][T11904] usb 1-1: string descriptor 0 read error: -22 [ 834.687724][T11904] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 834.886936][T11904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.841368][T15679] [U] è [ 835.900341][ T5898] usb 4-1: config 0 descriptor?? [ 835.920383][ T5898] usb 4-1: can't set config #0, error -71 [ 836.311018][ T5898] usb 4-1: USB disconnect, device number 102 [ 836.345921][T15685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15685 comm=syz.0.2605 [ 836.453083][T11904] usb 1-1: USB disconnect, device number 118 [ 836.606316][ C1] vkms_vblank_simulate: vblank timer overrun [ 836.690989][T15707] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2612'. [ 836.833910][T15709] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2613'. [ 836.980849][T15717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2615'. [ 837.027750][T15721] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2616'. [ 837.448374][T15733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2620'. [ 837.500258][ T5899] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 838.335663][ T5899] usb 2-1: device descriptor read/64, error -71 [ 838.525168][ T5898] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 838.684977][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 838.696593][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.728970][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.743680][ T5899] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 838.796557][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 838.885032][ T5899] usb 2-1: device descriptor read/64, error -71 [ 838.911109][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 838.911152][ T30] audit: type=1400 audit(1746064685.650:4580): avc: denied { read } for pid=15750 comm="syz.3.2626" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 839.177949][ T5899] usb usb2-port1: attempt power cycle [ 839.202327][ T5898] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 839.211599][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.222226][ T5898] usb 3-1: config 0 descriptor?? [ 839.232966][ T30] audit: type=1400 audit(1746064685.750:4581): avc: denied { open } for pid=15750 comm="syz.3.2626" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 839.259317][ T30] audit: type=1400 audit(1746064685.840:4582): avc: denied { ioctl } for pid=15750 comm="syz.3.2626" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 839.559180][ T30] audit: type=1400 audit(1746064686.240:4583): avc: denied { write } for pid=15739 comm="syz.2.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 839.575697][T14621] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 839.605410][T15758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2628'. [ 839.615089][ T5899] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 839.648518][ T5899] usb 2-1: device descriptor read/8, error -71 [ 839.740319][T14621] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 839.753299][T14621] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 839.760563][ T5898] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0038/input/input115 [ 839.770268][T14621] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 839.788698][ T30] audit: type=1400 audit(1746064686.540:4584): avc: denied { read } for pid=5168 comm="acpid" name="mouse1" dev="devtmpfs" ino=3896 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 839.811381][T14621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.815088][ T30] audit: type=1400 audit(1746064686.540:4585): avc: denied { open } for pid=5168 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3896 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 839.856404][ T30] audit: type=1400 audit(1746064686.610:4586): avc: denied { ioctl } for pid=5168 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3896 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 839.885821][ T5898] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0038/input/input116 [ 839.914888][ T5899] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 839.921008][ T5898] kye 0003:0458:5011.0038: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 839.936790][ T5899] usb 2-1: device descriptor read/8, error -71 [ 840.070860][ T30] audit: type=1400 audit(1746064686.820:4587): avc: denied { create } for pid=15763 comm="syz.0.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 840.078546][ T5899] usb usb2-port1: unable to enumerate USB device [ 840.105204][T14621] usb 4-1: usb_control_msg returned -32 [ 840.121986][T14621] usbtmc 4-1:16.0: can't read capabilities [ 840.132687][ T5898] usb 3-1: USB disconnect, device number 115 [ 840.173283][ T30] audit: type=1400 audit(1746064686.880:4588): avc: denied { ioctl } for pid=15763 comm="syz.0.2630" path="socket:[47389]" dev="sockfs" ino=47389 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 840.451791][ T30] audit: type=1400 audit(1746064687.190:4589): avc: denied { write } for pid=15766 comm="syz.1.2631" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 840.876645][T13459] Bluetooth: hci5: command 0x0406 tx timeout [ 841.112670][T15764] IPVS: set_ctl: invalid protocol: 150 127.0.0.1:0 [ 841.263757][T15764] sctp: [Deprecated]: syz.0.2630 (pid 15764) Use of int in maxseg socket option. [ 841.263757][T15764] Use struct sctp_assoc_value instead [ 841.302878][T15775] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2632'. [ 842.280724][ T5898] usb 4-1: USB disconnect, device number 103 [ 842.428915][ T5860] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 842.921625][ T5860] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 843.231491][ T5860] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 843.355565][ T5860] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 843.364967][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.516014][T15799] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2639'. [ 843.800823][ T5860] usb 1-1: usb_control_msg returned -32 [ 844.043921][ T5860] usbtmc 1-1:16.0: can't read capabilities [ 844.355221][ T5899] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 844.865169][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 844.865205][ T30] audit: type=1400 audit(1746064691.280:4594): avc: denied { mounton } for pid=15809 comm="syz.4.2642" path="/482/file0" dev="tmpfs" ino=2573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 845.104976][ T5899] usb 4-1: device descriptor read/64, error -71 [ 845.259370][ T30] audit: type=1400 audit(1746064692.010:4595): avc: denied { prog_run } for pid=15818 comm="syz.1.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 845.359703][ T5899] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 845.412092][T14621] usb 1-1: USB disconnect, device number 119 [ 845.582866][ T5899] usb 4-1: device descriptor read/64, error -71 [ 845.804165][T13249] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 845.845370][ T30] audit: type=1400 audit(1746064692.510:4596): avc: denied { read } for pid=15818 comm="syz.1.2644" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 845.870556][ T5899] usb usb4-port1: attempt power cycle [ 846.021269][ T30] audit: type=1400 audit(1746064692.510:4597): avc: denied { open } for pid=15818 comm="syz.1.2644" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 846.061141][ T30] audit: type=1400 audit(1746064692.520:4598): avc: denied { ioctl } for pid=15818 comm="syz.1.2644" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 846.089025][T13249] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 846.104858][T13249] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 846.120876][T13249] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 846.130636][T13249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.326964][ T5899] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 847.338794][T13249] usb 5-1: usb_control_msg returned -32 [ 847.344516][T13249] usbtmc 5-1:16.0: can't read capabilities [ 847.390799][ T5899] usb 4-1: device descriptor read/8, error -71 [ 847.925003][ T5860] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 848.165058][ T5899] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 848.581898][ T5860] usb 3-1: Using ep0 maxpacket: 32 [ 848.597351][T15852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2652'. [ 848.655233][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.671852][ T5899] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 848.676276][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.684261][ T5899] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 848.764868][ T5899] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 848.794066][ T5860] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 848.794491][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.864911][ T5860] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 848.884226][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.924674][ T5860] usb 3-1: config 0 descriptor?? [ 849.764317][ T5899] usb 4-1: usb_control_msg returned -32 [ 849.771065][ T5899] usbtmc 4-1:16.0: can't read capabilities [ 849.777841][ T5860] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0039/input/input117 [ 849.819138][ T5899] usb 5-1: USB disconnect, device number 103 [ 850.051884][ T5860] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0039/input/input118 [ 850.130434][ T5860] kye 0003:0458:5011.0039: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 850.210234][ T5860] usb 3-1: USB disconnect, device number 116 [ 850.259720][ T30] audit: type=1400 audit(1746064697.010:4599): avc: denied { create } for pid=15866 comm="syz.0.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 850.301598][ T30] audit: type=1400 audit(1746064697.030:4600): avc: denied { write } for pid=15866 comm="syz.0.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 850.907724][ T30] audit: type=1400 audit(1746064697.660:4601): avc: denied { create } for pid=15879 comm="syz.2.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 850.927396][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.938110][ T30] audit: type=1400 audit(1746064697.690:4602): avc: denied { connect } for pid=15879 comm="syz.2.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 850.964540][ T30] audit: type=1400 audit(1746064697.710:4603): avc: denied { write } for pid=15879 comm="syz.2.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 851.120151][T15884] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2660'. [ 851.169371][ T30] audit: type=1400 audit(1746064697.920:4604): avc: denied { create } for pid=15885 comm="syz.0.2661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 851.201246][ T30] audit: type=1400 audit(1746064697.940:4605): avc: denied { write } for pid=15885 comm="syz.0.2661" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 851.245175][ T5860] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 851.314074][ T30] audit: type=1400 audit(1746064698.040:4606): avc: denied { write } for pid=15885 comm="syz.0.2661" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 851.434104][ T5860] usb 3-1: device descriptor read/64, error -71 [ 851.520335][ T5899] usb 4-1: USB disconnect, device number 107 [ 851.752087][ T5860] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 851.915382][ T5860] usb 3-1: device descriptor read/64, error -71 [ 852.089248][ T5860] usb usb3-port1: attempt power cycle [ 852.138377][ T30] audit: type=1400 audit(1746064698.890:4607): avc: denied { create } for pid=15898 comm="syz.3.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 852.366964][ T30] audit: type=1400 audit(1746064698.940:4608): avc: denied { read write } for pid=15898 comm="syz.3.2663" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 852.515562][ T5860] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 852.614796][ T5860] usb 3-1: device descriptor read/8, error -71 [ 852.813498][T15905] IPVS: set_ctl: invalid protocol: 150 127.0.0.1:0 [ 852.851781][T15905] sctp: [Deprecated]: syz.4.2666 (pid 15905) Use of int in maxseg socket option. [ 852.851781][T15905] Use struct sctp_assoc_value instead [ 852.885251][ T5860] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 853.009958][ T5860] usb 3-1: device descriptor read/8, error -71 [ 853.140518][ T5860] usb usb3-port1: unable to enumerate USB device [ 853.488118][T15921] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2670'. [ 854.115070][ T5860] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 854.359040][T15937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2675'. [ 854.399921][ T5860] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 854.412001][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.423691][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.434154][ T5860] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 854.453983][ T5860] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 854.633821][ T5860] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 854.652997][ T5860] usb 2-1: Manufacturer: syz [ 854.671112][ T5860] usb 2-1: config 0 descriptor?? [ 855.792732][T15949] kvm: kvm [15944]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000007) = 0x0 [ 855.940501][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 855.940537][ T30] audit: type=1400 audit(1746064702.660:4618): avc: denied { read write } for pid=15928 comm="syz.1.2673" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 855.970462][ T30] audit: type=1400 audit(1746064702.660:4619): avc: denied { open } for pid=15928 comm="syz.1.2673" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 856.378545][ T5860] usbhid 2-1:0.0: can't add hid device: -71 [ 856.385379][ T5860] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 856.404582][ T5860] usb 2-1: USB disconnect, device number 32 [ 856.929420][ T30] audit: type=1400 audit(1746064702.750:4620): avc: denied { ioctl } for pid=15928 comm="syz.1.2673" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 856.956357][ T30] audit: type=1400 audit(1746064703.200:4621): avc: denied { bind } for pid=15942 comm="syz.0.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 857.025152][ T30] audit: type=1400 audit(1746064703.200:4622): avc: denied { name_bind } for pid=15942 comm="syz.0.2678" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 857.097495][T15963] FAULT_INJECTION: forcing a failure. [ 857.097495][T15963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.111553][T15963] CPU: 1 UID: 0 PID: 15963 Comm: syz.2.2680 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 857.111580][T15963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 857.111590][T15963] Call Trace: [ 857.111597][T15963] [ 857.111603][T15963] dump_stack_lvl+0x16c/0x1f0 [ 857.111637][T15963] should_fail_ex+0x512/0x640 [ 857.111672][T15963] _copy_from_user+0x2e/0xd0 [ 857.111694][T15963] copy_mount_options+0x76/0x190 [ 857.111717][T15963] __x64_sys_mount+0x1ac/0x310 [ 857.111735][T15963] ? __pfx___x64_sys_mount+0x10/0x10 [ 857.111752][T15963] ? rcu_is_watching+0x12/0xc0 [ 857.111781][T15963] do_syscall_64+0xcd/0x260 [ 857.111803][T15963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.111821][T15963] RIP: 0033:0x7f5fd198e969 [ 857.111836][T15963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.111852][T15963] RSP: 002b:00007f5fd272c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 857.111872][T15963] RAX: ffffffffffffffda RBX: 00007f5fd1bb5fa0 RCX: 00007f5fd198e969 [ 857.111884][T15963] RDX: 0000200000000080 RSI: 00002000000002c0 RDI: 0000000000000000 [ 857.111894][T15963] RBP: 00007f5fd272c090 R08: 0000200000000340 R09: 0000000000000000 [ 857.111904][T15963] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.111915][T15963] R13: 0000000000000000 R14: 00007f5fd1bb5fa0 R15: 00007fff601d2148 [ 857.111938][T15963] [ 857.316070][ T30] audit: type=1400 audit(1746064703.200:4623): avc: denied { node_bind } for pid=15942 comm="syz.0.2678" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 857.340821][ T30] audit: type=1400 audit(1746064704.050:4624): avc: denied { mount } for pid=15962 comm="syz.2.2680" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 857.364216][ T30] audit: type=1400 audit(1746064704.100:4625): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 857.715417][ T5860] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 858.024937][ T5898] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 858.194585][ T5860] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 858.212251][ T5860] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 858.318684][ T5860] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 858.355112][ T5898] usb 5-1: device descriptor read/64, error -71 [ 858.418434][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.645140][ T5898] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 858.717369][T15982] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2687'. [ 858.808557][ T30] audit: type=1400 audit(1746064705.560:4626): avc: denied { create } for pid=15987 comm="syz.3.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 858.832089][ T5898] usb 5-1: device descriptor read/64, error -71 [ 858.845573][ T30] audit: type=1400 audit(1746064705.580:4627): avc: denied { listen } for pid=15987 comm="syz.3.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 858.878629][ T5860] usb 2-1: usb_control_msg returned -32 [ 858.895227][ T5860] usbtmc 2-1:16.0: can't read capabilities [ 858.915206][T15989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2689'. [ 858.971152][ T5898] usb usb5-port1: attempt power cycle [ 859.021500][T13249] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 859.240518][T13249] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 859.252235][T13249] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 859.277747][T13249] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 859.288102][T13249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.633059][T13249] usb 3-1: usb_control_msg returned -32 [ 859.641901][T13249] usbtmc 3-1:16.0: can't read capabilities [ 860.376711][ T5898] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 860.452448][ T5898] usb 5-1: device descriptor read/8, error -71 [ 860.724954][ T5898] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 860.733764][ T5899] usb 3-1: USB disconnect, device number 121 [ 860.748838][ T5898] usb 5-1: device descriptor read/8, error -71 [ 860.866556][ T5898] usb usb5-port1: unable to enumerate USB device [ 860.984950][T13249] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 861.087466][T16007] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2693'. [ 861.250334][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 861.250366][ T30] audit: type=1400 audit(1746064708.000:4633): avc: denied { create } for pid=16009 comm="syz.3.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 861.334316][T13249] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 861.346517][ T30] audit: type=1400 audit(1746064708.090:4634): avc: denied { ioctl } for pid=16009 comm="syz.3.2694" path="socket:[47955]" dev="sockfs" ino=47955 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 861.374244][T13249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.407097][T13249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.427443][T13249] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 861.450835][ T5899] usb 2-1: USB disconnect, device number 33 [ 861.464905][T13249] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 861.474865][T13249] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 861.513759][T13249] usb 1-1: Manufacturer: syz [ 861.520662][T16018] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2696'. [ 861.551246][T13249] usb 1-1: config 0 descriptor?? [ 861.606815][T16022] vlan2: entered allmulticast mode [ 861.612801][ T30] audit: type=1400 audit(1746064708.360:4635): avc: denied { sqpoll } for pid=16023 comm="syz.4.2699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 861.778714][T14621] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 862.021460][ T5899] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 862.032078][T13249] usbhid 1-1:0.0: can't add hid device: -71 [ 862.039435][T13249] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 862.051384][T13249] usb 1-1: USB disconnect, device number 120 [ 862.103483][T14621] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 862.209577][T16032] fuse: Bad value for 'fd' [ 862.234948][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 862.263571][ T5899] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 862.403531][T14621] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 862.528288][ T5899] usb 5-1: config 0 has no interface number 0 [ 862.544532][ T5899] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 862.562322][T14621] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 862.579699][ T5899] usb 5-1: config 0 interface 126 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 862.593056][T14621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.604203][ T5899] usb 5-1: config 0 interface 126 has no altsetting 0 [ 862.619450][ T5899] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 862.629387][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.637610][ T5899] usb 5-1: Product: syz [ 862.641853][ T5899] usb 5-1: Manufacturer: syz [ 862.646918][ T5899] usb 5-1: SerialNumber: syz [ 862.653415][ T5899] usb 5-1: config 0 descriptor?? [ 862.659362][T16024] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 862.823188][T14621] usb 4-1: usb_control_msg returned -32 [ 862.835618][T13249] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 862.846926][T14621] usbtmc 4-1:16.0: can't read capabilities [ 863.027544][T11904] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 863.219201][T13249] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 863.231188][T13249] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 863.245288][ T5899] ir_usb 5-1:0.126: required endpoints missing [ 863.262096][T13249] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 863.281689][T13249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.346661][T11904] usb 3-1: device descriptor read/64, error -71 [ 863.353470][ T5860] usb 4-1: USB disconnect, device number 108 [ 863.381310][ T30] audit: type=1400 audit(1746064710.130:4636): avc: denied { mount } for pid=16045 comm="syz.0.2705" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 863.512214][T16046] FAULT_INJECTION: forcing a failure. [ 863.512214][T16046] name failslab, interval 1, probability 0, space 0, times 0 [ 863.526818][T13249] usb 2-1: usb_control_msg returned -32 [ 863.533917][T13249] usbtmc 2-1:16.0: can't read capabilities [ 863.586319][T16046] CPU: 1 UID: 0 PID: 16046 Comm: syz.0.2705 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 863.586368][T16046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 863.586378][T16046] Call Trace: [ 863.586388][T16046] [ 863.586397][T16046] dump_stack_lvl+0x16c/0x1f0 [ 863.586428][T16046] should_fail_ex+0x512/0x640 [ 863.586452][T16046] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 863.586475][T16046] should_failslab+0xc2/0x120 [ 863.586490][T16046] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 863.586509][T16046] ? mas_alloc_nodes+0x18b/0x8b0 [ 863.586525][T16046] mas_alloc_nodes+0x18b/0x8b0 [ 863.586541][T16046] mas_node_count_gfp+0x105/0x130 [ 863.586554][T16046] mas_preallocate+0x53e/0xcd0 [ 863.586574][T16046] ? __lock_acquire+0xaa4/0x1ba0 [ 863.586598][T16046] ? __pfx_mas_preallocate+0x10/0x10 [ 863.586614][T16046] ? __lock_acquire+0x5ca/0x1ba0 [ 863.586635][T16046] ? __asan_memset+0x23/0x50 [ 863.586656][T16046] commit_merge+0x29a/0x1020 [ 863.586677][T16046] ? __pfx_commit_merge+0x10/0x10 [ 863.586696][T16046] ? vma_merge_existing_range+0x113c/0x1cd0 [ 863.586714][T16046] ? dup_anon_vma.constprop.0+0x74/0x320 [ 863.586733][T16046] vma_merge_existing_range+0xc50/0x1cd0 [ 863.586756][T16046] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 863.586773][T16046] ? mark_held_locks+0x49/0x80 [ 863.586790][T16046] ? irqentry_exit+0x3b/0x90 [ 863.586807][T16046] vma_modify+0x87/0x510 [ 863.586826][T16046] vma_modify_flags+0x212/0x2d0 [ 863.586846][T16046] ? __pfx_vma_modify_flags+0x10/0x10 [ 863.586873][T16046] mlock_fixup+0x27c/0xe50 [ 863.586897][T16046] apply_mlockall_flags+0x2d4/0x470 [ 863.586916][T16046] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 863.586933][T16046] ? __pfx___might_resched+0x10/0x10 [ 863.586957][T16046] ? __pfx_down_write_killable+0x10/0x10 [ 863.586975][T16046] ? __pfx_ksys_write+0x10/0x10 [ 863.586997][T16046] ? rcu_is_watching+0x12/0xc0 [ 863.587015][T16046] __do_sys_munlockall+0xc5/0x280 [ 863.587028][T16046] do_syscall_64+0xcd/0x260 [ 863.587048][T16046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.587063][T16046] RIP: 0033:0x7f2adff8e969 [ 863.587077][T16046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.587088][T16046] RSP: 002b:00007f2ae0e0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 863.587101][T16046] RAX: ffffffffffffffda RBX: 00007f2ae01b5fa0 RCX: 00007f2adff8e969 [ 863.587108][T16046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 863.587114][T16046] RBP: 00007f2ae0e0a090 R08: 0000000000000000 R09: 0000000000000000 [ 863.587121][T16046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.587128][T16046] R13: 0000000000000000 R14: 00007f2ae01b5fa0 R15: 00007ffd18f189f8 [ 863.587142][T16046] [ 863.587363][T16046] vmg ffffc90005017c80 dumped because: VM_WARN_ON_VMG(prev && start <= prev->vm_start) [ 863.876875][T11904] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 863.927349][ T30] audit: type=1400 audit(1746064710.430:4637): avc: denied { nlmsg_write } for pid=16034 comm="syz.1.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 864.188036][T16046] vmg ffffc90005017c80 state: mm ffff888033dbee00 pgoff 200000728 [ 864.188036][T16046] vmi ffffc90005017e38 [200000728000,200000800000) [ 864.188036][T16046] prev ffff888029c44640 middle ffff888029c44640 next 0000000000000000 target 0000000000000000 [ 864.188036][T16046] start 200000728000 end 200000800000 flags 8100077 [ 864.188036][T16046] file 0000000000000000 anon_vma ffff88802543f660 policy 0000000000000000 [ 864.188036][T16046] uffd_ctx 0000000000000000 [ 864.188036][T16046] anon_name 0000000000000000 [ 864.188036][T16046] state 0 [ 864.188036][T16046] just_expand 0 [ 864.188036][T16046] __adjust_middle_start 0 __adjust_next_start 0 [ 864.188036][T16046] __remove_middle 0 __remove_next 0 [ 864.265303][T16046] vmg ffffc90005017c80 mm: [ 864.284180][ T30] audit: type=1400 audit(1746064711.030:4638): avc: denied { name_connect } for pid=16023 comm="syz.4.2699" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 864.307417][T16046] mm ffff888033dbee00 task_size 140737488351232 [ 864.307417][T16046] mmap_base 139822138208256 mmap_legacy_base 47810656960512 [ 864.307417][T16046] pgd ffff8880310b1000 mm_users 3 mm_count 1 pgtables_bytes 135168 map_count 37 [ 864.307417][T16046] hiwater_rss 1df4 hiwater_vm 5fce total_vm 5fca locked_vm d8 [ 864.307417][T16046] pinned_vm 0 data_vm 23d7 exec_vm 1a4 stack_vm 21 [ 864.307417][T16046] start_code 7f2adfe49000 end_code 7f2adffeadd9 start_data 7f2ae0190000 end_data 7f2ae0190000 [ 864.307417][T16046] start_brk 55557fd9b000 brk 55557fdcf000 start_stack 7ffd18f19260 [ 864.307417][T16046] arg_start 7ffd18f1af6d arg_end 7ffd18f1af81 env_start 7ffd18f1af81 env_end 7ffd18f1afe9 [ 864.307417][T16046] binfmt ffffffff8e6096e0 flags 800007fd [ 864.307417][T16046] ioctx_table 0000000000000000 [ 864.307417][T16046] owner ffff888012d0a440 exe_file ffff88807af86fc0 [ 864.307417][T16046] notifier_subscriptions 0000000000000000 [ 864.307417][T16046] numa_next_scan 4295023619 numa_scan_offset 0 numa_scan_seq 0 [ 864.307417][T16046] tlb_flush_pending 0 [ 864.307417][T16046] def_flags: 0x0() [ 864.421446][T16050] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 864.428876][T16050] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 864.454985][T16046] vmg ffffc90005017c80 prev: [ 864.461102][T16046] vma ffff888029c44640 start 0000200000728000 end 0000200000800000 mm ffff888033dbee00 [ 864.461102][T16046] prot 25 anon_vma ffff88802543f660 vm_ops 0000000000000000 [ 864.461102][T16046] pgoff 200000728 file 0000000000000000 private_data 0000000000000000 [ 864.461102][T16046] refcnt 1 [ 864.461102][T16046] flags: 0x8102077(read|write|exec|mayread|maywrite|mayexec|locked|account|softdirty) [ 864.464919][T11904] usb 3-1: device descriptor read/64, error -71 [ 864.516203][T13249] usb 2-1: USB disconnect, device number 34 [ 864.540007][T16050] vhci_hcd vhci_hcd.0: Device attached [ 864.544949][T16046] vmg ffffc90005017c80 middle: [ 864.551833][T16046] vma ffff888029c44640 start 0000200000728000 end 0000200000800000 mm ffff888033dbee00 [ 864.551833][T16046] prot 25 anon_vma ffff88802543f660 vm_ops 0000000000000000 [ 864.551833][T16046] pgoff 200000728 file 0000000000000000 private_data 0000000000000000 [ 864.551833][T16046] refcnt 1 [ 864.551833][T16046] flags: 0x8102077(read|write|exec|mayread|maywrite|mayexec|locked|account|softdirty) [ 864.593424][T16046] vmg ffffc90005017c80 next: (NULL) [ 864.598822][T16046] vmg ffffc90005017c80 vmi: [ 864.603439][T16046] MAS: tree=ffff888033dbee40 enode=ffff88803614d80c [ 864.603452][T16046] (ma_active) [ 864.610219][T16046] Store Type: [ 864.613550][T16046] node_store [ 864.621812][T16046] [10/14] index=200000728000 last=2000007fffff [ 864.628457][T11904] usb usb3-port1: attempt power cycle [ 864.634562][T16046] min=0 max=55557fdbcfff alloc=0000000000000000, depth=1, flags=0 [ 864.655346][T16046] maple_tree(ffff888033dbee40) flags 30B, height 2 root ffff88807eb7da1e [ 864.673262][T16046] 0-ffffffffffffffff: node ffff88807eb7da00 depth 0 type 3 parent ffff888033dbee41 contents: 35557ed9a000 29d55e028000 db000 ffff8002e70e5000 0 0 0 0 0 0 | 03 03| ffff88803614d80c 55557FDBCFFF ffff88802440f00c 7F2ADFDFFFFF ffff88807eb7d60c 7F2AE0DC9FFF ffff888028fb440c FFFFFFFFFFFFFFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 864.713492][T16046] 0-55557fdbcfff: node ffff88803614d800 depth 1 type 1 parent ffff88807eb7da06 contents: 0000000000000000 110C22FFFF ffff88804ce66780 110E22FFFF 0000000000000000 1B2E41FFFF ffff88804ce668c0 1B2E45FFFF 0000000000000000 1FFFFFFFEFFF ffff88804ce66a00 1FFFFFFFFFFF ffff888029c448c0 20000028FFFF ffff888029c44dc0 200000293FFF ffff888029c44b40 200000723FFF 0000000000000000 200000727FFF ffff888029c44640 2000007FFFFF ffff888034889500 200000FFFFFF ffff88804ce66c80 200001000FFF 0000000000000000 55557FD9AFFF ffff88804ce66dc0 55557FDBCFFF 000000000000000e [ 864.777313][T16046] 0-110c22ffff: 0000000000000000 [ 864.783888][T16046] 110c230000-110e22ffff: ffff88804ce66780 [ 864.790540][T16046] 110e230000-1b2e41ffff: 0000000000000000 [ 864.797050][T16046] 1b2e420000-1b2e45ffff: ffff88804ce668c0 [ 864.803238][T16046] 1b2e460000-1fffffffefff: 0000000000000000 [ 864.809741][T16046] 1ffffffff000-1fffffffffff: ffff88804ce66a00 [ 864.816375][T16046] 200000000000-20000028ffff: ffff888029c448c0 [ 864.824658][T16046] 200000290000-200000293fff: ffff888029c44dc0 [ 864.831466][ T5899] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 864.835053][T16046] 200000294000-200000723fff: ffff888029c44b40 [ 864.852224][T16046] 200000724000-200000727fff: 0000000000000000 [ 864.861331][T16046] 200000728000-2000007fffff: ffff888029c44640 [ 864.869462][T16046] 200000800000-200000ffffff: ffff888034889500 [ 864.876753][T16046] 200001000000-200001000fff: ffff88804ce66c80 [ 864.884456][T16046] 200001001000-55557fd9afff: 0000000000000000 [ 864.892214][T16046] 55557fd9b000-55557fdbcfff: ffff88804ce66dc0 [ 864.899837][T16046] 55557fdbd000-7f2adfdfffff: node ffff88802440f000 depth 1 type 1 parent ffff88807eb7da0e contents: ffff888059e35b40 55557FDCEFFF 0000000000000000 7F2ADDDF6FFF ffff888059e358c0 7F2ADDDF7FFF ffff888059e35640 7F2ADE5F7FFF ffff888059e35280 7F2ADE5F8FFF ffff888059e35000 7F2ADEDF8FFF ffff888059e35140 7F2ADEDFAFFF ffff888059e35a00 7F2ADF1FAFFF ffff888059e35780 7F2ADF1FCFFF ffff88802a1958c0 7F2ADF5FCFFF ffff8880362af3c0 7F2ADF5FEFFF ffff8880362af500 7F2ADF9FEFFF ffff8880362af780 7F2ADF9FFFFF ffff8880362af140 7F2ADFDFFFFF 0000000000000000 0 000000000000000d [ 864.954574][T16046] 55557fdbd000-55557fdcefff: ffff888059e35b40 [ 864.962122][T16046] 55557fdcf000-7f2adddf6fff: 0000000000000000 [ 864.970918][T16046] 7f2adddf7000-7f2adddf7fff: ffff888059e358c0 [ 864.979477][T16046] 7f2adddf8000-7f2ade5f7fff: ffff888059e35640 [ 864.994206][T16046] 7f2ade5f8000-7f2ade5f8fff: ffff888059e35280 [ 865.007914][T11904] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 865.032861][T16046] 7f2ade5f9000-7f2adedf8fff: ffff888059e35000 [ 865.043624][T11904] usb 3-1: device descriptor read/8, error -71 [ 865.301596][T16046] 7f2adedf9000-7f2adedfafff: ffff888059e35140 [ 865.353081][T16059] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2707'. [ 865.384949][T16046] 7f2adedfb000-7f2adf1fafff: ffff888059e35a00 [ 865.407581][T16046] 7f2adf1fb000-7f2adf1fcfff: ffff888059e35780 [ 865.414299][T16046] 7f2adf1fd000-7f2adf5fcfff: ffff88802a1958c0 [ 865.422204][T16046] 7f2adf5fd000-7f2adf5fefff: ffff8880362af3c0 [ 865.430735][T16046] 7f2adf5ff000-7f2adf9fefff: ffff8880362af500 [ 865.440958][T16046] 7f2adf9ff000-7f2adf9fffff: ffff8880362af780 [ 865.449473][T16046] 7f2adfa00000-7f2adfdfffff: ffff8880362af140 [ 865.456642][T16046] 7f2adfe00000-7f2ae0dc9fff: node ffff88807eb7d600 depth 1 type 1 parent ffff88807eb7da16 contents: ffff8880362af8c0 7F2ADFE48FFF ffff8880362afa00 7F2ADFFEAFFF ffff8880362af280 7F2AE0097FFF ffff888034889dc0 7F2AE017CFFF ffff888034889c80 7F2AE0185FFF 0000000000000000 7F2AE018FFFF ffff888034889b40 7F2AE0CEDFFF 0000000000000000 7F2AE0DC8FFF ffff888079d3ec80 7F2AE0DC9FFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 865.641337][T16052] vhci_hcd: connection reset by peer [ 865.643219][ T5860] usb 5-1: USB disconnect, device number 108 [ 865.658760][ T8357] vhci_hcd: stop threads [ 865.664966][T11904] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 865.679605][T16046] 7f2adfe00000-7f2adfe48fff: ffff8880362af8c0 [ 865.684151][ T8357] vhci_hcd: release socket [ 865.687607][T11904] usb 3-1: device descriptor read/8, error -71 [ 865.735010][ T5898] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 865.839542][T11904] usb usb3-port1: unable to enumerate USB device [ 865.931324][ T5898] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 866.110222][ T8357] vhci_hcd: disconnect device [ 866.138686][ T5898] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 866.155550][T16046] 7f2adfe49000-7f2adffeafff: ffff8880362afa00 [ 866.164855][T16046] 7f2adffeb000-7f2ae0097fff: ffff8880362af280 [ 866.166190][ T5898] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 866.181114][T16046] 7f2ae0098000-7f2ae017cfff: ffff888034889dc0 [ 866.188555][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.210397][T16070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12592 sclass=netlink_route_socket pid=16070 comm=syz.2.2711 [ 866.339574][ T30] audit: type=1400 audit(1746064713.090:4639): avc: denied { map } for pid=16069 comm="syz.2.2711" path="socket:[48800]" dev="sockfs" ino=48800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 866.421831][T16046] 7f2ae017d000-7f2ae0185fff: ffff888034889c80 [ 866.431731][ T5898] usb 2-1: usb_control_msg returned -32 [ 866.433620][T16046] 7f2ae0186000-7f2ae018ffff: 0000000000000000 [ 866.459278][T16046] 7f2ae0190000-7f2ae0cedfff: ffff888034889b40 [ 866.472237][ T5898] usbtmc 2-1:16.0: can't read capabilities [ 866.589193][T16046] 7f2ae0cee000-7f2ae0dc8fff: 0000000000000000 [ 866.696557][T16046] 7f2ae0dc9000-7f2ae0dc9fff: ffff888079d3ec80 [ 866.703561][T16046] 7f2ae0dca000-ffffffffffffffff: node ffff888028fb4400 depth 1 type 1 parent ffff88807eb7da1e contents: ffff888079d3e640 7F2AE0DE9FFF ffff888034c0a3c0 7F2AE0DEAFFF ffff8880326f2dc0 7F2AE0E0AFFF ffff888034889a00 7F2AE0E0EFFF ffff8880348898c0 7F2AE0E10FFF ffff888034889780 7F2AE0E12FFF 0000000000000000 7FFD18EF9FFF ffff888034889640 7FFD18F1AFFF 0000000000000000 FFFFFFFFFFFFFFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 866.849704][T16077] fuse: Bad value for 'fd' [ 867.312871][T16046] 7f2ae0dca000-7f2ae0de9fff: ffff888079d3e640 [ 867.341093][T16046] 7f2ae0dea000-7f2ae0deafff: ffff888034c0a3c0 [ 867.483615][T16046] 7f2ae0deb000-7f2ae0e0afff: ffff8880326f2dc0 [ 867.630631][T16046] 7f2ae0e0b000-7f2ae0e0efff: ffff888034889a00 [ 867.659973][ T5898] usb 2-1: USB disconnect, device number 35 [ 867.668249][T16046] 7f2ae0e0f000-7f2ae0e10fff: ffff8880348898c0 [ 867.699257][T16046] 7f2ae0e11000-7f2ae0e12fff: ffff888034889780 [ 867.717023][T16046] 7f2ae0e13000-7ffd18ef9fff: 0000000000000000 [ 867.723563][T16046] 7ffd18efa000-7ffd18f1afff: ffff888034889640 [ 867.738393][T16046] 7ffd18f1b000-ffffffffffffffff: 0000000000000000 [ 867.877666][ T30] audit: type=1400 audit(1746064714.620:4640): avc: denied { read } for pid=5165 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 867.901775][T16046] ------------[ cut here ]------------ [ 867.907659][T16046] WARNING: CPU: 0 PID: 16046 at mm/vma.c:768 vma_merge_existing_range+0x5d1/0x1cd0 [ 867.914011][ T30] audit: type=1400 audit(1746064714.620:4641): avc: denied { search } for pid=5165 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 867.917064][T16046] Modules linked in: [ 867.941730][ T5860] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 867.943822][T16046] CPU: 0 UID: 0 PID: 16046 Comm: syz.0.2705 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 867.954573][ T30] audit: type=1400 audit(1746064714.630:4642): avc: denied { append } for pid=5165 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 867.963750][T16046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 867.963780][T16046] RIP: 0010:vma_merge_existing_range+0x5d1/0x1cd0 [ 867.963826][T16046] Code: 00 00 00 48 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 ef 0b aa ff 48 c7 c6 80 d3 9b 8b 48 89 df e8 90 bb f2 ff 90 <0f> 0b 90 e9 9d fc ff ff e8 d2 0b aa ff 48 8b 54 24 20 48 b8 00 00 [ 867.963843][T16046] RSP: 0018:ffffc90005017b20 EFLAGS: 00010293 [ 867.963861][T16046] RAX: 0000000000000000 RBX: ffffc90005017c80 RCX: ffffffff8b62f713 [ 868.024578][ T30] audit: type=1400 audit(1746064714.630:4643): avc: denied { open } for pid=5165 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 868.030136][T16046] RDX: ffff888036164880 RSI: ffffffff82112520 RDI: 0000000000000006 [ 868.030153][T16046] RBP: ffff888029c44640 R08: 0000000000000006 R09: ffffffffffffffff [ 868.030164][T16046] R10: ffffffffffffffff R11: 000000000000d5c0 R12: 0000200000800000 [ 868.030175][T16046] R13: ffffc90005017ca0 R14: ffff888029c44640 R15: 0000200000728000 [ 868.030187][T16046] FS: 00007f2ae0e0a6c0(0000) GS:ffff8881249e2000(0000) knlGS:0000000000000000 [ 868.030203][T16046] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 868.030215][T16046] CR2: 0000564a279cf680 CR3: 00000000310b1000 CR4: 00000000003526f0 [ 868.030226][T16046] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 868.030237][T16046] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 868.030248][T16046] Call Trace: [ 868.030256][T16046] [ 868.030271][T16046] ? irqentry_exit+0x3b/0x90 [ 868.030311][T16046] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 868.030350][T16046] vma_modify+0x87/0x510 [ 868.030373][T16046] vma_modify_flags+0x212/0x2d0 [ 868.030399][T16046] ? __pfx_vma_modify_flags+0x10/0x10 [ 868.030428][T16046] ? lockdep_hardirqs_on+0x7c/0x110 [ 868.041537][ T30] audit: type=1400 audit(1746064714.630:4644): avc: denied { getattr } for pid=5165 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 868.061296][T16046] mlock_fixup+0x27c/0xe50 [ 868.061367][T16046] apply_mlockall_flags+0x2d4/0x470 [ 868.061393][T16046] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 868.061418][T16046] ? __pfx___might_resched+0x10/0x10 [ 868.061452][T16046] ? __pfx_down_write_killable+0x10/0x10 [ 868.168855][ T5860] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 868.172099][T16046] ? __pfx_ksys_write+0x10/0x10 [ 868.199362][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.199708][T16046] ? rcu_is_watching+0x12/0xc0 [ 868.205252][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.205307][ T5860] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 868.206915][ T5860] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 868.211711][T16046] __do_sys_munlockall+0xc5/0x280 [ 868.222584][ T5860] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 868.222640][ T5860] usb 4-1: Manufacturer: syz [ 868.233908][T16046] do_syscall_64+0xcd/0x260 [ 868.244318][ T5860] usb 4-1: config 0 descriptor?? [ 868.249815][T16046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.321615][T16046] RIP: 0033:0x7f2adff8e969 [ 868.326658][T16046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 868.346464][T16046] RSP: 002b:00007f2ae0e0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 868.354987][T16046] RAX: ffffffffffffffda RBX: 00007f2ae01b5fa0 RCX: 00007f2adff8e969 [ 868.363075][T16046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 868.371164][T16046] RBP: 00007f2ae0e0a090 R08: 0000000000000000 R09: 0000000000000000 [ 868.379531][T16046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.387932][T16046] R13: 0000000000000000 R14: 00007f2ae01b5fa0 R15: 00007ffd18f189f8 [ 868.396173][T16046] [ 868.399323][T16046] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 868.406664][T16046] CPU: 0 UID: 0 PID: 16046 Comm: syz.0.2705 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 868.418779][T16046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 868.428848][T16046] Call Trace: [ 868.432132][T16046] [ 868.435061][T16046] dump_stack_lvl+0x3d/0x1f0 [ 868.439738][T16046] panic+0x71c/0x800 [ 868.443725][T16046] ? __pfx_panic+0x10/0x10 [ 868.448185][T16046] ? show_trace_log_lvl+0x29b/0x3e0 [ 868.453414][T16046] ? check_panic_on_warn+0x1f/0xb0 [ 868.458754][T16046] ? vma_merge_existing_range+0x5d1/0x1cd0 [ 868.464672][T16046] check_panic_on_warn+0xab/0xb0 [ 868.469676][T16046] __warn+0xf6/0x3c0 [ 868.473744][T16046] ? vma_merge_existing_range+0x5d1/0x1cd0 [ 868.479670][T16046] report_bug+0x3c3/0x580 [ 868.484021][T16046] ? vma_merge_existing_range+0x5d1/0x1cd0 [ 868.489860][T16046] handle_bug+0x184/0x210 [ 868.494208][T16046] exc_invalid_op+0x17/0x50 [ 868.498732][T16046] asm_exc_invalid_op+0x1a/0x20 [ 868.503599][T16046] RIP: 0010:vma_merge_existing_range+0x5d1/0x1cd0 [ 868.510118][T16046] Code: 00 00 00 48 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 ef 0b aa ff 48 c7 c6 80 d3 9b 8b 48 89 df e8 90 bb f2 ff 90 <0f> 0b 90 e9 9d fc ff ff e8 d2 0b aa ff 48 8b 54 24 20 48 b8 00 00 [ 868.529771][T16046] RSP: 0018:ffffc90005017b20 EFLAGS: 00010293 [ 868.535862][T16046] RAX: 0000000000000000 RBX: ffffc90005017c80 RCX: ffffffff8b62f713 [ 868.543880][T16046] RDX: ffff888036164880 RSI: ffffffff82112520 RDI: 0000000000000006 [ 868.551868][T16046] RBP: ffff888029c44640 R08: 0000000000000006 R09: ffffffffffffffff [ 868.560054][T16046] R10: ffffffffffffffff R11: 000000000000d5c0 R12: 0000200000800000 [ 868.568123][T16046] R13: ffffc90005017ca0 R14: ffff888029c44640 R15: 0000200000728000 [ 868.576161][T16046] ? mt_dump_node+0xcd3/0x16d0 [ 868.581031][T16046] ? vma_merge_existing_range+0x5d0/0x1cd0 [ 868.586940][T16046] ? irqentry_exit+0x3b/0x90 [ 868.591550][T16046] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 868.597655][T16046] vma_modify+0x87/0x510 [ 868.601911][T16046] vma_modify_flags+0x212/0x2d0 [ 868.606780][T16046] ? __pfx_vma_modify_flags+0x10/0x10 [ 868.612282][T16046] ? lockdep_hardirqs_on+0x7c/0x110 [ 868.617493][T16046] mlock_fixup+0x27c/0xe50 [ 868.621974][T16046] apply_mlockall_flags+0x2d4/0x470 [ 868.627228][T16046] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 868.632968][T16046] ? __pfx___might_resched+0x10/0x10 [ 868.638375][T16046] ? __pfx_down_write_killable+0x10/0x10 [ 868.644015][T16046] ? __pfx_ksys_write+0x10/0x10 [ 868.648918][T16046] ? rcu_is_watching+0x12/0xc0 [ 868.653734][T16046] __do_sys_munlockall+0xc5/0x280 [ 868.658786][T16046] do_syscall_64+0xcd/0x260 [ 868.663308][T16046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.669234][T16046] RIP: 0033:0x7f2adff8e969 [ 868.673685][T16046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 868.693349][T16046] RSP: 002b:00007f2ae0e0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 868.701831][T16046] RAX: ffffffffffffffda RBX: 00007f2ae01b5fa0 RCX: 00007f2adff8e969 [ 868.709904][T16046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 868.717965][T16046] RBP: 00007f2ae0e0a090 R08: 0000000000000000 R09: 0000000000000000 [ 868.726018][T16046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.734119][T16046] R13: 0000000000000000 R14: 00007f2ae01b5fa0 R15: 00007ffd18f189f8 [ 868.742153][T16046] [ 868.745474][T16046] Kernel Offset: disabled [ 868.749881][T16046] Rebooting in 86400 seconds..