last executing test programs: 7.367019597s ago: executing program 4 (id=1942): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000005a40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005840)='1', 0x1}], 0x1, &(0x7f0000001480)=[@rights={{0x18, 0x1, 0x1, [r3, r3]}}], 0x18, 0x40044}}], 0x1, 0x4) lseek(r2, 0x8000000000000000, 0x4) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 6.20021237s ago: executing program 4 (id=1946): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, 0x0, 0x60) socket$kcm(0x10, 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_create(0x3, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x33, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x300, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = io_uring_setup(0x194e, &(0x7f00000003c0)={0x0, 0xd3d5, 0x400, 0x101, 0xf1}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = dup2(r5, r4) read$FUSE(r6, &(0x7f0000000f80)={0x2020}, 0x2020) bind$inet6(r0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score_adj\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5.560387842s ago: executing program 3 (id=1950): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) unshare(0x400) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1000) fsmount(r3, 0x1, 0x2) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0) 4.416275715s ago: executing program 3 (id=1954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mremap(&(0x7f0000dd7000/0x2000)=nil, 0x2000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_open_dev$media(&(0x7f00000000c0), 0x800, 0x10042) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x4004480d, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r5, &(0x7f0000001300)={0x2020}, 0x2020) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readlink(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@deltclass={0x24, 0x29, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xfff2, 0xb}, {0x8, 0xe}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x800) 4.415537888s ago: executing program 0 (id=1955): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000000fe00000000000800040001000000", 0x24) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:initrc_var_run_t:s0\x00', 0x26, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x8) dup(r4) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@cache_fscache}]}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r8, r7, 0x0, 0x3a) 4.34019176s ago: executing program 1 (id=1956): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000200000000a20000000000a03000000000000000000010000000900010073797a20000000003c000000092a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800"], 0x84}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000003000100ac1414000c0009"], 0x30}}, 0x0) 4.338233182s ago: executing program 4 (id=1957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x60000000}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1800, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x6e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, {[@eol]}}}}}}}, 0x0) 4.286080716s ago: executing program 1 (id=1958): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x4, &(0x7f00000003c0)=@framed={{}, [@jmp={0x5, 0x1, 0x8, 0x3, 0xa, 0xfffffffffffffff4, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) 3.352405526s ago: executing program 4 (id=1960): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) syz_usb_connect(0x2, 0x2d, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xd2, 0xcb, 0x14, 0x10, 0x8ca, 0x10, 0x90d6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd4, 0x45, 0xbb, 0x0, [], [{{0x9, 0x5, 0x88, 0x3}}]}}]}}]}}, 0x0) 3.351140056s ago: executing program 0 (id=1961): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4000003, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8, 0x0, 0x0, 0x900}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc0ffffff}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.288164066s ago: executing program 1 (id=1962): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e23, 0x8, @private0, 0x8}}, 0x80000000, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47f0"], 0x0) syz_usb_ep_read(r2, 0xf, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x909, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xcc, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0xb2, 0x1, 0x3, 0x1, 0x6, 0x13, {0x9, 0x21, 0x4b, 0xd3, 0x1, {0x22, 0x6d}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0xf9, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x2, 0xcc, 0x80}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x3, 0x2, 0xe, 0xff, 0xdd}, 0x20, &(0x7f0000000080)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x5, 0xf07, 0x2, [0xff3f00, 0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xc, 0x6, 0x64d7}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x420}}]}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}]}, &(0x7f0000000080)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e23, 0x8, @private0, 0x8}}, 0x80000000, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47f0"], 0x0) (async) syz_usb_ep_read(r2, 0xf, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x909, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xcc, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0xb2, 0x1, 0x3, 0x1, 0x6, 0x13, {0x9, 0x21, 0x4b, 0xd3, 0x1, {0x22, 0x6d}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0xf9, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x2, 0xcc, 0x80}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x3, 0x2, 0xe, 0xff, 0xdd}, 0x20, &(0x7f0000000080)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x5, 0xf07, 0x2, [0xff3f00, 0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xc, 0x6, 0x64d7}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x420}}]}) (async) 3.287723307s ago: executing program 0 (id=1963): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x9e}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7c, 0x2, 0x2, 0x3, 0x2}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 3.225035166s ago: executing program 0 (id=1965): futex_waitv(&(0x7f0000001600)=[{0x8, 0x0, 0x82}, {0x8000, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0x40, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0xfffffffffffff800, 0x0, 0x2}, {0xf9, 0x0, 0x2}, {0x400, 0x0, 0x2}, {0xa, 0x0, 0x2}, {0x9a, 0x0}, {0x5, 0x0, 0x2}, {0x8, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0xfffffffffffffffd, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x2}, {0x1, 0x0, 0x82}, {0x42da45c8, 0x0, 0x82}, {0x5, 0x0, 0x2}, {0x100000000, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x4f6a0000000, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0xffffffffffffffff, 0x0, 0x82}, {0x7, 0x0, 0x2}, {0xfde0, 0x0, 0x2}, {0x5, 0x0}, {0x5, 0x0, 0x82}, {0xfffffffffffffffb, 0x0, 0x2}, {0xc45e, 0x0, 0x82}, {0xffffffffffff7fff, 0x0, 0x82}, {0xbf, 0x0, 0x82}, {0x6, 0x0, 0x2}, {0xfff, 0x0, 0x82}, {0x349, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0x5, 0x0, 0x80}, {0x1, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0x100, 0x0, 0x2}, {0x1, 0x0, 0x82}, {0xc1, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0x100000000, 0x0, 0x82}, {0xc, 0x0, 0x82}, {0x3e, 0x0, 0x2}, {0x3a8f, 0x0, 0x24fed80cbff1cd29}], 0x36, 0x0, 0x0, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x18, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0xc3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000340)={0x4, 0x0, 0x2, {0xc, @sliced={0x3, [0x0, 0x2, 0x324, 0xfff7, 0xffe, 0x0, 0x8a42, 0x9, 0x534, 0xbb5b, 0x8000, 0x3ff, 0xa, 0x3ff, 0xb, 0x0, 0x6f4, 0x2, 0x7fff, 0xc, 0x1000, 0x6, 0x8, 0x4, 0x1, 0x3, 0x2, 0xff, 0x7ce, 0x5, 0x0, 0xd, 0x5, 0x2, 0x80, 0x0, 0x1000, 0x6, 0x7, 0x1, 0x1, 0x2, 0x1000, 0x2, 0x2, 0xc6, 0x9, 0x7], 0x40}}}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x44, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 3.080493112s ago: executing program 1 (id=1967): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a000000000000003f0000001400050000000000000000000000000000000002"], 0x30}, 0x1, 0x11}, 0x0) 2.937037857s ago: executing program 3 (id=1968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfc9b, &(0x7f0000000000)=0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000028000/0x3000)=nil, 0x3000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') mkdir(0x0, 0xff0c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000003000200850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[], 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0xfffffffb, 0xf29, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0xfff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000000c0)={0x1, 0x6f, 0x9}) pread64(r7, 0x0, 0x20, 0xce2) syz_usb_connect(0x0, 0x2b, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r8, @ANYRES16=r9, @ANYBLOB="0125bd70000000000008000000180001801400020073797a5f74756e0000000000000000000c000280080003b80d000180275ca0d64cfedc7b6bc277e4640a5536cee72a567c7e9b068f5a36136c1e2607eb64d3a77b8653541cc2f8a4393c7791e1db2b44ee36544e7912e31d0ea1476b3ee87292f85882a2bd3820d664"], 0x38}, 0x1, 0x0, 0x0, 0x20004894}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) 2.736064661s ago: executing program 0 (id=1969): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x10102, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x1a3702, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) shmctl$IPC_RMID(0x0, 0xfeffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85513, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f00000003c0)={0x8, 0xa, 0x4, 0x400, 0x7fffffff, {0x0, 0xea60}, {0x5, 0x0, 0x1, 0xf0, 0x8, 0x24, "0a2d73da"}, 0x4, 0x4, {0xffffffffffffffff}, 0x3b8, 0x0, r3}) ioctl(r4, 0xfffffff7, &(0x7f0000000500)="9792c82b553db3ba85f236c481c6497669bfb60a1e5cdc627dff43feae19512008d301ee05aa680d8c5e11c5774808278a54fd8beef76569c3ee4d5d184c0e53cc324f88b41d238def8e3e8889b005c6e43e6764f5614c761ba4ac9cbd8b2293679d09352f2c92279b1746715cbee1e30914b39d995dceec3fcfa00d8d1ce50482e94f9ff53b6ad67dbcd566a736459639234232a542b6a046286a7d737a4944db7b198e165d9f72decf72879c6e861b8d2810f97c19e778283d21104e8447d05d74f62ea536e63890097af379e317df1882e250af61467ac05b80c0d6c879e758d65450271bf05e33ad7b1138376e") connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x0, 0x0, 0x0, 0x4000000}}}}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 2.282688862s ago: executing program 4 (id=1971): openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000180)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x22008}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0x2ad1}}]}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x22008}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0x2ad1}}]}]}]}, 0x48}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r5) sendmsg$NFC_CMD_DISABLE_SE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0xd, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) ptrace(0x8, r8) (async) ptrace(0x8, r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.192252089s ago: executing program 1 (id=1972): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000000fe00000000000800040001000000", 0x24) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:initrc_var_run_t:s0\x00', 0x26, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x8) dup(r4) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@cache_fscache}]}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r8, r7, 0x0, 0x3a) 2.060502893s ago: executing program 3 (id=1973): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="2400000012005f0214f9f407000904001f0000000000fe000000000008000400010000c0", 0x24) 1.739145732s ago: executing program 3 (id=1974): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x6, 0x80000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = dup(r8) openat$tun(0xffffffffffffff9c, 0x0, 0x4c0080, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x15, &(0x7f0000000100)=r9, 0x45) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@setlink={0x4c, 0x13, 0x1, 0x200000, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x20802, 0x4414}, [@IFLA_AF_SPEC={0x2c, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x14, 0x0, 0x0, 0x52}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}]}, 0x4c}, 0x1, 0x0, 0x40000}, 0x0) 1.718527683s ago: executing program 2 (id=1975): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0xa, 0x6, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'dummy0\x00', {0x2, 0x4e21, @broadcast}}) 1.152441856s ago: executing program 2 (id=1976): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0, 0xa000000}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 1.097291135s ago: executing program 0 (id=1977): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb304, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x25f3db9a964d73de, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xb, {[@main=@item_012={0x0, 0x0, 0xa}, @global=@item_4={0x3, 0x1, 0x5, "0300"}, @main=@item_4={0x3, 0x0, 0xa, "019e9740"}]}}, 0x0}, 0x0) r1 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0x9, 0xad}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0xe, 0x8}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xfb, 0x3, 0xb, 0x8, 0x3}, 0xda, &(0x7f0000000180)={0x5, 0xf, 0xda, 0x4, [@generic={0xa3, 0x10, 0xb, "91a1409563fe8304010e2f812b748e079f9dd3e660ddf63965e669bb6c14687d1cc375b0806a83a2266f12ba8fe7662133744ba400a9d47f2122698060af71ab3f5131548e55a8ec0bea03a9ce313a34cb11f1961d0932950e9bbf16ae150e48aa21254acc654c770c830ea9c8ec1c1d79fc3168251893246eb1ede6625bf91a40630a3dff91a222c2f0108aa0bc186431a236f8a7d2a606c65199adefed7c3e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xe, 0x5c, 0xed}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "1d54a5a140ca7280c4e1df674f0353f6"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "df6ec93e1636c9cf90721161c4694d04"}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x44e}}, {0x88, &(0x7f0000000280)=@string={0x88, 0x3, "92bc9104023317508fa02f96b4c27c95d90c4e48a1deea89544d936b2e97b75137ec63a39fa8c5987cc82dc18802af5eb463d84431ad0839f0104907b0d4c37d8858cdb9b8e2d5bc690114db380daeb0f1f971ad603fe829af499bf2cf0d1a429b6c5b6e35f2862ae5fe1e796ee9ba0ba09918e227a8056524bf7f5439cfd74aa0d04d7ebe96"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x403}}]}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000780), 0x400000, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000940)={@private1, 0x0}, &(0x7f0000000980)=0x14) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000b00)={0x0, 0xffffffffffffffff}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r7, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) dup3(r7, r9, 0x6700000000000000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x8010, r7, 0xc4f52000) r10 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r10, 0x0) fallocate(r10, 0x0, 0x0, 0x1000f4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)='%-5lx \x00'}, 0x20) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x18, 0x10, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffb}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000840)='syzkaller\x00', 0x9e, 0xad, &(0x7f0000000880)=""/173, 0x41000, 0x1, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000a00)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x9, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000d40)=[r5, r6, r10, 0xffffffffffffffff, r11, 0x1, r12, r13], &(0x7f0000000d80)=[{0x3, 0x2, 0xd, 0x3}, {0x0, 0x1, 0x9, 0x9}, {0x5, 0x4, 0x9, 0x2}, {0x3, 0x4, 0x10, 0x5}, {0x5, 0x2, 0xc, 0x1}, {0x5, 0x2, 0x10, 0x3}, {0x4, 0x1, 0x5, 0x6}, {0x5, 0x4, 0x7, 0x6}], 0x10, 0x8, @void, @value}, 0x94) syz_usb_control_io$printer(r1, &(0x7f0000000480)={0x14, &(0x7f00000003c0)={0x20, 0xa, 0x9, {0x9, 0x9, "46e4fbdc3beed7"}}, &(0x7f0000000400)={0x0, 0x3, 0x69, @string={0x69, 0x3, "6bf6f2efd47d3e6bd3a24a99768539001e051d627176256428b393b7df0f7dc8b693cf2ba53f9e76daf39ffdd72bd64b4273d303b00496f9053c53e4600074fee2bffed07ac01c5a3d602f93060514871108a88921429e7b212bca699697d3f744280593730704"}}}, &(0x7f0000000740)={0x34, &(0x7f00000004c0)={0x0, 0x5, 0xa8, "08b86f7c8a3c054d7480db0b621f5d5d8aef01b19a77762b82486ac6be44a4f4ce7bedb6cb7eb490eb70b076b4de00841851a2856eed7b2f3b272423a29a0f77b5cacf31b9883dd9c9d34aba51893055cd901e44aa9bdc9aaa818dc983d205d94ce0f3718703d34e3b118282e83430d4a453797010e3070ea5fc8d753096ea4d5016172608732399d18cd345b1cb0ea736eed106c63e98a5f69b7456e45d8c0ff907134c0692b9f8"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xc}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000600)={0x20, 0x0, 0xb6, {0xb4, "a4fb2df6c5e7fcf54338630d27c7d90159d04617ae4db0d394532659e916c6f4a07865a5a019b7a6a220c7e2acd60e1e818344619cea71cb0ab1743d04222ce536c5f57a1dc1c6bd8cc3762b244119623030063da1926e3d8e4982e1fd4f1de4b5c4842f016d1bc19d90eeb2d695479f0bf112a8ddf50d7485418c4f7a35cbb90506d1113ca8e8b848d6e35e1773efae478cb7c452384fd2f34ba3db8002291bc35227984ebcb8c70d1fc80aa84d3b845f42fd55"}}, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0xb}, &(0x7f0000000700)={0x20, 0x0, 0x1, 0x8}}) 597.225709ms ago: executing program 1 (id=1978): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = fsopen(0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r1, r3, 0x1, 0x0, @void}, 0x10) sendmsg$inet6(r0, 0x0, 0xb00) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) mount$9p_fd(0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) vmsplice(r4, &(0x7f0000000000), 0x0, 0x0) 517.644754ms ago: executing program 4 (id=1979): r0 = socket(0x848000000015, 0x805, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x86) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt(r2, 0x8, 0xb0b0, &(0x7f00000001c0)=""/179, &(0x7f0000000100)=0xb3) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) epoll_create1(0x80000) syz_open_pts(r1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, &(0x7f0000000480)={&(0x7f0000000380)=@newsa={0xf8, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e24, 0xb524, 0x4e23, 0x2, 0xa, 0x20, 0xa0, 0x5e}, {@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4d3, 0x33}, @in6=@rand_addr=' \x01\x00', {0x1000, 0x0, 0x9, 0x7fffffff, 0x0, 0x2, 0x81, 0x81}, {0x8, 0x7, 0x100, 0x1}, {0x2, 0x8cad, 0xeb87}, 0x70bd25, 0x3503, 0x2, 0x1, 0x97, 0x6}, [@etimer_thresh={0x8, 0xc, 0xac18}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4800}, 0x20000040) syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') syz_open_dev$vcsu(&(0x7f0000000140), 0x7, 0x400) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg2\x00'}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000580)={0x8, 'vlan1\x00', {'macvtap0\x00'}, 0x5b}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffbfffffffe}, 0x0) mknod(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) faccessat(r4, &(0x7f0000000140)='./file0\x00', 0x14) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000002c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x200) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 242.385773ms ago: executing program 3 (id=1980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, 0x0, 0x10104, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x6c790d25}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000040)=0x800, 0x4) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f00000000c0)=0x96, 0x4) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r5, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCINQ(r6, 0x8905, &(0x7f00000000c0)) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x4d1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$FIONCLEX(r2, 0x5450) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r10, {0xf2ff, 0x6}, {}, {0x7, 0xa}}}, 0x24}}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='xfs\x00', 0x208000, 0x0) 122.3493ms ago: executing program 2 (id=1981): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1004, &(0x7f0000000180)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) 86.340345ms ago: executing program 2 (id=1982): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001200050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012"], 0x34}}, 0x0) 566.627µs ago: executing program 2 (id=1983): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800e00010069703665727370616e00000024000280140005000000000000000000000100000000000105001629020000000400120008"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 2 (id=1984): set_mempolicy(0x8006, &(0x7f0000000000)=0xfff, 0x7d) clock_settime(0x0, &(0x7f0000000180)={0x77359400}) clock_getres(0x0, &(0x7f0000000080)={0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/42, 0x2a}], 0x1) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000100), 0x12) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_int(r5, 0x0, 0x6, 0x0, &(0x7f0000000200)) write(r4, 0x0, 0x0) execveat(r1, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000440)={[&(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000580)='\xdb\x9d\a\xb3\x81\xa1\x89\x10\xea\xe9H\xe9\x81\xf7rq\xa1\x13\x9bK\xb5\x9dj\x99G\x96K\xffw\x7fd\xeb\x00I\xf0W\xaey\xca\xb4\x17\xa6:\\\xe4$\xf2\x7f\x11\x05\x8c_ay1\xff\xb9\xe97\xf1\xad}d\b6C\x9b\xd2\xb1\xe2\xea\xc0\x956}\xc4}\x19\x13\x83k\xa5\xa6u>\ne\xa0P^\x9b\xe4\xc2W\xf9\x98\xa7\x1eM\xd6\x8e\x11\x8b\x94D\x81?\xe4\xab\x97t\"\xc9z\xfbB\xab/E\xd1\x9c:\xe3\x1f\x1dWi\rS\xd6\x9c\a\xfb^\x86\x95\x9a\x8aI\x80+\x82\xde2\x97\x15us\x93\xfb\x8d*\"\xfc\x98\f3`\xa1;\xee\xdc\xeaF\xa0\xf5\xed~\xb1y\x1e\xcegx\xb3\xda\x9c\xfb\xe8j\xa5\xbe\x84\x83)4\xddD@\xdc\x95', &(0x7f00000003c0)='0\xbf\xdb\xedLwf\xfaosiult\x00'/25, &(0x7f0000000400)='system.posix_acl_default\x00']}, &(0x7f0000000500)={[&(0x7f0000000480)=']\\\xc2[#\x00', &(0x7f00000004c0)='.\x00']}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) set_mempolicy(0x1, &(0x7f0000000540)=0x8, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYRES64=r0], 0x8c}}, 0x2000808c) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)=0x3) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r9, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x1407, 0x20, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x8000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]}) kernel console output (not intermixed with test programs): y 0, space 0, times 0 [ 287.452833][ T8989] CPU: 0 UID: 0 PID: 8989 Comm: syz.3.841 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 287.452860][ T8989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 287.452869][ T8989] Call Trace: [ 287.452874][ T8989] [ 287.452880][ T8989] dump_stack_lvl+0x16c/0x1f0 [ 287.452905][ T8989] should_fail_ex+0x512/0x640 [ 287.452924][ T8989] should_failslab+0xc2/0x120 [ 287.452940][ T8989] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 287.452955][ T8989] ? skb_clone+0x190/0x3f0 [ 287.452975][ T8989] skb_clone+0x190/0x3f0 [ 287.452992][ T8989] netlink_deliver_tap+0xabd/0xd30 [ 287.453021][ T8989] netlink_unicast+0x5df/0x7f0 [ 287.453042][ T8989] ? __pfx_netlink_unicast+0x10/0x10 [ 287.453066][ T8989] netlink_sendmsg+0x8d1/0xdd0 [ 287.453086][ T8989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.453119][ T8989] ____sys_sendmsg+0xa95/0xc70 [ 287.453142][ T8989] ? copy_msghdr_from_user+0x10a/0x160 [ 287.453158][ T8989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.453180][ T8989] ? __pfx__kstrtoull+0x10/0x10 [ 287.453203][ T8989] ___sys_sendmsg+0x134/0x1d0 [ 287.453220][ T8989] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.453245][ T8989] ? find_held_lock+0x2b/0x80 [ 287.453279][ T8989] __sys_sendmmsg+0x200/0x420 [ 287.453298][ T8989] ? __pfx___sys_sendmmsg+0x10/0x10 [ 287.453320][ T8989] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 287.453347][ T8989] ? fput+0x70/0xf0 [ 287.453365][ T8989] ? ksys_write+0x1b9/0x240 [ 287.453377][ T8989] ? __pfx_ksys_write+0x10/0x10 [ 287.453387][ T8989] ? rcu_is_watching+0x12/0xc0 [ 287.453409][ T8989] __x64_sys_sendmmsg+0x9c/0x100 [ 287.453425][ T8989] ? lockdep_hardirqs_on+0x7c/0x110 [ 287.453442][ T8989] do_syscall_64+0xcd/0x260 [ 287.453462][ T8989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.453476][ T8989] RIP: 0033:0x7f06ceb8e169 [ 287.453487][ T8989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.453500][ T8989] RSP: 002b:00007f06cf973038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 287.453514][ T8989] RAX: ffffffffffffffda RBX: 00007f06cedb5fa0 RCX: 00007f06ceb8e169 [ 287.453523][ T8989] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 287.453531][ T8989] RBP: 00007f06cf973090 R08: 0000000000000000 R09: 0000000000000000 [ 287.453540][ T8989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.453548][ T8989] R13: 0000000000000000 R14: 00007f06cedb5fa0 R15: 00007ffed1118788 [ 287.453566][ T8989] [ 287.787934][ T30] audit: type=1400 audit(1744798864.281:600): avc: denied { bind } for pid=8967 comm="syz.4.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 287.809064][ T8968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.818390][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.845'. [ 287.821537][ T8968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.858840][ T5940] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 287.876124][ T8999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.884856][ T8995] bridge_slave_1: left allmulticast mode [ 287.890563][ T5940] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 287.903843][ T8999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.911890][ T8995] bridge_slave_1: left promiscuous mode [ 287.917708][ T5940] asix 5-1:0.251: probe with driver asix failed with error -71 [ 287.947633][ T8995] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.958362][ T5940] usb 5-1: USB disconnect, device number 38 [ 288.032332][ T8995] bridge_slave_0: left allmulticast mode [ 288.038848][ T8995] bridge_slave_0: left promiscuous mode [ 288.044948][ T8995] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.892040][ T5940] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 289.605682][ T5940] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 289.701558][ T5940] usb 5-1: config 0 has no interface number 0 [ 289.773097][ T5940] usb 5-1: too many endpoints for config 0 interface 34 altsetting 28: 210, using maximum allowed: 30 [ 289.850956][ T5940] usb 5-1: config 0 interface 34 altsetting 28 has 0 endpoint descriptors, different from the interface descriptor's value: 210 [ 289.906769][ T5940] usb 5-1: config 0 interface 34 has no altsetting 0 [ 289.943496][ T5940] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 289.962254][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.984479][ T5940] usb 5-1: Product: syz [ 289.991701][ T5940] usb 5-1: Manufacturer: syz [ 289.996786][ T5940] usb 5-1: SerialNumber: syz [ 290.024270][ T5940] usb 5-1: config 0 descriptor?? [ 291.080727][ T9038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.855'. [ 292.167756][ T5940] gspca_main: sq930x-2.14.0 probing 2770:930c [ 292.179667][ T9049] Failed to initialize the IGMP autojoin socket (err -2) [ 292.187842][ T5940] gspca_sq930x: reg_r 001f failed -71 [ 292.198667][ T5940] sq930x 5-1:0.34: probe with driver sq930x failed with error -71 [ 292.218289][ T5940] usb 5-1: USB disconnect, device number 39 [ 292.246290][ T30] audit: type=1400 audit(1744798868.741:601): avc: denied { setopt } for pid=9050 comm="syz.4.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 293.389001][ T9067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.407878][ T9067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.447767][ T9067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.456538][ T9067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.395849][ T9084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.405561][ T9084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.778673][ T9088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.870382][ T9088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.272568][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 296.512645][ T9] usb 5-1: config 171 has an invalid interface number: 109 but max is 0 [ 296.549927][ T9] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 296.589914][ T9] usb 5-1: config 171 has no interface number 0 [ 296.650095][ T9] usb 5-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 296.699605][ T9] usb 5-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 296.746359][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 296.756214][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.858869][ T9] usb 5-1: Product: syz [ 296.866015][ T9] usb 5-1: Manufacturer: syz [ 296.870850][ T9] usb 5-1: SerialNumber: syz [ 296.902540][ T9092] raw-gadget.8 gadget.4: fail, usb_ep_enable returned -22 [ 297.115941][ T9] ath6kl: Failed to submit usb control message: -71 [ 297.195488][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 297.351347][ T9] ath6kl: Unable to send get target info: -71 [ 297.407153][ T9] ath6kl: Failed to init ath6kl core: -71 [ 297.419066][ T9] ath6kl_usb 5-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 297.448551][ T9] usb 5-1: USB disconnect, device number 40 [ 298.749623][ T30] audit: type=1400 audit(1744798875.241:602): avc: denied { setopt } for pid=9123 comm="syz.3.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 298.863637][ T30] audit: type=1400 audit(1744798875.351:603): avc: denied { read } for pid=9123 comm="syz.3.884" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 298.976655][ T30] audit: type=1400 audit(1744798875.351:604): avc: denied { open } for pid=9123 comm="syz.3.884" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 299.134600][ T30] audit: type=1326 audit(1744798875.501:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9129 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d038e169 code=0x7ffc0000 [ 299.158552][ T30] audit: type=1326 audit(1744798875.501:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9129 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d038e169 code=0x7ffc0000 [ 299.196269][ T30] audit: type=1326 audit(1744798875.521:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9129 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f63d038e169 code=0x7ffc0000 [ 299.203481][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.887'. [ 299.297094][ T30] audit: type=1326 audit(1744798875.521:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9129 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d038e169 code=0x7ffc0000 [ 299.899815][ T30] audit: type=1326 audit(1744798875.521:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9129 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f63d038e169 code=0x7ffc0000 [ 299.924858][ T9139] netlink: 'syz.3.887': attribute type 10 has an invalid length. [ 299.933266][ T30] audit: type=1326 audit(1744798875.521:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9129 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d038e169 code=0x7ffc0000 [ 299.973328][ T30] audit: type=1400 audit(1744798875.521:611): avc: denied { write } for pid=9129 comm="syz.0.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 299.973892][ T9139] team0: Device veth1_vlan is up. Set it down before adding it as a team port [ 300.158449][ T9153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.176965][ T9155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.181670][ T9153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.217270][ T9155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.641512][ T5872] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 300.773048][ T9159] warning: `syz.1.892' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 300.821379][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 300.828947][ T5872] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 300.839824][ T5872] usb 5-1: config 0 has no interface number 0 [ 300.901855][ T5872] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 300.910934][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.919611][ T5872] usb 5-1: Product: syz [ 301.012193][ T5872] usb 5-1: Manufacturer: syz [ 301.016869][ T5872] usb 5-1: SerialNumber: syz [ 301.031631][ T5872] usb 5-1: config 0 descriptor?? [ 301.043700][ T5872] smsc95xx v2.0.0 [ 301.246513][ T5872] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 301.257549][ T5872] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 301.446376][ T9170] netlink: 'syz.0.897': attribute type 1 has an invalid length. [ 301.466702][ T9170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.477086][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 302.632620][ T5872] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 302.663884][ T5872] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 302.724695][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'. [ 302.777777][ T5872] usb 5-1: USB disconnect, device number 41 [ 302.864527][ T9199] netlink: 32 bytes leftover after parsing attributes in process `syz.2.906'. [ 304.106876][ T5940] Process accounting resumed [ 304.212335][ T9227] Failed to initialize the IGMP autojoin socket (err -2) [ 305.455002][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 305.455015][ T30] audit: type=1400 audit(1744798881.941:645): avc: denied { bind } for pid=9253 comm="syz.2.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 309.277037][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.285676][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.631790][ T9325] netlink: 'syz.2.943': attribute type 4 has an invalid length. [ 311.648531][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.949'. [ 312.130061][ T9346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.161590][ T9346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.198518][ T9346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.212506][ T9346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.223439][ T9346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.232446][ T9346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.344430][ T9351] 9pnet_fd: Insufficient options for proto=fd [ 312.352140][ T9346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.360597][ T9346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.542584][ T9356] FAULT_INJECTION: forcing a failure. [ 312.542584][ T9356] name failslab, interval 1, probability 0, space 0, times 0 [ 312.571291][ T9356] CPU: 0 UID: 0 PID: 9356 Comm: syz.1.954 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 312.571316][ T9356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 312.571326][ T9356] Call Trace: [ 312.571332][ T9356] [ 312.571339][ T9356] dump_stack_lvl+0x16c/0x1f0 [ 312.571369][ T9356] should_fail_ex+0x512/0x640 [ 312.571388][ T9356] ? fs_reclaim_acquire+0xae/0x150 [ 312.571413][ T9356] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 312.571437][ T9356] should_failslab+0xc2/0x120 [ 312.571456][ T9356] __kmalloc_noprof+0xd2/0x510 [ 312.571479][ T9356] tomoyo_realpath_from_path+0xc2/0x6e0 [ 312.571504][ T9356] ? tomoyo_profile+0x47/0x60 [ 312.571523][ T9356] tomoyo_path_number_perm+0x245/0x580 [ 312.571542][ T9356] ? tomoyo_path_number_perm+0x237/0x580 [ 312.571565][ T9356] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 312.571587][ T9356] ? find_held_lock+0x2b/0x80 [ 312.571631][ T9356] ? find_held_lock+0x2b/0x80 [ 312.571650][ T9356] ? hook_file_ioctl_common+0x145/0x410 [ 312.571672][ T9356] ? __fget_files+0x20e/0x3c0 [ 312.571693][ T9356] security_file_ioctl+0x9b/0x240 [ 312.571718][ T9356] __x64_sys_ioctl+0xb7/0x200 [ 312.571742][ T9356] do_syscall_64+0xcd/0x260 [ 312.571767][ T9356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.571784][ T9356] RIP: 0033:0x7f88d1b8e169 [ 312.571798][ T9356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.571813][ T9356] RSP: 002b:00007f88d2a1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.571829][ T9356] RAX: ffffffffffffffda RBX: 00007f88d1db5fa0 RCX: 00007f88d1b8e169 [ 312.571839][ T9356] RDX: 0000200000000080 RSI: 00000000c038563c RDI: 0000000000000003 [ 312.571849][ T9356] RBP: 00007f88d2a1a090 R08: 0000000000000000 R09: 0000000000000000 [ 312.571858][ T9356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.571867][ T9356] R13: 0000000000000000 R14: 00007f88d1db5fa0 R15: 00007ffe3a3f24b8 [ 312.571890][ T9356] [ 312.571898][ T9356] ERROR: Out of memory at tomoyo_realpath_from_path. [ 312.843146][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 312.983330][ T9] usb 5-1: device descriptor read/64, error -71 [ 313.081048][ T30] audit: type=1400 audit(1744798889.571:646): avc: denied { map } for pid=9350 comm="syz.2.953" path="socket:[22197]" dev="sockfs" ino=22197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 313.772233][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 313.868952][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.960'. [ 313.901252][ T9] usb 5-1: device descriptor read/64, error -71 [ 314.063558][ T9] usb usb5-port1: attempt power cycle [ 314.571312][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 314.601730][ T9] usb 5-1: device descriptor read/8, error -71 [ 314.853619][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 314.906930][ T9392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.917237][ T9] usb 5-1: device descriptor read/8, error -71 [ 314.924615][ T9392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.031704][ T9] usb usb5-port1: unable to enumerate USB device [ 315.160189][ T9402] overlayfs: missing 'lowerdir' [ 315.666323][ T9410] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=57 sclass=netlink_tcpdiag_socket pid=9410 comm=syz.3.974 [ 316.871595][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 317.115977][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.127161][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 317.136385][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.544875][ T9450] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[9450] [ 317.900354][ T9] usb 5-1: config 0 descriptor?? [ 317.936391][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 318.406157][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 318.415815][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 318.840420][ T9465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.849181][ T9465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.252475][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 319.265147][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 319.276162][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 319.361468][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 319.371131][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 319.387189][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 319.406976][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 319.420245][ T9470] netlink: 'syz.2.989': attribute type 26 has an invalid length. [ 319.637487][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 319.681618][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 319.947156][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 319.967504][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 320.112683][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 320.173540][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 320.187994][ T9] pwc: Registered as video103. [ 320.195682][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 320.214171][ T9] usb 5-1: USB disconnect, device number 46 [ 320.616103][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'. [ 320.742120][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.992'. [ 320.916757][ T30] audit: type=1400 audit(1744798897.411:647): avc: denied { append } for pid=9478 comm="syz.1.992" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 320.981400][ T5872] raw-gadget.1 gadget.0: failed to queue resume event [ 321.051386][ T5872] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 321.059184][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 321.066485][ T5872] raw-gadget.1 gadget.0: failed to queue reset event [ 321.098669][ T9488] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.141289][ T5872] raw-gadget.1 gadget.0: failed to queue resume event [ 321.254930][ T5872] usb 1-1: device descriptor read/64, error -32 [ 321.371800][ T5872] raw-gadget.1 gadget.0: failed to queue suspend event [ 321.399486][ T5872] raw-gadget.1 gadget.0: failed to queue reset event [ 321.461321][ T30] audit: type=1400 audit(1744798897.951:648): avc: denied { audit_write } for pid=9497 comm="syz.3.998" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 321.485630][ T9498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=9498 comm=syz.3.998 [ 321.510585][ T5872] raw-gadget.1 gadget.0: failed to queue resume event [ 321.518739][ T30] audit: type=1107 audit(1744798897.951:649): pid=9497 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='g'jNJ0 pyEG) [ 321.518739][ T30] q¾BӜφҭ$2(P.)s|Bh==\t˱d}9psp68|n85_#Vy׋ZU:@2rЍ TgXQ,64)3&T $ƒl=gTƌL1%llTH$hѲv2 y&>_ĦZ:ʽMl~#ɺFN=I䶈}Xm"qR(5/a=]89֤' [ 321.571456][ T5872] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 321.579245][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 321.635410][ T5872] raw-gadget.1 gadget.0: failed to queue reset event [ 321.663051][ T9506] : entered promiscuous mode [ 321.730440][ T5872] raw-gadget.1 gadget.0: failed to queue resume event [ 321.903385][ T5872] usb 1-1: device descriptor read/64, error -32 [ 322.413567][ T5872] raw-gadget.1 gadget.0: failed to queue suspend event [ 322.436425][ T5872] usb usb1-port1: attempt power cycle [ 322.443321][ T5872] raw-gadget.1 gadget.0: failed to queue disconnect event [ 322.454782][ T5872] raw-gadget.1 gadget.0: failed to queue reset event [ 322.598481][ T5872] raw-gadget.1 gadget.0: failed to queue resume event [ 322.607637][ T5872] raw-gadget.1 gadget.0: failed to queue reset event [ 322.816994][ T9531] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=9531 comm=syz.4.1006 [ 322.876368][ T5872] raw-gadget.1 gadget.0: failed to queue resume event [ 322.951448][ T5872] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 323.031569][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 323.038968][ T5872] usb 1-1: device descriptor read/8, error -32 [ 323.141266][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 323.364863][ T5872] raw-gadget.1 gadget.0: failed to queue suspend event [ 323.938445][ T5872] raw-gadget.1 gadget.0: failed to queue reset event [ 324.042787][ T5872] raw-gadget.1 gadget.0: failed to queue resume event [ 324.064861][ T9546] netlink: 'syz.3.1009': attribute type 21 has an invalid length. [ 324.071404][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 324.088329][ T9] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 324.108219][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.111264][ T5872] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 324.119206][ T9] usb 5-1: Product: syz [ 324.119226][ T9] usb 5-1: Manufacturer: syz [ 324.119237][ T9] usb 5-1: SerialNumber: syz [ 324.140684][ T9] usb 5-1: config 0 descriptor?? [ 324.159035][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 324.212872][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 324.220153][ T5872] usb 1-1: device descriptor read/8, error -32 [ 324.331337][ T5872] raw-gadget.1 gadget.0: failed to queue suspend event [ 324.339101][ T5872] usb usb1-port1: unable to enumerate USB device [ 325.381057][ T9] gspca_sq930x: ucbus_write failed -110 [ 325.847139][ T9] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 325.867416][ T30] audit: type=1400 audit(1744798901.481:650): avc: denied { wake_alarm } for pid=9558 comm="syz.0.1015" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 325.921279][ T9] usb 5-1: USB disconnect, device number 47 [ 326.140511][ T9576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.159590][ T9577] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1020'. [ 326.178558][ T9576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.428269][ T9595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.466992][ T9595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.641228][ T30] audit: type=1400 audit(1744798905.131:651): avc: denied { write } for pid=9626 comm="syz.1.1035" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 329.030023][ T9639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.082818][ T9639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.366153][ T9652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.383433][ T9652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.047993][ T9645] batadv0: entered promiscuous mode [ 330.072512][ T9658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.081093][ T9658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.108134][ T9645] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 330.138713][ T9645] macvtap1: entered allmulticast mode [ 330.153275][ T9645] batadv0: entered allmulticast mode [ 330.167989][ T9645] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 330.439543][ T9660] overlayfs: missing 'lowerdir' [ 331.969542][ T9679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.981788][ T9679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.401350][ T30] audit: type=1400 audit(1744798909.891:652): avc: denied { getopt } for pid=9693 comm="syz.1.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 333.551630][ T5872] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 333.665376][ T9706] Failed to initialize the IGMP autojoin socket (err -2) [ 333.775028][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.804582][ T5872] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 333.845506][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.879747][ T30] audit: type=1400 audit(1744798910.361:653): avc: denied { create } for pid=9707 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 334.045159][ T5872] usb 5-1: config 0 descriptor?? [ 334.056154][ T5872] pwc: Askey VC010 type 2 USB webcam detected. [ 335.047096][ T5872] pwc: recv_control_msg error -32 req 02 val 2b00 [ 335.170684][ T5872] pwc: recv_control_msg error -32 req 02 val 2700 [ 335.200271][ T5872] pwc: recv_control_msg error -32 req 02 val 2c00 [ 335.220056][ T5872] pwc: recv_control_msg error -32 req 04 val 1000 [ 335.438975][ T5872] pwc: recv_control_msg error -32 req 04 val 1400 [ 335.882249][ T5872] pwc: recv_control_msg error -32 req 02 val 2000 [ 335.901293][ T5872] pwc: recv_control_msg error -32 req 02 val 2100 [ 335.910715][ T5872] pwc: recv_control_msg error -32 req 04 val 1500 [ 336.153872][ T5872] pwc: recv_control_msg error -71 req 02 val 2400 [ 336.177157][ T5872] pwc: recv_control_msg error -71 req 02 val 2600 [ 336.185089][ T5872] pwc: recv_control_msg error -71 req 02 val 2900 [ 336.193821][ T5872] pwc: recv_control_msg error -71 req 02 val 2800 [ 336.210653][ T5872] pwc: recv_control_msg error -71 req 04 val 1100 [ 336.224368][ T5872] pwc: recv_control_msg error -71 req 04 val 1200 [ 336.242370][ T5872] pwc: Registered as video103. [ 336.268834][ T5872] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 336.328246][ T5872] usb 5-1: USB disconnect, device number 48 [ 338.739492][ T9774] input: syz0 as /devices/virtual/input/input17 [ 338.755042][ T9776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.801537][ T9776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.896173][ T5870] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 339.160940][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1083'. [ 339.567146][ T30] audit: type=1400 audit(1744798915.651:654): avc: denied { setopt } for pid=9775 comm="syz.3.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 339.601411][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 339.606523][ T9787] FAULT_INJECTION: forcing a failure. [ 339.606523][ T9787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.606552][ T9787] CPU: 0 UID: 0 PID: 9787 Comm: syz.0.1086 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 339.606572][ T9787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 339.606582][ T9787] Call Trace: [ 339.606588][ T9787] [ 339.606593][ T9787] dump_stack_lvl+0x16c/0x1f0 [ 339.606620][ T9787] should_fail_ex+0x512/0x640 [ 339.606642][ T9787] _copy_from_user+0x2e/0xd0 [ 339.606660][ T9787] video_usercopy+0xedd/0x1720 [ 339.606686][ T9787] ? __pfx___video_do_ioctl+0x10/0x10 [ 339.606706][ T9787] ? selinux_bprm_creds_for_exec+0xbc1/0xc60 [ 339.606730][ T9787] ? __pfx_video_usercopy+0x10/0x10 [ 339.606774][ T9787] v4l2_ioctl+0x1ba/0x250 [ 339.606793][ T9787] ? __pfx_v4l2_ioctl+0x10/0x10 [ 339.606814][ T9787] __x64_sys_ioctl+0x190/0x200 [ 339.606837][ T9787] do_syscall_64+0xcd/0x260 [ 339.606860][ T9787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.606875][ T9787] RIP: 0033:0x7f63d038e169 [ 339.606888][ T9787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.606901][ T9787] RSP: 002b:00007f63d127c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.606916][ T9787] RAX: ffffffffffffffda RBX: 00007f63d05b5fa0 RCX: 00007f63d038e169 [ 339.606925][ T9787] RDX: 0000200000000100 RSI: 00000000c0205648 RDI: 0000000000000003 [ 339.606934][ T9787] RBP: 00007f63d127c090 R08: 0000000000000000 R09: 0000000000000000 [ 339.606943][ T9787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.606951][ T9787] R13: 0000000000000000 R14: 00007f63d05b5fa0 R15: 00007ffd2a3d9fa8 [ 339.606971][ T9787] [ 340.225052][ T9799] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1088'. [ 340.648739][ T9806] FAULT_INJECTION: forcing a failure. [ 340.648739][ T9806] name failslab, interval 1, probability 0, space 0, times 0 [ 340.661475][ T9806] CPU: 1 UID: 0 PID: 9806 Comm: syz.0.1091 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 340.661497][ T9806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 340.661508][ T9806] Call Trace: [ 340.661514][ T9806] [ 340.661521][ T9806] dump_stack_lvl+0x16c/0x1f0 [ 340.661551][ T9806] should_fail_ex+0x512/0x640 [ 340.661570][ T9806] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 340.661600][ T9806] should_failslab+0xc2/0x120 [ 340.661620][ T9806] __kmalloc_cache_noprof+0x6a/0x3e0 [ 340.661645][ T9806] ? alloc_fs_context+0x57/0x9c0 [ 340.661668][ T9806] alloc_fs_context+0x57/0x9c0 [ 340.661691][ T9806] path_mount+0xb06/0x1f30 [ 340.661729][ T9806] ? kmem_cache_free+0x2d4/0x4d0 [ 340.661744][ T9806] ? __pfx_path_mount+0x10/0x10 [ 340.661766][ T9806] ? putname+0x154/0x1a0 [ 340.661789][ T9806] __x64_sys_mount+0x28d/0x310 [ 340.661808][ T9806] ? __pfx___x64_sys_mount+0x10/0x10 [ 340.661838][ T9806] do_syscall_64+0xcd/0x260 [ 340.661864][ T9806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.661881][ T9806] RIP: 0033:0x7f63d038e169 [ 340.661895][ T9806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.661910][ T9806] RSP: 002b:00007f63d123a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 340.661926][ T9806] RAX: ffffffffffffffda RBX: 00007f63d05b6160 RCX: 00007f63d038e169 [ 340.661937][ T9806] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000000000000000 [ 340.661947][ T9806] RBP: 00007f63d123a090 R08: 0000000000000000 R09: 0000000000000000 [ 340.661956][ T9806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.661966][ T9806] R13: 0000000000000000 R14: 00007f63d05b6160 R15: 00007ffd2a3d9fa8 [ 340.661988][ T9806] [ 340.918367][ T5870] usb 5-1: unable to get BOS descriptor or descriptor too short [ 340.929402][ T5870] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 340.937174][ T5870] usb 5-1: can't read configurations, error -71 [ 341.146137][ T30] audit: type=1400 audit(1744798917.641:655): avc: denied { read } for pid=9812 comm="syz.1.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 341.229598][ T30] audit: type=1326 audit(1744798917.721:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.1.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d1b8e169 code=0x7ffc0000 [ 341.256851][ T30] audit: type=1326 audit(1744798917.721:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.1.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d1b8e169 code=0x7ffc0000 [ 341.330357][ T30] audit: type=1326 audit(1744798917.751:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.1.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d1b8e169 code=0x7ffc0000 [ 341.354036][ T30] audit: type=1326 audit(1744798917.751:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.1.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d1b8e169 code=0x7ffc0000 [ 341.388044][ T30] audit: type=1326 audit(1744798917.751:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.1.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f88d1b8e169 code=0x7ffc0000 [ 341.415551][ T30] audit: type=1326 audit(1744798917.751:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.1.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d1b8e169 code=0x7ffc0000 [ 341.445015][ T30] audit: type=1326 audit(1744798917.751:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.1.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d1b8e169 code=0x7ffc0000 [ 341.481324][ T30] audit: type=1326 audit(1744798917.751:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9816 comm="syz.1.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88d1b8e169 code=0x7ffc0000 [ 341.624735][ T9830] overlayfs: failed to clone upperpath [ 341.826108][ T9836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.841329][ T9836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.577984][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029b64000: rx timeout, send abort [ 343.086238][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029b64000: abort rx timeout. Force session deactivation [ 343.134156][ T5875] Process accounting resumed [ 343.171659][ T5870] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 343.229847][ T9857] bridge_slave_0: entered promiscuous mode [ 343.235731][ T9857] bridge_slave_0: entered allmulticast mode [ 343.354690][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 344.213076][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1111'. [ 345.455436][ T5870] usb 5-1: unable to get BOS descriptor or descriptor too short [ 345.485162][ T5870] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 345.525395][ T5870] usb 5-1: can't read configurations, error -71 [ 346.783871][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1125'. [ 347.432200][ T9922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.450904][ T9922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.059920][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.068531][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.274860][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 348.274876][ T30] audit: type=1400 audit(1744798924.581:692): avc: denied { link } for pid=9910 comm="syz.3.1124" name="#f" dev="tmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 348.302990][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.322808][ T30] audit: type=1400 audit(1744798924.581:693): avc: denied { rename } for pid=9910 comm="syz.3.1124" name="#10" dev="tmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 348.363997][ T30] audit: type=1400 audit(1744798924.861:694): avc: denied { write } for pid=9924 comm="syz.2.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 348.383287][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.425505][ T9908] netlink: 'syz.0.1122': attribute type 1 has an invalid length. [ 348.459645][ T9908] 8021q: adding VLAN 0 to HW filter on device bond2 [ 348.491281][ T5870] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 348.574612][ T9933] fuse: Bad value for 'fd' [ 348.661435][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.708730][ T5870] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 348.765244][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.883845][ T5870] usb 5-1: config 0 descriptor?? [ 348.937188][ T5870] pwc: Askey VC010 type 2 USB webcam detected. [ 349.006143][ T9938] fuse: Unknown parameter 'user_i00000000000000000000' [ 350.068035][ T9954] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 350.088519][ T9954] netlink: 'syz.2.1138': attribute type 10 has an invalid length. [ 350.104941][ T9954] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 350.109702][ T30] audit: type=1400 audit(1744798926.591:695): avc: denied { block_suspend } for pid=9950 comm="syz.3.1136" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 350.161124][ T9960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.177346][ T9960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.195959][ T5870] pwc: recv_control_msg error -32 req 02 val 2b00 [ 350.204286][ T5870] pwc: recv_control_msg error -32 req 02 val 2700 [ 350.215888][ T5870] pwc: recv_control_msg error -32 req 02 val 2c00 [ 350.226953][ T5870] pwc: recv_control_msg error -32 req 04 val 1000 [ 350.921228][ T5870] pwc: recv_control_msg error -32 req 04 val 1400 [ 350.928281][ T5870] pwc: recv_control_msg error -32 req 02 val 2000 [ 350.943277][ T5870] pwc: recv_control_msg error -32 req 02 val 2100 [ 350.957122][ T5870] pwc: recv_control_msg error -32 req 04 val 1500 [ 351.000337][ T9967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.010489][ T9967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.165310][ T5870] pwc: recv_control_msg error -71 req 02 val 2400 [ 351.184400][ T5870] pwc: recv_control_msg error -71 req 02 val 2600 [ 351.211646][ T5870] pwc: recv_control_msg error -71 req 02 val 2900 [ 351.222860][ T5870] pwc: recv_control_msg error -71 req 02 val 2800 [ 351.235695][ T5870] pwc: recv_control_msg error -71 req 04 val 1100 [ 351.249669][ T5870] pwc: recv_control_msg error -71 req 04 val 1200 [ 351.269822][ T5870] pwc: Registered as video103. [ 351.281791][ T5870] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 351.308783][ T5870] usb 5-1: USB disconnect, device number 53 [ 351.808067][ T9982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.817993][ T9982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.458896][ T9986] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.552332][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1156'. [ 354.986741][T10015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1159'. [ 354.998396][T10015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1159'. [ 355.288568][ T30] audit: type=1400 audit(1744798931.781:696): avc: denied { connect } for pid=10021 comm="syz.4.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 355.301838][T10015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1159'. [ 355.323547][T10015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1159'. [ 355.364329][ T30] audit: type=1400 audit(1744798931.811:697): avc: denied { setopt } for pid=10021 comm="syz.4.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 355.392876][ T30] audit: type=1400 audit(1744798931.891:698): avc: denied { ioctl } for pid=10021 comm="syz.4.1161" path="socket:[26731]" dev="sockfs" ino=26731 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 357.211598][T10063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.221440][T10063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.850525][T10068] FAULT_INJECTION: forcing a failure. [ 357.850525][T10068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.863822][T10068] CPU: 0 UID: 0 PID: 10068 Comm: syz.3.1172 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 357.863846][T10068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 357.863855][T10068] Call Trace: [ 357.863861][T10068] [ 357.863867][T10068] dump_stack_lvl+0x16c/0x1f0 [ 357.863895][T10068] should_fail_ex+0x512/0x640 [ 357.863917][T10068] _copy_from_user+0x2e/0xd0 [ 357.863937][T10068] ____sys_sendmsg+0x607/0xc70 [ 357.863967][T10068] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.863996][T10068] ? __pfx__kstrtoull+0x10/0x10 [ 357.864024][T10068] ___sys_sendmsg+0x134/0x1d0 [ 357.864046][T10068] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.864077][T10068] ? find_held_lock+0x2b/0x80 [ 357.864113][T10068] __sys_sendmmsg+0x200/0x420 [ 357.864136][T10068] ? __pfx___sys_sendmmsg+0x10/0x10 [ 357.864164][T10068] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 357.864199][T10068] ? fput+0x70/0xf0 [ 357.864219][T10068] ? ksys_write+0x1b9/0x240 [ 357.864233][T10068] ? __pfx_ksys_write+0x10/0x10 [ 357.864252][T10068] __x64_sys_sendmmsg+0x9c/0x100 [ 357.864271][T10068] ? lockdep_hardirqs_on+0x7c/0x110 [ 357.864292][T10068] do_syscall_64+0xcd/0x260 [ 357.864313][T10068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.864330][T10068] RIP: 0033:0x7f06ceb8e169 [ 357.864343][T10068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.864360][T10068] RSP: 002b:00007f06cf952038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 357.864374][T10068] RAX: ffffffffffffffda RBX: 00007f06cedb6080 RCX: 00007f06ceb8e169 [ 357.864384][T10068] RDX: 0000000000000001 RSI: 0000200000005c00 RDI: 0000000000000006 [ 357.864394][T10068] RBP: 00007f06cf952090 R08: 0000000000000000 R09: 0000000000000000 [ 357.864403][T10068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.864413][T10068] R13: 0000000000000000 R14: 00007f06cedb6080 R15: 00007ffed1118788 [ 357.864435][T10068] [ 357.864491][ T1205] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 358.333486][ T30] audit: type=1400 audit(1744798934.831:699): avc: denied { write } for pid=10073 comm="syz.2.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 358.355628][T10074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1174'. [ 358.393347][ T1205] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.405558][ T1205] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 358.415157][ T1205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.445488][ T1205] usb 5-1: config 0 descriptor?? [ 358.458129][ T1205] pwc: Askey VC010 type 2 USB webcam detected. [ 358.565135][T10080] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1177'. [ 359.311863][ T1205] pwc: recv_control_msg error -32 req 02 val 2b00 [ 359.321757][ T1205] pwc: recv_control_msg error -32 req 02 val 2700 [ 359.338753][ T1205] pwc: recv_control_msg error -32 req 02 val 2c00 [ 359.346827][ T1205] pwc: recv_control_msg error -32 req 04 val 1000 [ 359.360495][T10087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.375204][T10087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.565118][ T1205] pwc: recv_control_msg error -32 req 04 val 1400 [ 359.579517][ T1205] pwc: recv_control_msg error -32 req 02 val 2000 [ 359.595161][ T1205] pwc: recv_control_msg error -32 req 02 val 2100 [ 359.610591][ T1205] pwc: recv_control_msg error -32 req 04 val 1500 [ 359.612701][T10093] tipc: Started in network mode [ 359.622033][T10093] tipc: Node identity 080211000001, cluster identity 4711 [ 359.634259][T10093] tipc: Enabled bearer , priority 0 [ 359.653907][T10093] syzkaller0: mtu less than device minimum [ 359.820416][ T1205] pwc: recv_control_msg error -71 req 02 val 2400 [ 359.842526][ T1205] pwc: recv_control_msg error -71 req 02 val 2600 [ 359.850301][ T1205] pwc: recv_control_msg error -71 req 02 val 2900 [ 359.858745][ T1205] pwc: recv_control_msg error -71 req 02 val 2800 [ 359.866743][ T1205] pwc: recv_control_msg error -71 req 04 val 1100 [ 359.875532][ T1205] pwc: recv_control_msg error -71 req 04 val 1200 [ 359.884745][ T1205] pwc: Registered as video103. [ 359.895084][ T1205] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 359.910338][ T1205] usb 5-1: USB disconnect, device number 54 [ 360.110843][ T30] audit: type=1400 audit(1744798936.601:700): avc: denied { setopt } for pid=10102 comm="syz.1.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 360.641800][ T30] audit: type=1400 audit(1744798937.141:701): avc: denied { write } for pid=10102 comm="syz.1.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 360.787796][ T30] audit: type=1400 audit(1744798937.211:702): avc: denied { read } for pid=10116 comm="syz.0.1187" name="/" dev="configfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 360.821768][ T5870] tipc: Node number set to 134418688 [ 360.838239][ T30] audit: type=1400 audit(1744798937.211:703): avc: denied { open } for pid=10116 comm="syz.0.1187" path="/" dev="configfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 361.327233][ T30] audit: type=1400 audit(1744798937.821:704): avc: denied { nlmsg_read } for pid=10120 comm="syz.0.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 361.348646][ T30] audit: type=1400 audit(1744798937.821:705): avc: denied { append } for pid=10120 comm="syz.0.1188" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 361.507960][T10130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.520225][T10130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.623577][T10132] : entered promiscuous mode [ 364.757501][ T30] audit: type=1400 audit(1744798941.251:706): avc: denied { bind } for pid=10189 comm="syz.2.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 364.921538][ T5872] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 365.092180][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 365.108742][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.152764][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.175897][ T5872] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 365.200813][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.806932][ T5872] usb 5-1: config 0 descriptor?? [ 365.850649][ T30] audit: type=1400 audit(1744798941.681:707): avc: denied { setattr } for pid=10198 comm="syz.0.1215" name="map_files" dev="proc" ino=26507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 366.442174][ T30] audit: type=1400 audit(1744798942.781:708): avc: denied { map } for pid=10203 comm="syz.1.1217" path="/dev/video2" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 366.510317][ T5872] hkems 0003:2006:0118.0011: item fetching failed at offset 0/2 [ 366.525187][ T5872] hkems 0003:2006:0118.0011: parse failed [ 366.531828][ T5872] hkems 0003:2006:0118.0011: probe with driver hkems failed with error -22 [ 368.017381][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 368.124054][ T9] usb 5-1: USB disconnect, device number 55 [ 368.466384][ T30] audit: type=1400 audit(1744798944.961:709): avc: denied { bind } for pid=10231 comm="syz.3.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 368.588023][T10236] Failed to initialize the IGMP autojoin socket (err -2) [ 374.464747][ T5870] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 374.656637][T10321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.708592][ T5870] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 374.769833][T10321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.803050][ T5870] usb 5-1: config 0 has no interface number 0 [ 374.858095][ T5870] usb 5-1: too many endpoints for config 0 interface 34 altsetting 28: 210, using maximum allowed: 30 [ 374.927552][ T5870] usb 5-1: config 0 interface 34 altsetting 28 has 0 endpoint descriptors, different from the interface descriptor's value: 210 [ 374.941471][ T5870] usb 5-1: config 0 interface 34 has no altsetting 0 [ 374.950952][ T5870] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 374.960556][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.969656][ T5870] usb 5-1: Product: syz [ 374.974308][ T5870] usb 5-1: Manufacturer: syz [ 374.979025][ T5870] usb 5-1: SerialNumber: syz [ 375.018866][ T5870] usb 5-1: config 0 descriptor?? [ 376.094396][T10341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.105100][T10341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.925268][ T5870] gspca_main: sq930x-2.14.0 probing 2770:930c [ 376.938677][ T5870] gspca_sq930x: reg_r 001f failed -71 [ 376.968159][ T5870] sq930x 5-1:0.34: probe with driver sq930x failed with error -71 [ 377.108133][ T5870] usb 5-1: USB disconnect, device number 56 [ 377.174887][T10354] FAULT_INJECTION: forcing a failure. [ 377.174887][T10354] name failslab, interval 1, probability 0, space 0, times 0 [ 377.187573][T10354] CPU: 0 UID: 0 PID: 10354 Comm: syz.1.1258 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 377.187597][T10354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 377.187608][T10354] Call Trace: [ 377.187615][T10354] [ 377.187621][T10354] dump_stack_lvl+0x16c/0x1f0 [ 377.187651][T10354] should_fail_ex+0x512/0x640 [ 377.187670][T10354] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 377.187699][T10354] should_failslab+0xc2/0x120 [ 377.187719][T10354] __kmalloc_cache_noprof+0x6a/0x3e0 [ 377.187744][T10354] ? alloc_super+0x52/0xbd0 [ 377.187773][T10354] alloc_super+0x52/0xbd0 [ 377.187803][T10354] sget_fc+0x116/0xc20 [ 377.187827][T10354] ? cap_capable+0xb3/0x250 [ 377.187846][T10354] ? __pfx_set_anon_super_fc+0x10/0x10 [ 377.187871][T10354] ? __pfx_dlmfs_fill_super+0x10/0x10 [ 377.187890][T10354] get_tree_nodev+0x28/0x190 [ 377.187907][T10354] vfs_get_tree+0x8b/0x340 [ 377.187929][T10354] path_mount+0x14d4/0x1f30 [ 377.187967][T10354] ? kmem_cache_free+0x2d4/0x4d0 [ 377.187983][T10354] ? __pfx_path_mount+0x10/0x10 [ 377.188005][T10354] ? putname+0x154/0x1a0 [ 377.188028][T10354] __x64_sys_mount+0x28d/0x310 [ 377.188047][T10354] ? __pfx___x64_sys_mount+0x10/0x10 [ 377.188072][T10354] do_syscall_64+0xcd/0x260 [ 377.188098][T10354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.188115][T10354] RIP: 0033:0x7f88d1b8e169 [ 377.188131][T10354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.188147][T10354] RSP: 002b:00007f88d29d8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 377.188164][T10354] RAX: ffffffffffffffda RBX: 00007f88d1db6160 RCX: 00007f88d1b8e169 [ 377.188175][T10354] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000000000000000 [ 377.188185][T10354] RBP: 00007f88d29d8090 R08: 0000000000000000 R09: 0000000000000000 [ 377.188195][T10354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 377.188204][T10354] R13: 0000000000000000 R14: 00007f88d1db6160 R15: 00007ffe3a3f24b8 [ 377.188227][T10354] [ 377.412314][ T30] audit: type=1400 audit(1744798953.911:710): avc: denied { lock } for pid=10350 comm="syz.4.1260" path="socket:[28717]" dev="sockfs" ino=28717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 377.493024][T10359] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 378.552544][ T5870] Process accounting resumed [ 379.601234][T10390] Failed to initialize the IGMP autojoin socket (err -2) [ 379.635303][T10392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.383357][T10403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.393002][T10403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.767175][T10399] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1271'. [ 380.971829][T10410] Failed to initialize the IGMP autojoin socket (err -2) [ 381.855817][T10426] kernel profiling enabled (shift: 63) [ 381.861501][T10426] profiling shift: 63 too large [ 382.166722][ T30] audit: type=1400 audit(1744798958.651:711): avc: denied { listen } for pid=10429 comm="syz.2.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 383.142474][T10446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 383.350884][T10449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.372830][T10449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.380726][T10451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.411648][T10451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.452183][T10474] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 385.458716][T10474] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 385.581321][T10474] vhci_hcd vhci_hcd.0: Device attached [ 385.700397][T10481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.710170][T10481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.221737][ T5940] usb 42-1: SetAddress Request (2) to port 0 [ 386.292320][ T5940] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 386.811230][ T1205] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 386.973028][ T1205] usb 5-1: Using ep0 maxpacket: 8 [ 387.004026][ T1205] usb 5-1: config 0 has no interfaces? [ 387.045785][ T1205] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 387.060312][ T30] audit: type=1400 audit(1744798963.561:712): avc: denied { read write } for pid=10498 comm="syz.0.1304" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 387.084876][ T1205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.093262][ T1205] usb 5-1: Product: syz [ 387.097486][ T1205] usb 5-1: Manufacturer: syz [ 387.103409][ T1205] usb 5-1: SerialNumber: syz [ 387.117145][ T30] audit: type=1400 audit(1744798963.561:713): avc: denied { open } for pid=10498 comm="syz.0.1304" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 387.338609][ T1205] usb 5-1: config 0 descriptor?? [ 387.651485][ T5940] usb 42-1: device descriptor read/8, error -71 [ 388.211208][ T30] audit: type=1400 audit(1744798964.691:714): avc: denied { getopt } for pid=10509 comm="syz.3.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 388.331290][ T5940] usb 42-1: SetAddress Request (3) to port 0 [ 388.337532][ T5940] usb 42-1: new SuperSpeed USB device number 3 using vhci_hcd [ 388.449332][T10521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.466905][T10521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.486280][T10523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.497416][T10523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.625115][T10524] fuse: Unknown parameter 'user_i00000000000000000000' [ 388.876608][T10527] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1313'. [ 388.889651][T10527] ip6gretap0: entered promiscuous mode [ 388.895733][T10528] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1313'. [ 388.935410][T10527] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1313'. [ 388.947802][T10528] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1313'. [ 389.369072][ T9] usb 5-1: USB disconnect, device number 57 [ 389.383714][T10475] vhci_hcd: connection reset by peer [ 389.404352][ T61] vhci_hcd: stop threads [ 389.429307][ T61] vhci_hcd: release socket [ 389.440688][ T61] vhci_hcd: disconnect device [ 390.726713][ T30] audit: type=1400 audit(1744798967.221:715): avc: denied { create } for pid=10549 comm="syz.4.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 390.878468][ T30] audit: type=1400 audit(1744798967.221:716): avc: denied { write } for pid=10549 comm="syz.4.1320" path="socket:[29223]" dev="sockfs" ino=29223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 390.942449][ T30] audit: type=1400 audit(1744798967.221:717): avc: denied { ioctl } for pid=10549 comm="syz.4.1320" path="socket:[29223]" dev="sockfs" ino=29223 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 391.261455][T10562] xt_socket: unknown flags 0xd0 [ 391.268460][ T30] audit: type=1400 audit(1744798967.761:718): avc: denied { ioctl } for pid=10555 comm="syz.0.1323" path="socket:[28143]" dev="sockfs" ino=28143 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 391.272267][T10558] syz.0.1323 uses old SIOCAX25GETINFO [ 392.327596][T10576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.341058][T10576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.356316][ T30] audit: type=1400 audit(1744798968.851:719): avc: denied { write } for pid=10575 comm="syz.3.1329" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 392.381829][ T30] audit: type=1400 audit(1744798968.851:720): avc: denied { open } for pid=10575 comm="syz.3.1329" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 392.430937][T10576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.456604][T10576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.515186][T10580] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1330'. [ 392.528606][ T30] audit: type=1400 audit(1744798969.021:721): avc: denied { mount } for pid=10579 comm="syz.1.1330" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 393.442012][ T5940] usb 42-1: device descriptor read/8, error -110 [ 393.531258][ T30] audit: type=1400 audit(1744798970.021:722): avc: denied { getopt } for pid=10593 comm="syz.2.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 393.562092][ T5940] usb usb42-port1: attempt power cycle [ 394.035989][T10586] netlink: 'syz.0.1332': attribute type 1 has an invalid length. [ 394.059126][T10586] 8021q: adding VLAN 0 to HW filter on device bond3 [ 394.124985][T10586] 8021q: adding VLAN 0 to HW filter on device bond3 [ 394.132464][T10586] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 394.143754][T10586] bond3: (slave ip6gre2): Error -95 calling set_mac_address [ 394.513343][ T5940] usb usb42-port1: unable to enumerate USB device [ 394.673355][T10613] team0: No ports can be present during mode change [ 394.689866][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1339'. [ 394.974600][T10613] netlink: zone id is out of range [ 396.180098][T10640] netlink: 'syz.2.1346': attribute type 21 has an invalid length. [ 396.252314][T10638] SELinux: policydb version 1197324667 does not match my version range 15-34 [ 396.261435][T10638] SELinux: failed to load policy [ 396.796349][T10646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.810692][T10646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.855189][T10646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.917598][T10646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.991958][T10663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.002274][T10663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.060013][T10646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.363707][T10670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.848077][T10670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.116437][T10676] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1356'. [ 401.266716][T10710] overlayfs: overlapping lowerdir path [ 401.482233][T10710] overlayfs: overlapping lowerdir path [ 401.576673][T10710] overlayfs: overlapping lowerdir path [ 401.589825][T10710] overlayfs: overlapping lowerdir path [ 401.601181][T10710] overlayfs: overlapping lowerdir path [ 401.613485][T10710] overlayfs: overlapping lowerdir path [ 401.624664][T10710] overlayfs: overlapping lowerdir path [ 401.635461][T10710] overlayfs: overlapping lowerdir path [ 401.646615][T10710] overlayfs: overlapping lowerdir path [ 401.657482][T10710] overlayfs: overlapping lowerdir path [ 401.669055][T10710] overlayfs: overlapping lowerdir path [ 401.680353][T10710] overlayfs: overlapping lowerdir path [ 401.687619][T10710] overlayfs: overlapping lowerdir path [ 401.958088][T10724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.967734][T10724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.418281][ T30] audit: type=1400 audit(1744798978.911:723): avc: denied { ioctl } for pid=10702 comm="syz.4.1365" path="socket:[28530]" dev="sockfs" ino=28530 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 403.333471][T10742] syz.3.1376: attempt to access beyond end of device [ 403.333471][T10742] nbd3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 403.623322][T10751] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1378'. [ 406.538448][T10780] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1384'. [ 409.577563][T10810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.586114][T10810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.114511][T10837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.129561][T10837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.988793][T10848] overlayfs: missing 'lowerdir' [ 413.350616][T10855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=10855 comm=syz.3.1402 [ 413.402980][T10858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.416872][T10858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.501496][T10907] netlink: 'syz.1.1417': attribute type 39 has an invalid length. [ 417.865465][ T30] audit: type=1400 audit(1744798993.651:724): avc: denied { ioctl } for pid=10910 comm="syz.4.1418" path="socket:[30888]" dev="sockfs" ino=30888 ioctlcmd=0x943f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 418.157597][T10931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.276307][T10931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.284381][T10936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.293754][T10936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.434438][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 418.449989][T10934] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.473502][T10938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1426'. [ 418.592362][T10934] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.680409][T10934] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.864664][T10946] Failed to initialize the IGMP autojoin socket (err -2) [ 419.094398][T10934] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.788636][T10961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.800160][T10961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.360322][T10934] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.552674][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1431'. [ 420.856327][T10934] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.986134][T10934] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.009448][T10934] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.080464][T10970] overlayfs: failed to resolve './file1': -2 [ 421.227447][ T30] audit: type=1400 audit(1744798997.721:725): avc: denied { create } for pid=10977 comm="syz.4.1435" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 421.725395][T10984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10984 comm=syz.2.1437 [ 421.801625][T10984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1437'. [ 421.995093][T10987] overlayfs: failed to resolve './file1': -2 [ 422.004571][T10987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.013826][T10987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.136141][ T30] audit: type=1400 audit(1744798998.631:726): avc: denied { unlink } for pid=5822 comm="syz-executor" name="file0" dev="tmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 422.422391][ T5875] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 422.447367][T10996] Failed to initialize the IGMP autojoin socket (err -2) [ 422.614058][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 423.361918][T11007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.374671][T11007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.715617][ T30] audit: type=1400 audit(1744799000.211:727): avc: denied { append } for pid=11008 comm="syz.3.1446" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 423.776698][T11016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.794154][T11016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.800970][ T30] audit: type=1400 audit(1744799000.271:728): avc: denied { accept } for pid=11014 comm="syz.0.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 424.630985][ T30] audit: type=1400 audit(1744799001.121:729): avc: denied { setattr } for pid=11029 comm="syz.0.1453" name="PACKET" dev="sockfs" ino=30289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 424.634192][T11030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.666846][T11030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.711473][ T30] audit: type=1400 audit(1744799001.191:730): avc: denied { connect } for pid=11029 comm="syz.0.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 425.084697][T11039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.096818][T11039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.618239][ T30] audit: type=1400 audit(1744799003.111:731): avc: denied { setopt } for pid=11060 comm="syz.3.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 427.717129][ T5875] usb 5-1: unable to get BOS descriptor or descriptor too short [ 427.745578][ T5875] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 427.804105][ T5875] usb 5-1: chopping to 0 config(s) [ 427.820599][ T5875] usb 5-1: can't read configurations, error -32 [ 428.131239][ T5875] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 428.984878][ T5875] usb 5-1: device descriptor read/64, error -32 [ 429.122319][ T5875] usb usb5-port1: attempt power cycle [ 429.721199][ T5875] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 430.181167][ T5875] usb 5-1: device descriptor read/8, error -32 [ 431.629402][T11098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.639162][T11098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.055508][ T5875] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 432.098030][ T5875] usb 5-1: device descriptor read/8, error -32 [ 432.277955][ T5875] usb usb5-port1: unable to enumerate USB device [ 432.325725][T11109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.497597][T11109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.585058][T11108] delete_channel: no stack [ 433.795783][T11125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.804786][T11125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.906637][T11128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.961122][T11128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.978998][T11128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.999568][T11128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.061035][T11128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.071734][T11128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.093135][T11128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.104332][T11129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.114982][T11128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.124370][T11129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.673489][ T30] audit: type=1326 audit(1744799011.131:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.3.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ceb8e169 code=0x7ffc0000 [ 434.731342][T11137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.767262][T11137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.785000][ T30] audit: type=1326 audit(1744799011.141:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.3.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ceb8e169 code=0x7ffc0000 [ 434.836821][ T30] audit: type=1326 audit(1744799011.141:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.3.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f06ceb8e169 code=0x7ffc0000 [ 434.891006][ T30] audit: type=1326 audit(1744799011.151:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.3.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ceb8e169 code=0x7ffc0000 [ 434.950962][ T30] audit: type=1326 audit(1744799011.151:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.3.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ceb8e169 code=0x7ffc0000 [ 434.995306][ T30] audit: type=1326 audit(1744799011.151:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.3.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f06ceb8cc1f code=0x7ffc0000 [ 435.020336][ T30] audit: type=1326 audit(1744799011.201:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.3.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ceb8e169 code=0x7ffc0000 [ 435.518894][ T30] audit: type=1326 audit(1744799011.201:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.3.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ceb8e169 code=0x7ffc0000 [ 435.542697][ T30] audit: type=1326 audit(1744799011.211:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.3.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f06ceb8e169 code=0x7ffc0000 [ 435.600938][ T30] audit: type=1326 audit(1744799011.211:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.3.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ceb8e169 code=0x7ffc0000 [ 436.360367][T11157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.369180][T11157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.660310][T11183] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 440.538031][T11208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.563783][T11208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.218950][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 441.218966][ T30] audit: type=1400 audit(1744799017.711:750): avc: denied { read } for pid=11214 comm="syz.0.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 441.367852][T11221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.417580][T11221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.801562][ T30] audit: type=1400 audit(1744799018.211:751): avc: denied { ioctl } for pid=11228 comm="syz.4.1508" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 442.986125][ T30] audit: type=1400 audit(1744799019.481:752): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 444.784252][ T30] audit: type=1400 audit(1744799021.281:753): avc: denied { create } for pid=11250 comm="syz.1.1516" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon=5A3BD1 [ 444.793554][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'. [ 444.810401][ T30] audit: type=1400 audit(1744799021.281:754): avc: denied { read write } for pid=11250 comm="syz.1.1516" name="bus" dev="tmpfs" ino=1466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon=5A3BD1 [ 445.031455][T11255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1516'. [ 445.073447][ T30] audit: type=1400 audit(1744799021.281:755): avc: denied { open } for pid=11250 comm="syz.1.1516" path="/280/bus" dev="tmpfs" ino=1466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon=5A3BD1 [ 445.244348][ T30] audit: type=1400 audit(1744799021.741:756): avc: denied { unlink } for pid=5828 comm="syz-executor" name="bus" dev="tmpfs" ino=1466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon=5A3BD1 [ 446.158391][T11275] Failed to initialize the IGMP autojoin socket (err -2) [ 446.421355][ T30] audit: type=1326 audit(1744799022.891:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11264 comm="syz.1.1520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88d1b8e169 code=0x0 [ 446.666072][T11284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.675612][T11284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.402354][ T30] audit: type=1400 audit(1744799023.831:758): avc: denied { getopt } for pid=11288 comm="syz.2.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 447.563686][T11297] Failed to initialize the IGMP autojoin socket (err -2) [ 448.044100][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1532'. [ 448.667156][T11308] netlink: 'syz.3.1532': attribute type 10 has an invalid length. [ 448.675420][T11308] veth1_vlan: entered allmulticast mode [ 448.682914][T11308] team0: Device veth1_vlan is up. Set it down before adding it as a team port [ 448.980670][T11316] Failed to initialize the IGMP autojoin socket (err -2) [ 449.030984][T11319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.076210][T11319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.096269][T11321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.106555][T11321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.259879][T11323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.271200][T11323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.707153][T11325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.725308][T11333] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 450.556587][T11337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.568403][T11337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.669298][T11342] delete_channel: no stack [ 452.638757][T11364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.659631][T11364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.324695][T11370] netlink: 'syz.0.1549': attribute type 1 has an invalid length. [ 454.327721][T11384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.343600][T11384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.369635][T11370] 8021q: adding VLAN 0 to HW filter on device bond4 [ 454.390839][T11384] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 454.393203][T11383] 8021q: adding VLAN 0 to HW filter on device bond4 [ 454.413889][T11383] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 454.428566][T11383] bond4: (slave ip6gre2): Error -95 calling set_mac_address [ 454.587545][T11392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.596401][T11392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.795761][ T30] audit: type=1400 audit(1744799032.281:759): avc: denied { read write } for pid=11419 comm="syz.4.1565" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 455.919511][ T30] audit: type=1400 audit(1744799032.281:760): avc: denied { open } for pid=11419 comm="syz.4.1565" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 455.943633][ C0] vkms_vblank_simulate: vblank timer overrun [ 455.953674][ T30] audit: type=1400 audit(1744799032.321:761): avc: denied { map } for pid=11419 comm="syz.4.1565" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 455.977301][ C0] vkms_vblank_simulate: vblank timer overrun [ 455.980569][T11414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.995840][T11414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.083809][T11427] kernel profiling enabled (shift: 63) [ 456.089348][T11427] profiling shift: 63 too large [ 456.249578][T11431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1566'. [ 456.307079][T11433] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.314760][T11433] bridge0: port 1() entered disabled state [ 456.323055][T11433] bridge0: entered allmulticast mode [ 456.626930][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1568'. [ 456.637198][T11436] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1568'. [ 456.651083][T11436] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.1568'. [ 458.220834][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'. [ 459.608140][T11480] xt_socket: unknown flags 0xd0 [ 459.810928][T11485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1577'. [ 461.422429][T11506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.730833][T11506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.777451][T11506] IPv6: NLM_F_REPLACE set, but no existing node found! [ 462.249364][T11522] netlink: 'syz.2.1593': attribute type 4 has an invalid length. [ 462.281770][T11522] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1593'. [ 462.383232][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1585'. [ 462.403651][ T30] audit: type=1326 audit(1744799038.901:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11529 comm="syz.3.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ceb8e169 code=0x7ffc0000 [ 462.427039][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.510357][ T30] audit: type=1326 audit(1744799038.901:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11529 comm="syz.3.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ceb8e169 code=0x7ffc0000 [ 463.221062][T11545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.277554][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1597'. [ 463.352369][T11545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.740684][T11561] netlink: 'syz.4.1601': attribute type 3 has an invalid length. [ 463.748679][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1601'. [ 466.634181][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1606'. [ 467.464295][T11590] Failed to initialize the IGMP autojoin socket (err -2) [ 467.511761][T11593] cgroup: Need name or subsystem set [ 467.543358][ T30] audit: type=1400 audit(1744799044.041:764): avc: denied { read } for pid=11589 comm="syz.2.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 468.249986][T11613] 9pnet_fd: Insufficient options for proto=fd [ 468.327763][T11617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.444046][T11617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.482862][T11617] nbd: couldn't find a device at index 8960 [ 469.182924][ T9] Process accounting resumed [ 470.515503][T11648] 9pnet_fd: Insufficient options for proto=fd [ 471.578311][T11664] overlayfs: failed to clone upperpath [ 471.770624][T11677] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1641'. [ 471.918380][ T30] audit: type=1326 audit(1744799048.411:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="syz.2.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3495b8e169 code=0x7ffc0000 [ 471.976354][ T30] audit: type=1326 audit(1744799048.411:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="syz.2.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3495b8e169 code=0x7ffc0000 [ 472.007865][ T30] audit: type=1326 audit(1744799048.441:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="syz.2.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f3495b8e169 code=0x7ffc0000 [ 472.020874][T11688] kernel profiling enabled (shift: 63) [ 472.031952][ T30] audit: type=1326 audit(1744799048.441:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="syz.2.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3495b8e169 code=0x7ffc0000 [ 472.062358][ T30] audit: type=1326 audit(1744799048.441:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="syz.2.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3495b8e169 code=0x7ffc0000 [ 472.086546][ T30] audit: type=1326 audit(1744799048.441:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="syz.2.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3495b8e169 code=0x7ffc0000 [ 472.113647][ T30] audit: type=1326 audit(1744799048.441:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="syz.2.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3495b8e169 code=0x7ffc0000 [ 472.116014][T11688] profiling shift: 63 too large [ 472.140237][ T30] audit: type=1326 audit(1744799048.441:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="syz.2.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3495b8e169 code=0x7ffc0000 [ 472.168939][ T30] audit: type=1326 audit(1744799048.441:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="syz.2.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f3495b8e169 code=0x7ffc0000 [ 473.086684][T11705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.097707][T11705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.734505][T11745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1661'. [ 475.744911][T11745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1661'. [ 476.020879][T11745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1661'. [ 476.030311][T11745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1661'. [ 476.114695][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 476.114710][ T30] audit: type=1400 audit(1744799052.611:782): avc: denied { getopt } for pid=11749 comm="syz.0.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 476.141796][T11750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.146066][T11745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1661'. [ 476.150839][T11750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.170666][T11754] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.1663'. [ 476.180890][T11754] netlink: zone id is out of range [ 476.193109][T11745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1661'. [ 476.208535][T11754] netlink: zone id is out of range [ 476.215422][T11754] netlink: zone id is out of range [ 476.227135][T11754] netlink: zone id is out of range [ 476.234254][T11754] netlink: zone id is out of range [ 476.239760][T11754] netlink: zone id is out of range [ 476.246975][T11754] netlink: zone id is out of range [ 476.264521][T11754] netlink: zone id is out of range [ 476.269665][T11754] netlink: zone id is out of range [ 476.283702][T11754] netlink: zone id is out of range [ 477.575367][ T30] audit: type=1326 audit(1744799054.071:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11772 comm="syz.4.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefb58e169 code=0x7ffc0000 [ 477.620929][T11777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.911289][T11777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.027027][ T30] audit: type=1326 audit(1744799054.101:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11772 comm="syz.4.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefb58e169 code=0x7ffc0000 [ 478.154306][T11786] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 478.418317][ T30] audit: type=1326 audit(1744799054.101:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11772 comm="syz.4.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efefb58e169 code=0x7ffc0000 [ 478.494119][ T30] audit: type=1326 audit(1744799054.101:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11772 comm="syz.4.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefb58e169 code=0x7ffc0000 [ 478.517509][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.528115][ T30] audit: type=1326 audit(1744799054.101:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11772 comm="syz.4.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefb58e169 code=0x7ffc0000 [ 478.551529][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.565983][ T30] audit: type=1326 audit(1744799054.111:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11772 comm="syz.4.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efefb58e169 code=0x7ffc0000 [ 478.572798][T11793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1674'. [ 478.594903][ T30] audit: type=1400 audit(1744799054.251:789): avc: denied { bind } for pid=11774 comm="syz.0.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 478.617544][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.629245][ T30] audit: type=1326 audit(1744799054.511:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11772 comm="syz.4.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefb58e169 code=0x7ffc0000 [ 478.652660][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.671657][ T30] audit: type=1326 audit(1744799054.511:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11772 comm="syz.4.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefb58e169 code=0x7ffc0000 [ 478.865258][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1677'. [ 478.893640][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1677'. [ 479.616287][T11813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.706363][T11813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.690451][T11828] netlink: 'syz.3.1685': attribute type 21 has an invalid length. [ 480.839368][T11830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.869042][T11830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.897614][T11830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.924912][T11830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.131814][ T30] kauditd_printk_skb: 2903 callbacks suppressed [ 481.131832][ T30] audit: type=1326 audit(1744799057.611:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11792 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3495b8e169 code=0x7ff00000 [ 481.223655][ T30] audit: type=1326 audit(1744799057.611:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11792 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3495b8e169 code=0x7ff00000 [ 481.260099][T11849] FAULT_INJECTION: forcing a failure. [ 481.260099][T11849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.274711][T11849] CPU: 0 UID: 0 PID: 11849 Comm: syz.0.1693 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 481.274733][T11849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 481.274743][T11849] Call Trace: [ 481.274749][T11849] [ 481.274754][T11849] dump_stack_lvl+0x16c/0x1f0 [ 481.274786][T11849] should_fail_ex+0x512/0x640 [ 481.274810][T11849] _copy_to_user+0x32/0xd0 [ 481.274831][T11849] copy_siginfo_to_user+0x27/0xc0 [ 481.274857][T11849] x64_setup_rt_frame+0x811/0xcf0 [ 481.274888][T11849] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 481.274913][T11849] ? __pfx_do_splice+0x10/0x10 [ 481.274928][T11849] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 481.274955][T11849] arch_do_signal_or_restart+0x5e6/0x7d0 [ 481.274979][T11849] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 481.275000][T11849] ? __do_splice+0x1e1/0x360 [ 481.275027][T11849] syscall_exit_to_user_mode+0x150/0x2a0 [ 481.275051][T11849] do_syscall_64+0xda/0x260 [ 481.275075][T11849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.275090][T11849] RIP: 0033:0x7f63d038e167 [ 481.275102][T11849] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 481.275117][T11849] RSP: 002b:00007f63d127c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 481.275132][T11849] RAX: 0000000000000113 RBX: 00007f63d05b5fa0 RCX: 00007f63d038e169 [ 481.275142][T11849] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000005 [ 481.275150][T11849] RBP: 00007f63d127c090 R08: 0000000000008ec3 R09: 0000000000000000 [ 481.275159][T11849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.275168][T11849] R13: 0000000000000000 R14: 00007f63d05b5fa0 R15: 00007ffd2a3d9fa8 [ 481.275188][T11849] [ 481.280742][ T30] audit: type=1326 audit(1744799057.611:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11792 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3495b8e169 code=0x7ff00000 [ 481.514246][ T30] audit: type=1326 audit(1744799057.611:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11792 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3495b8e169 code=0x7ff00000 [ 481.537783][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.547279][ T30] audit: type=1326 audit(1744799057.611:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11792 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3495b8e169 code=0x7ff00000 [ 481.570706][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.624550][ T30] audit: type=1326 audit(1744799057.611:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11792 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3495b8e169 code=0x7ff00000 [ 481.651640][ T30] audit: type=1326 audit(1744799057.611:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11792 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3495b8e169 code=0x7ff00000 [ 481.760221][ T30] audit: type=1326 audit(1744799057.611:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11792 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3495b8e169 code=0x7ff00000 [ 481.783752][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.806242][T11863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.859176][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1694'. [ 481.895965][T11863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.211316][ T30] audit: type=1326 audit(1744799057.611:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11792 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3495b8e169 code=0x7ff00000 [ 482.235079][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.285681][ T30] audit: type=1326 audit(1744799057.611:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11792 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3495b8e169 code=0x7ff00000 [ 483.635216][T11884] FAULT_INJECTION: forcing a failure. [ 483.635216][T11884] name failslab, interval 1, probability 0, space 0, times 0 [ 483.648428][T11884] CPU: 1 UID: 0 PID: 11884 Comm: syz.3.1703 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 483.648451][T11884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 483.648461][T11884] Call Trace: [ 483.648467][T11884] [ 483.648473][T11884] dump_stack_lvl+0x16c/0x1f0 [ 483.648502][T11884] should_fail_ex+0x512/0x640 [ 483.648520][T11884] ? fs_reclaim_acquire+0xae/0x150 [ 483.648547][T11884] should_failslab+0xc2/0x120 [ 483.648569][T11884] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 483.648586][T11884] ? lockdep_init_map_type+0x5c/0x280 [ 483.648605][T11884] ? dlmfs_alloc_inode+0x25/0x50 [ 483.648626][T11884] ? __pfx_dlmfs_fill_super+0x10/0x10 [ 483.648642][T11884] ? __pfx_dlmfs_alloc_inode+0x10/0x10 [ 483.648657][T11884] dlmfs_alloc_inode+0x25/0x50 [ 483.648672][T11884] alloc_inode+0x61/0x240 [ 483.648695][T11884] new_inode+0x22/0x1c0 [ 483.648717][T11884] ? __pfx_dlmfs_fill_super+0x10/0x10 [ 483.648733][T11884] dlmfs_fill_super+0xeb/0x250 [ 483.648750][T11884] get_tree_nodev+0xda/0x190 [ 483.648768][T11884] vfs_get_tree+0x8b/0x340 [ 483.648790][T11884] path_mount+0x14d4/0x1f30 [ 483.648811][T11884] ? kmem_cache_free+0x2d4/0x4d0 [ 483.648827][T11884] ? __pfx_path_mount+0x10/0x10 [ 483.648849][T11884] ? putname+0x154/0x1a0 [ 483.648872][T11884] __x64_sys_mount+0x28d/0x310 [ 483.648891][T11884] ? __pfx___x64_sys_mount+0x10/0x10 [ 483.648913][T11884] ? rcu_is_watching+0x12/0xc0 [ 483.648941][T11884] do_syscall_64+0xcd/0x260 [ 483.648966][T11884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.648983][T11884] RIP: 0033:0x7f06ceb8e169 [ 483.648997][T11884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.649013][T11884] RSP: 002b:00007f06cf931038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 483.649031][T11884] RAX: ffffffffffffffda RBX: 00007f06cedb6160 RCX: 00007f06ceb8e169 [ 483.649042][T11884] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000000000000000 [ 483.649052][T11884] RBP: 00007f06cf931090 R08: 0000000000000000 R09: 0000000000000000 [ 483.649062][T11884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 483.649072][T11884] R13: 0000000000000000 R14: 00007f06cedb6160 R15: 00007ffed1118788 [ 483.649095][T11884] [ 484.457155][T11890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.465913][T11890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.926909][T11904] netlink: 'syz.1.1708': attribute type 4 has an invalid length. [ 485.948661][T11904] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1708'. [ 486.219317][T11909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.248321][T11909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.928264][T11922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.937129][T11922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.071035][T11926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.085034][T11926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.154159][T11927] Failed to initialize the IGMP autojoin socket (err -2) [ 487.948910][T11937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.963841][T11937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.705594][T11949] kernel profiling enabled (shift: 63) [ 488.713756][T11949] profiling shift: 63 too large [ 488.720432][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 488.720445][ T30] audit: type=1400 audit(1744799065.211:3761): avc: denied { execute } for pid=11948 comm="syz.3.1721" path="/sys/kernel/profiling" dev="sysfs" ino=1393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 488.828356][T11950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1721'. [ 489.374081][T11962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.753695][T11962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.924575][T11968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.933143][T11968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.818104][T11992] input: syz0 as /devices/virtual/input/input22 [ 491.827164][T11992] input: failed to attach handler leds to device input22, error: -6 [ 491.853300][T11992] vivid-001: disconnect [ 491.932133][ T30] audit: type=1400 audit(1744799068.431:3762): avc: denied { read } for pid=11991 comm="syz.3.1734" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 492.244236][ T30] audit: type=1400 audit(1744799068.451:3763): avc: denied { open } for pid=11991 comm="syz.3.1734" path="/358/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 492.564175][T11994] block device autoloading is deprecated and will be removed. [ 492.595941][T11991] vivid-001: reconnect [ 493.548870][T12008] SELinux: ebitmap: truncated map [ 493.567842][T12008] SELinux: failed to load policy [ 494.429179][T12029] netlink: 'syz.3.1744': attribute type 21 has an invalid length. [ 495.316844][ T30] audit: type=1400 audit(1744799071.811:3764): avc: denied { map } for pid=12042 comm="syz.3.1750" path="pipe:[35515]" dev="pipefs" ino=35515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 495.345132][T12044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.362035][T12044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.373025][T12047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1751'. [ 497.015112][T12089] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1765'. [ 497.048229][T12089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.065127][T12089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.287138][ T1205] Process accounting resumed [ 497.306539][ T5940] kernel read not supported for file /dsp (pid: 5940 comm: kworker/1:7) [ 498.124379][T12110] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1773'. [ 498.934208][ T30] audit: type=1400 audit(1744799075.431:3765): avc: denied { append } for pid=12122 comm="syz.1.1778" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 499.143473][T12123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.453617][T12123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.577614][T12150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.640160][T12150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.461903][T12168] fuse: Unknown parameter 'user_i00000000000000000000' [ 501.763796][T12171] 9pnet_fd: Insufficient options for proto=fd [ 501.785575][ T1205] raw-gadget.1 gadget.0: failed to queue reset event [ 502.115100][ T1205] raw-gadget.1 gadget.0: failed to queue resume event [ 502.201207][ T1205] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 502.213808][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 502.224718][ T1205] raw-gadget.1 gadget.0: failed to queue reset event [ 502.301593][ T1205] raw-gadget.1 gadget.0: failed to queue resume event [ 502.401749][ T1205] usb 1-1: device descriptor read/64, error -32 [ 502.511263][ T1205] raw-gadget.1 gadget.0: failed to queue suspend event [ 502.530142][T12188] overlayfs: failed to clone upperpath [ 502.538273][ T1205] raw-gadget.1 gadget.0: failed to queue reset event [ 502.640256][T12196] Failed to initialize the IGMP autojoin socket (err -2) [ 502.650526][ T1205] raw-gadget.1 gadget.0: failed to queue resume event [ 502.721455][ T1205] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 502.737558][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 502.759600][ T1205] raw-gadget.1 gadget.0: failed to queue reset event [ 502.786443][T12202] Failed to initialize the IGMP autojoin socket (err -2) [ 502.845866][ T1205] raw-gadget.1 gadget.0: failed to queue resume event [ 502.922443][ T1205] usb 1-1: device descriptor read/64, error -32 [ 503.057417][ T1205] raw-gadget.1 gadget.0: failed to queue suspend event [ 503.071322][ T1205] usb usb1-port1: attempt power cycle [ 503.076778][ T1205] raw-gadget.1 gadget.0: failed to queue disconnect event [ 503.084599][ T1205] raw-gadget.1 gadget.0: failed to queue reset event [ 503.253925][ T1205] raw-gadget.1 gadget.0: failed to queue resume event [ 503.278451][ T1205] raw-gadget.1 gadget.0: failed to queue reset event [ 503.501477][ T1205] raw-gadget.1 gadget.0: failed to queue resume event [ 503.571233][ T1205] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 503.601422][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 503.608648][ T1205] usb 1-1: device descriptor read/8, error -32 [ 503.721498][ T1205] raw-gadget.1 gadget.0: failed to queue suspend event [ 503.744657][T12234] netlink: 'syz.1.1803': attribute type 1 has an invalid length. [ 503.918619][ T1205] raw-gadget.1 gadget.0: failed to queue reset event [ 504.009574][T12234] 8021q: adding VLAN 0 to HW filter on device bond1 [ 504.073052][T12236] 8021q: adding VLAN 0 to HW filter on device bond1 [ 504.088506][T12236] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 504.100736][T12236] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 504.110451][ T1205] raw-gadget.1 gadget.0: failed to queue resume event [ 504.171326][ T1205] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 504.193825][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 504.201012][ T1205] usb 1-1: device descriptor read/8, error -32 [ 504.311542][ T1205] raw-gadget.1 gadget.0: failed to queue suspend event [ 504.318929][ T1205] usb usb1-port1: unable to enumerate USB device [ 504.805829][T12270] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 504.816929][T12270] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 504.962319][T12272] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1813'. [ 505.094273][T12276] netlink: 'syz.0.1816': attribute type 1 has an invalid length. [ 505.199078][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1816'. [ 505.288757][T12279] bond5: (slave gretap1): making interface the new active one [ 505.333049][T12276] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 505.341091][T12279] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 505.730779][T12282] bond5 (unregistering): (slave gretap1): Releasing active interface [ 505.787419][T12282] bond5 (unregistering): Released all slaves [ 505.907573][T12289] kernel profiling enabled (shift: 63) [ 505.928489][T12289] profiling shift: 63 too large [ 505.998008][T12289] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1820'. [ 506.130200][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1823'. [ 506.322609][T12305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.337856][T12305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.655377][T12297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1824'. [ 506.733540][T12309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.871391][T12309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.979195][T12321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.059783][T12321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.493788][T12338] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1833'. [ 508.501377][T12336] netlink: 'syz.2.1835': attribute type 5 has an invalid length. [ 509.138855][T12348] overlayfs: overlapping lowerdir path [ 510.076321][ T30] audit: type=1400 audit(1744799086.571:3766): avc: denied { mount } for pid=12362 comm="syz.4.1844" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 510.145731][T12366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.154768][T12366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.246485][T12369] netlink: 'syz.4.1844': attribute type 4 has an invalid length. [ 510.254475][T12369] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1844'. [ 510.809231][T12379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.833379][T12379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.196229][ T30] audit: type=1400 audit(1744799087.681:3767): avc: denied { setopt } for pid=12380 comm="syz.3.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 512.166385][ T30] audit: type=1400 audit(1744799088.661:3768): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 512.749580][T12402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1854'. [ 513.343585][T12400] bond0: entered promiscuous mode [ 513.348848][T12400] bond_slave_0: entered promiscuous mode [ 513.354709][T12400] bond_slave_1: entered promiscuous mode [ 513.525186][T12415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.536162][T12415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.839842][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1863'. [ 514.032541][T12432] Failed to initialize the IGMP autojoin socket (err -2) [ 514.140552][T12436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1868'. [ 514.152724][T12436] netlink: 'syz.2.1868': attribute type 10 has an invalid length. [ 514.318589][T12440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.329162][T12440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.474000][T12442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.484052][T12442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.588289][T12453] SELinux: ebitmap: truncated map [ 515.744963][T12453] SELinux: failed to load policy [ 515.855207][T12461] kernel profiling enabled (shift: 63) [ 515.860876][T12461] profiling shift: 63 too large [ 516.195649][T12464] xt_socket: unknown flags 0xd0 [ 516.386371][T12480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.409632][T12481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.419416][T12480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.460502][T12481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.554400][T12480] Failed to initialize the IGMP autojoin socket (err -2) [ 516.563431][T12483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.582930][T12483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.018666][T12489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.035595][T12489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.045277][T12483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.055101][T12483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.074245][T12480] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1880'. [ 517.668430][T12497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 518.339420][T12497] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 518.934688][T12509] vivid-001: disconnect [ 519.645160][T12503] vivid-001: reconnect [ 521.072854][T12525] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1895'. [ 521.130548][T12523] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 521.200132][T12527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.215115][T12527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.765029][T12555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.807157][T12555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.914491][T12555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.969078][T12556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.995082][ T30] audit: type=1400 audit(1744799099.401:3769): avc: denied { write } for pid=12554 comm="syz.0.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 523.034719][T12555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.051402][T12556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.072666][ T30] audit: type=1400 audit(1744799099.401:3770): avc: denied { read } for pid=12554 comm="syz.0.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 523.259296][ T30] audit: type=1400 audit(1744799099.621:3771): avc: denied { remount } for pid=12558 comm="syz.4.1905" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 524.509333][T12571] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12571 comm=syz.4.1908 [ 524.522444][ T30] audit: type=1800 audit(1744799101.011:3772): pid=12572 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1909" name="bus" dev="overlay" ino=2088 res=0 errno=0 [ 524.562156][T12573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.580359][T12573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.589113][ T30] audit: type=1400 audit(1744799101.071:3773): avc: denied { read } for pid=12569 comm="syz.4.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 524.653598][T12575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.754164][T12575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.891368][ T30] audit: type=1400 audit(1744799101.311:3774): avc: denied { getopt } for pid=12576 comm="syz.3.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 525.629999][ T30] audit: type=1400 audit(1744799101.311:3775): avc: denied { ioctl } for pid=12576 comm="syz.3.1911" path="socket:[38916]" dev="sockfs" ino=38916 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 526.391715][T12596] netlink: 'syz.2.1917': attribute type 21 has an invalid length. [ 527.323716][T12605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.348717][T12605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.358832][T12609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1922'. [ 527.385649][T12609] net_ratelimit: 1 callbacks suppressed [ 527.385668][T12609] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 527.500930][ T30] audit: type=1400 audit(1744799103.991:3776): avc: denied { read } for pid=12606 comm="syz.3.1922" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 527.526327][ T30] audit: type=1400 audit(1744799103.991:3777): avc: denied { open } for pid=12606 comm="syz.3.1922" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 527.551166][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.599829][ T30] audit: type=1400 audit(1744799103.991:3778): avc: denied { ioctl } for pid=12606 comm="syz.3.1922" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 529.221875][ T5940] raw-gadget.3 gadget.1: failed to queue resume event [ 529.343370][ T5940] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 529.353264][ C1] raw-gadget.3 gadget.1: ignoring, device is not running [ 529.360631][ T5940] raw-gadget.3 gadget.1: failed to queue reset event [ 529.411532][ T30] audit: type=1400 audit(1744799105.911:3779): avc: denied { write } for pid=12638 comm="syz.0.1933" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 529.432353][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.451399][ T5940] raw-gadget.3 gadget.1: failed to queue resume event [ 529.473032][ T30] audit: type=1400 audit(1744799105.911:3780): avc: denied { open } for pid=12638 comm="syz.0.1933" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 529.516189][ T30] audit: type=1400 audit(1744799105.911:3781): avc: denied { read } for pid=12638 comm="syz.0.1933" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 529.554682][ T5940] usb 2-1: device descriptor read/64, error -32 [ 529.579005][ T30] audit: type=1800 audit(1744799106.001:3782): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1933" name="/" dev="9p" ino=2 res=0 errno=0 [ 529.599210][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.943889][ T5940] raw-gadget.3 gadget.1: failed to queue suspend event [ 529.963935][ T5940] raw-gadget.3 gadget.1: failed to queue reset event [ 530.046610][ T5940] raw-gadget.3 gadget.1: failed to queue resume event [ 530.201246][ T5940] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 530.653668][ C1] raw-gadget.3 gadget.1: ignoring, device is not running [ 530.661250][ T5940] raw-gadget.3 gadget.1: failed to queue reset event [ 530.732248][ T5940] raw-gadget.3 gadget.1: failed to queue resume event [ 530.863974][ T5940] usb 2-1: device descriptor read/64, error -32 [ 531.754392][T12663] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1939'. [ 531.827926][ T5940] raw-gadget.3 gadget.1: failed to queue suspend event [ 531.835175][ T5940] usb usb2-port1: attempt power cycle [ 531.842833][ T5940] raw-gadget.3 gadget.1: failed to queue disconnect event [ 531.850837][ T5940] raw-gadget.3 gadget.1: failed to queue reset event [ 531.922260][ T5940] raw-gadget.3 gadget.1: failed to queue resume event [ 531.942384][ T5940] raw-gadget.3 gadget.1: failed to queue reset event [ 532.400152][T12671] input: syz0 as /devices/virtual/input/input24 [ 532.585200][ T5940] raw-gadget.3 gadget.1: failed to queue resume event [ 532.663015][ T5940] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 532.711880][ C1] raw-gadget.3 gadget.1: ignoring, device is not running [ 532.727329][ T5940] usb 2-1: device descriptor read/8, error -32 [ 532.871857][ T5940] raw-gadget.3 gadget.1: failed to queue suspend event [ 532.921456][ T5940] raw-gadget.3 gadget.1: failed to queue reset event [ 533.038430][ T5940] raw-gadget.3 gadget.1: failed to queue resume event [ 533.115849][ T5940] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 533.157091][ C1] raw-gadget.3 gadget.1: ignoring, device is not running [ 533.178095][ T5940] usb 2-1: device descriptor read/8, error -32 [ 533.493357][ T5940] raw-gadget.3 gadget.1: failed to queue suspend event [ 533.579081][ T5940] usb usb2-port1: unable to enumerate USB device [ 534.030742][ T30] audit: type=1400 audit(1744799110.521:3783): avc: denied { lock } for pid=12690 comm="syz.3.1948" path="socket:[39054]" dev="sockfs" ino=39054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 534.144081][ T30] audit: type=1400 audit(1744799110.531:3784): avc: denied { listen } for pid=12690 comm="syz.3.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 535.493857][T12714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1956'. [ 536.111850][T12722] 9pnet_fd: Insufficient options for proto=fd [ 536.535556][T12730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.568824][T12731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.582848][T12730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.601423][T12731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.614349][T12731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.633468][T12731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.176552][T12771] 9pnet_fd: Insufficient options for proto=fd [ 538.729382][T12779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.738649][T12779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.986753][ T30] audit: type=1400 audit(1744799115.481:3785): avc: denied { map } for pid=12778 comm="syz.0.1977" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 539.246695][ T30] audit: type=1400 audit(1744799115.741:3786): avc: denied { getopt } for pid=12786 comm="syz.4.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 539.704947][T12791] veth0_macvtap: left promiscuous mode [ 539.714917][T12791] macvtap0: refused to change device tx_queue_len [ 539.742280][T12795] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1982'. [ 539.778363][T12797] netlink: 'syz.2.1983': attribute type 5 has an invalid length. [ 644.841078][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 644.848079][ C1] rcu: (detected by 1, t=10502 jiffies, g=46189, q=211 ncpus=2) [ 644.855786][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4295001541-4294991039), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 644.869138][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g46189 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 644.880351][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 644.890325][ C1] rcu: RCU grace-period kthread stack dump: [ 644.896205][ C1] task:rcu_preempt state:R running task stack:27304 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 644.909822][ C1] Call Trace: [ 644.913100][ C1] [ 644.916034][ C1] __schedule+0x116f/0x5de0 [ 644.920564][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 644.925510][ C1] ? __pfx___schedule+0x10/0x10 [ 644.930378][ C1] ? find_held_lock+0x2b/0x80 [ 644.935060][ C1] ? schedule+0x2d7/0x3a0 [ 644.939394][ C1] schedule+0xe7/0x3a0 [ 644.943468][ C1] schedule_timeout+0x123/0x290 [ 644.948320][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 644.953687][ C1] ? __pfx_process_timeout+0x10/0x10 [ 644.958973][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 644.964775][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 644.970236][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 644.974994][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 644.980265][ C1] ? rcu_gp_init+0xc76/0x15a0 [ 644.984949][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 644.989804][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 644.995613][ C1] rcu_gp_kthread+0x270/0x380 [ 645.000290][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 645.005509][ C1] ? rcu_is_watching+0x12/0xc0 [ 645.010290][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 645.015497][ C1] ? __kthread_parkme+0x19e/0x250 [ 645.020525][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 645.025729][ C1] kthread+0x3c2/0x780 [ 645.029794][ C1] ? __pfx_kthread+0x10/0x10 [ 645.034373][ C1] ? __pfx_kthread+0x10/0x10 [ 645.038961][ C1] ? __pfx_kthread+0x10/0x10 [ 645.043540][ C1] ? __pfx_kthread+0x10/0x10 [ 645.048117][ C1] ? rcu_is_watching+0x12/0xc0 [ 645.052881][ C1] ? __pfx_kthread+0x10/0x10 [ 645.057459][ C1] ret_from_fork+0x45/0x80 [ 645.061878][ C1] ? __pfx_kthread+0x10/0x10 [ 645.066460][ C1] ret_from_fork_asm+0x1a/0x30 [ 645.071241][ C1] [ 645.074247][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 645.080574][ C1] Sending NMI from CPU 1 to CPUs 0: [ 645.085785][ C0] NMI backtrace for cpu 0 [ 645.085809][ C0] CPU: 0 UID: 0 PID: 3 Comm: pool_workqueue_ Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 645.085825][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 645.085834][ C0] RIP: 0010:mark_lock+0x63/0x610 [ 645.085854][ C0] Code: 6d 41 bd 01 00 00 00 89 d9 41 d3 e5 4d 63 ed 41 0f b7 44 24 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 43 ba 15 14 0f 83 86 00 00 00 <48> 8d 04 80 48 8d 04 80 48 8d 04 c5 60 af ad 95 4c 89 ea 48 23 50 [ 645.085866][ C0] RSP: 0018:ffffc90000007b90 EFLAGS: 00000007 [ 645.085878][ C0] RAX: 0000000000000e36 RBX: 0000000000000000 RCX: 0000000000000000 [ 645.085886][ C0] RDX: 0000000000000000 RSI: ffff88801c6fd370 RDI: ffff88801c6fc880 [ 645.085894][ C0] RBP: ffffc90000007c28 R08: 0000000000080000 R09: 0000000000000001 [ 645.085902][ C0] R10: 0000000000000000 R11: ffff88802cf27300 R12: ffff88801c6fd370 [ 645.085910][ C0] R13: 0000000000000001 R14: ffff88801c6fc880 R15: ffff88801c6fc880 [ 645.085918][ C0] FS: 0000000000000000(0000) GS:ffff8881249b0000(0000) knlGS:0000000000000000 [ 645.085932][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 645.085941][ C0] CR2: 000000110c39a1b1 CR3: 000000007d5d6000 CR4: 00000000003526f0 [ 645.085950][ C0] Call Trace: [ 645.085955][ C0] [ 645.085963][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 645.085976][ C0] __lock_acquire+0x95e/0x1ba0 [ 645.085989][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 645.086004][ C0] lock_acquire+0x179/0x350 [ 645.086015][ C0] ? advance_sched+0xd9/0xc80 [ 645.086032][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 645.086046][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 645.086064][ C0] ? __pfx_advance_sched+0x10/0x10 [ 645.086075][ C0] _raw_spin_lock+0x2e/0x40 [ 645.086089][ C0] ? advance_sched+0xd9/0xc80 [ 645.086100][ C0] advance_sched+0xd9/0xc80 [ 645.086113][ C0] ? find_held_lock+0x2b/0x80 [ 645.086129][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 645.086144][ C0] ? __pfx_advance_sched+0x10/0x10 [ 645.086155][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 645.086173][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 645.086186][ C0] ? read_tsc+0x9/0x20 [ 645.086210][ C0] hrtimer_interrupt+0x397/0x8e0 [ 645.086228][ C0] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 645.086248][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 645.086263][ C0] [ 645.086267][ C0] [ 645.086272][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 645.086287][ C0] RIP: 0010:preempt_schedule_irq+0x4c/0x90 [ 645.086306][ C0] Code: df 55 65 48 8b 2d cc 72 33 08 53 48 89 eb 48 c1 eb 03 48 01 c3 bf 01 00 00 00 e8 0f a1 15 f6 e8 5a 74 4f f6 fb bf 01 00 00 00 af 99 ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 5d 4b 15 [ 645.086318][ C0] RSP: 0018:ffffc90000087cd8 EFLAGS: 00000202 [ 645.086328][ C0] RAX: 000000000000242f RBX: ffffed10038df910 RCX: ffffffff81c300bf [ 645.086336][ C0] RDX: 0000000000000000 RSI: ffffffff8dbef557 RDI: 0000000000000001 [ 645.086343][ C0] RBP: ffff88801c6fc880 R08: 0000000000000001 R09: 0000000000000001 [ 645.086350][ C0] R10: ffffffff90866017 R11: 0000000000000000 R12: 0000000000000000 [ 645.086358][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 645.086368][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 645.086385][ C0] ? preempt_schedule_irq+0x46/0x90 [ 645.086400][ C0] irqentry_exit+0x36/0x90 [ 645.086415][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 645.086427][ C0] RIP: 0010:lockdep_unregister_key+0xdd/0x130 [ 645.086447][ C0] Code: 48 89 ef e8 b5 fe ff ff 48 89 ef e8 cd e5 ff ff 89 c3 e8 f6 ee ff ff 9c 58 f6 c4 02 75 52 41 f7 c4 00 02 00 00 74 01 fb 84 db <75> 1b 5b 5d 41 5c e9 58 5d 0a 00 8b 05 d6 d1 ee 0e 31 db 85 c0 74 [ 645.086458][ C0] RSP: 0018:ffffc90000087da0 EFLAGS: 00000246 [ 645.086467][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 645.086475][ C0] RDX: 0000000000000000 RSI: ffffffff8dce06ea RDI: ffffffff8bf46500 [ 645.086483][ C0] RBP: ffffffff972bb018 R08: 000000000000b604 R09: ffffffff95c81bc8 [ 645.086491][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000246 [ 645.086498][ C0] R13: ffff88802994d400 R14: ffff88802994d408 R15: ffff888066940001 [ 645.086512][ C0] pwq_release_workfn+0x5e6/0xa70 [ 645.086530][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 645.086545][ C0] kthread_worker_fn+0x30d/0xc50 [ 645.086558][ C0] ? __pfx_pwq_release_workfn+0x10/0x10 [ 645.086575][ C0] ? __pfx_kthread_worker_fn+0x10/0x10 [ 645.086586][ C0] kthread+0x3c2/0x780 [ 645.086599][ C0] ? __pfx_kthread+0x10/0x10 [ 645.086610][ C0] ? __pfx_kthread+0x10/0x10 [ 645.086622][ C0] ? __pfx_kthread+0x10/0x10 [ 645.086633][ C0] ? __pfx_kthread+0x10/0x10 [ 645.086645][ C0] ? rcu_is_watching+0x12/0xc0 [ 645.086660][ C0] ? __pfx_kthread+0x10/0x10 [ 645.086672][ C0] ret_from_fork+0x45/0x80 [ 645.086684][ C0] ? __pfx_kthread+0x10/0x10 [ 645.086697][ C0] ret_from_fork_asm+0x1a/0x30 [ 645.086718][ C0]