last executing test programs: 3.818292733s ago: executing program 2 (id=1997): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000003b0007010000000000000000037c0000040000000c000180"], 0x24}}, 0x0) 3.726655625s ago: executing program 2 (id=1999): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000640)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30, 0x3}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.909121118s ago: executing program 4 (id=2007): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8c101a, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) 2.838983288s ago: executing program 4 (id=2009): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000003b0007010000000000000000037c0000040000000c000180"], 0x24}}, 0x0) 2.758719821s ago: executing program 4 (id=2011): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000005840)) 2.670292797s ago: executing program 4 (id=2014): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, 0x0, 0x4c0d0) 2.657426934s ago: executing program 0 (id=2015): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000000), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000100)='THAWED\x00', 0x7) 2.609675376s ago: executing program 2 (id=2016): creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x3}}, 0x30) 2.563992339s ago: executing program 2 (id=2019): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x40}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/oss_mixer\x00', 0x80401, 0x0) writev(r2, &(0x7f0000004740)=[{0x0}, {&(0x7f0000000540)="b7", 0x1}], 0x2) 2.533562862s ago: executing program 4 (id=2020): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x40}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/oss_mixer\x00', 0x80401, 0x0) writev(r2, &(0x7f0000004740)=[{0x0}, {&(0x7f0000000540)="b7", 0x1}], 0x2) r3 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) ioctl$VIDIOC_S_FBUF(r4, 0x402c560b, &(0x7f0000000000)={0xe9a616b1796659b6, 0x2, &(0x7f00000002c0)="fa7129894b9fce72d81d0c4f0064fe132de7f4a3c3399d58230105927be07b3f6257e435a48e61eac216f11d8d5f7100c2b502bf438650a76b5010e3a5502f7ae2c1d7a3932129c0a4fc197ee0f38cd43700ef5314d270c7b34fd4d658a8f4090147d72e3ca6fec804366b2271e03fc47bf6f08e2972f5055636e1cc1f2474cd4d718b675a461a8676762fe20bfb895b88d910d5c7ae7a99fdbdab5d0704d701235c7dd213aca328e360324cd10357ea666427", {0x1, 0x6, 0x56595559, 0x7, 0xfffffffb, 0xf, 0x4, 0xbc2}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendfile(r5, r6, 0x0, 0x1000004) socket$inet6(0xa, 0x2, 0x3a) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r7, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) 2.440294177s ago: executing program 0 (id=2021): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8c101a, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x80000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2.439876838s ago: executing program 2 (id=2022): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x1, 0x0, 0x0, @void, @value}, 0x28) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettfilter={0x2c, 0x2e, 0xa0c, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xffe0, 0x5}, {0xfff3, 0xa}}, [{0x8, 0xb, 0xfca}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4000844) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000600000908000400e00000e807000500ac1eec000f000700756e636f6e6669"], 0x34}, 0x2, 0x34005}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f0000000040)=[{r7, 0x8000}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) 2.431180686s ago: executing program 0 (id=2024): ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000400)={0x4, @win={{0xb, 0x5, 0x5, 0x6}, 0x1, 0x5, 0x0, 0x5, 0x0, 0xc}}) 2.244764423s ago: executing program 3 (id=2026): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) ftruncate(r0, 0xf) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000005840)) 2.213843074s ago: executing program 1 (id=2027): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80dc5521, &(0x7f0000002300)=""/4115) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_genetlink_get_family_id$devlink(0x0, r2) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0x7, r8, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.166693673s ago: executing program 0 (id=2028): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001, 0x31237648, 0x5, 0x9, 0x6}]}) 1.530378694s ago: executing program 2 (id=2029): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/50, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000540)=[{&(0x7f0000000100)}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmmsg$sock(r7, &(0x7f0000003bc0), 0x4000000000002ca, 0x4040014) 1.347373745s ago: executing program 1 (id=2030): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, 0x0, 0x4c0d0) 1.324590129s ago: executing program 0 (id=2031): mount$tmpfs(0x0, 0x0, 0x0, 0x81106a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3b4, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0x94, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x27c}}, {{@uncond, 0x0, 0x110, 0x144, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xe, 0x0, 0x2}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0xd00, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x1b53, 0xe2a5, 0x6a, &(0x7f0000000440)={[0xffffffff]}, 0x8) read$FUSE(r1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000002540)='net/dev_snmp6\x00') r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x18, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x33c7, 0xe154, 0x0, 0x0, 0x12) fsetxattr$trusted_overlay_redirect(r0, 0x0, &(0x7f00000004c0)='./file0\x00', 0x8, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fc00100}]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100), 0x1001) statx(r6, 0x0, 0x100, 0x80, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 1.324188134s ago: executing program 3 (id=2032): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010000c"], 0x24}], 0x1}, 0x0) 1.180935947s ago: executing program 1 (id=2033): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x40}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/oss_mixer\x00', 0x80401, 0x0) writev(r2, &(0x7f0000004740)=[{0x0}, {&(0x7f0000000540)="b7", 0x1}], 0x2) 782.175246ms ago: executing program 3 (id=2034): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5202) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa86082b9827c186dd60cb653e0030"], 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e041e0b20"], 0x7) 586.720813ms ago: executing program 1 (id=2035): sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010200000000ffdbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 359.309741ms ago: executing program 3 (id=2036): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0x8, 0x32b, 0x1, 0x6}) 286.929735ms ago: executing program 1 (id=2037): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 173.572914ms ago: executing program 3 (id=2038): sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4000844) 168.445967ms ago: executing program 0 (id=2039): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x1, 0x0, 0x0, @void, @value}, 0x28) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettfilter={0x2c, 0x2e, 0xa0c, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xffe0, 0x5}, {0xfff3, 0xa}}, [{0x8, 0xb, 0xfca}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1409, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4000844) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000600000908000400e00000e807000500ac1eec000f000700756e636f6e6669"], 0x34}, 0x2, 0x34005}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f0000000040)=[{r7, 0x8000}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) 143.857345ms ago: executing program 1 (id=2040): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x40000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704640180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 723.673µs ago: executing program 3 (id=2041): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x40000001, 0x31237648, 0x5, 0x9, 0x6}]}) 0s ago: executing program 4 (id=2042): r0 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x89b, 0x0, 0x2, 0x3bd}) bind$rxrpc(0xffffffffffffffff, &(0x7f00000007c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x0, 0x50323234}}) r2 = openat$drirender128(0xffffff9c, &(0x7f0000001640), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000001680)={0x12}) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000400), 0x3ff, 0x121200) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x80085665, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$USBDEVFS_IOCTL(r3, 0xc00c5512, &(0x7f00000004c0)=@usbdevfs_driver={0x9, 0xfffff869, &(0x7f0000000440)="df51b2ae702db593b3f590c9286410e094b71d121faaf6a51e67b263cd9ed72f30bf1187aad545e1e3c958a9674bf9ec52e16bd397d9176bbd45698430aa8c311ec05f8757189bb08cca2804129d2495732e8c7b0d725f6fefa8cb4366682fd4d5b24cc3a290ad7323fde93b0321460e"}) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)=ANY=[@ANYRESHEX]) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/143, 0x8f, 0x1, &(0x7f0000000280)=""/110, 0x6e}, &(0x7f0000000200)=0x40) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r6, 0x0) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000000300)='hsr0\x00') r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) socket$inet6(0xa, 0x2, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) kernel console output (not intermixed with test programs): g_socket permissive=1 [ 293.468109][ T29] audit: type=1400 audit(1737820577.242:811): avc: denied { write } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.577957][ T29] audit: type=1400 audit(1737820577.242:812): avc: denied { remove_name } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.604487][ T29] audit: type=1400 audit(1737820577.242:813): avc: denied { add_name } for pid=5173 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.748742][ T29] audit: type=1400 audit(1737820577.282:814): avc: denied { setopt } for pid=9518 comm="syz.4.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 294.787724][ T970] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 295.507880][ T970] usb 4-1: Using ep0 maxpacket: 8 [ 295.538448][ T970] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 295.631106][ T970] usb 4-1: config 0 has no interface number 0 [ 295.637250][ T970] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 9 [ 295.723780][ T970] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 8241, setting to 1024 [ 295.826429][ T970] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 295.836176][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.846525][ T970] usb 4-1: config 0 descriptor?? [ 295.855173][ T970] iowarrior 4-1:0.16: IOWarrior product=0x1512, serial= interface=16 now attached to iowarrior0 [ 296.061840][ T970] usb 4-1: USB disconnect, device number 20 [ 297.095980][ T29] audit: type=1400 audit(1737820580.902:815): avc: denied { read } for pid=9551 comm="syz.3.1064" name="file0" dev="tmpfs" ino=1037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 299.468275][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1076'. [ 299.995986][ T9583] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 300.004198][ T9583] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 300.012791][ T9583] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 300.060447][ T29] audit: type=1400 audit(1737820583.872:816): avc: denied { read } for pid=9589 comm="syz.0.1074" dev="sockfs" ino=21416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 300.089442][ T9590] 9pnet_fd: Insufficient options for proto=fd [ 300.520863][ T9606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1078'. [ 301.137196][ T29] audit: type=1400 audit(1737820584.942:817): avc: denied { mount } for pid=9622 comm="syz.4.1082" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 301.263164][ T29] audit: type=1400 audit(1737820584.942:818): avc: denied { remount } for pid=9622 comm="syz.4.1082" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 301.336933][ T29] audit: type=1400 audit(1737820585.112:819): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 301.446583][ T29] audit: type=1400 audit(1737820585.252:820): avc: denied { read write } for pid=9627 comm="syz.4.1084" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 301.479673][ T29] audit: type=1400 audit(1737820585.252:821): avc: denied { open } for pid=9627 comm="syz.4.1084" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 301.775709][ T5832] Bluetooth: hci5: sending frame failed (-49) [ 301.777744][ T5868] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 301.784348][ T5820] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 301.971140][ T5868] usb 5-1: config 0 has an invalid interface number: 30 but max is 0 [ 301.988566][ T5868] usb 5-1: config 0 has no interface number 0 [ 302.007466][ T5868] usb 5-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 302.034797][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.059216][ T5868] usb 5-1: config 0 descriptor?? [ 302.072531][ T5868] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 302.085981][ T5868] usb 5-1: setting power ON [ 302.097248][ T5868] dvb-usb: bulk message failed: -22 (2/0) [ 302.247824][ T5868] dvb-usb: bulk message failed: -22 (1/0) [ 303.177729][ T29] audit: type=1400 audit(1737820586.712:822): avc: denied { sqpoll } for pid=9644 comm="syz.2.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 303.480089][ T9653] block device autoloading is deprecated and will be removed. [ 303.513524][ T5868] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 303.928572][ T5868] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 303.951449][ T9638] delete_channel: no stack [ 303.964738][ T5868] dvb_usb_cxusb 5-1:0.30: probe with driver dvb_usb_cxusb failed with error -22 [ 304.292377][ T9669] SELinux: syz.3.1097 (9669) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 305.436947][ T29] audit: type=1400 audit(1737820588.452:823): avc: denied { read } for pid=9668 comm="syz.3.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 305.460586][ T29] audit: type=1400 audit(1737820588.452:824): avc: denied { append } for pid=9668 comm="syz.3.1097" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 305.520557][ T5868] usb 5-1: USB disconnect, device number 9 [ 305.702029][ T29] audit: type=1400 audit(1737820589.502:825): avc: denied { mounton } for pid=9680 comm="syz.4.1100" path="/proc/659/task" dev="proc" ino=20407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 306.041718][ T9693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1101'. [ 306.096024][ T29] audit: type=1400 audit(1737820589.792:826): avc: denied { listen } for pid=9681 comm="syz.0.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 306.610774][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1105'. [ 307.770520][ T9689] delete_channel: no stack [ 309.118284][ T29] audit: type=1400 audit(1737820592.872:827): avc: denied { create } for pid=9727 comm="syz.1.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 309.440367][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 309.557997][ T29] audit: type=1400 audit(1737820593.362:828): avc: denied { getopt } for pid=9708 comm="syz.0.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 310.674296][ T9757] orangefs_mount: mount request failed with -4 [ 311.668035][ T9] IPVS: starting estimator thread 0... [ 311.879230][ T9765] IPVS: using max 30 ests per chain, 72000 per kthread [ 315.465507][ T9790] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 316.219733][ T29] audit: type=1400 audit(1737820599.272:829): avc: denied { bpf } for pid=9770 comm="syz.4.1126" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 316.462955][ T29] audit: type=1400 audit(1737820599.272:830): avc: denied { prog_run } for pid=9770 comm="syz.4.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 316.767559][ T29] audit: type=1400 audit(1737820599.632:831): avc: denied { module_request } for pid=9769 comm="syz.3.1124" kmod="cryptomgr" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 316.801968][ T29] audit: type=1400 audit(1737820599.722:832): avc: denied { read write } for pid=5817 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.851032][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.861776][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.906413][ T29] audit: type=1400 audit(1737820599.722:833): avc: denied { open } for pid=5817 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.930456][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.143749][ T29] audit: type=1400 audit(1737820599.722:834): avc: denied { ioctl } for pid=5817 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 317.265903][ T29] audit: type=1400 audit(1737820600.062:835): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 317.366425][ T29] audit: type=1400 audit(1737820600.062:836): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.414544][ T29] audit: type=1400 audit(1737820600.062:837): avc: denied { append } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 317.444747][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.537440][ T29] audit: type=1400 audit(1737820600.062:838): avc: denied { open } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 317.559949][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.583051][ T9882] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 317.603780][ T9882] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 317.615002][ T9882] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 317.616566][ T9889] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 317.774165][ T9896] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 318.378336][ T9896] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 318.423519][ T9896] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 318.581024][ T9896] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 318.702204][ T9905] input: syz1 as /devices/virtual/input/input8 [ 321.131598][ T9944] openvswitch: netlink: Flow actions attr not present in new flow. [ 321.365035][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 321.365051][ T29] audit: type=1400 audit(1737820605.172:921): avc: denied { read } for pid=9950 comm="syz.3.1161" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 321.414977][ T29] audit: type=1400 audit(1737820605.202:922): avc: denied { open } for pid=9950 comm="syz.3.1161" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 321.438500][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.650198][ T9956] futex_wake_op: syz.2.1163 tries to shift op by 144; fix this program [ 321.660457][ T29] audit: type=1400 audit(1737820605.472:923): avc: denied { create } for pid=9955 comm="syz.2.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 321.697891][ T29] audit: type=1400 audit(1737820605.492:924): avc: denied { connect } for pid=9955 comm="syz.2.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 321.717467][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.010412][ T29] audit: type=1400 audit(1737820605.822:925): avc: denied { shutdown } for pid=9965 comm="syz.1.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 322.054335][ T29] audit: type=1400 audit(1737820605.862:926): avc: denied { getopt } for pid=9965 comm="syz.1.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 322.090065][ T29] audit: type=1400 audit(1737820605.862:927): avc: denied { create } for pid=9967 comm="syz.4.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 322.318051][ T29] audit: type=1400 audit(1737820606.122:928): avc: denied { read write } for pid=9970 comm="syz.3.1170" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 322.359005][ T29] audit: type=1400 audit(1737820606.122:929): avc: denied { open } for pid=9970 comm="syz.3.1170" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 322.383255][ T29] audit: type=1400 audit(1737820606.132:930): avc: denied { ioctl } for pid=9970 comm="syz.3.1170" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 322.426732][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1171'. [ 322.727916][ T970] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 322.980262][ T9967] delete_channel: no stack [ 323.717266][ T970] usb 4-1: Invalid ep0 maxpacket: 64 [ 323.788310][ T9982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.800815][ T9982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.857742][ T970] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 324.018091][ T970] usb 4-1: Invalid ep0 maxpacket: 64 [ 324.026027][ T970] usb usb4-port1: attempt power cycle [ 324.837715][ T970] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 324.868953][ T970] usb 4-1: Invalid ep0 maxpacket: 64 [ 325.057750][ T970] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 325.070027][T10013] netlink: 'syz.2.1181': attribute type 32 has an invalid length. [ 325.111345][T10015] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1182'. [ 325.121571][T10015] FAULT_INJECTION: forcing a failure. [ 325.121571][T10015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.160403][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 325.173803][T10015] CPU: 1 UID: 0 PID: 10015 Comm: syz.0.1182 Not tainted 6.13.0-syzkaller-06167-g0afd22092df4 #0 [ 325.173827][T10015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 325.173837][T10015] Call Trace: [ 325.173843][T10015] [ 325.173849][T10015] dump_stack_lvl+0x16c/0x1f0 [ 325.173879][T10015] should_fail_ex+0x497/0x5b0 [ 325.173904][T10015] _copy_from_user+0x2e/0xd0 [ 325.173929][T10015] kstrtouint_from_user+0xd7/0x1c0 [ 325.173948][T10015] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 325.173975][T10015] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 325.174002][T10015] proc_fail_nth_write+0x84/0x250 [ 325.174024][T10015] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 325.174043][T10015] ? ksys_write+0x12b/0x250 [ 325.174073][T10015] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 325.174093][T10015] vfs_write+0x24c/0x1150 [ 325.174117][T10015] ? __fget_files+0x1fc/0x3a0 [ 325.174142][T10015] ? __pfx___mutex_lock+0x10/0x10 [ 325.174172][T10015] ? __pfx_vfs_write+0x10/0x10 [ 325.174203][T10015] ? __fget_files+0x206/0x3a0 [ 325.174234][T10015] ksys_write+0x12b/0x250 [ 325.174260][T10015] ? __pfx_ksys_write+0x10/0x10 [ 325.174292][T10015] do_syscall_64+0xcd/0x250 [ 325.174318][T10015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.174341][T10015] RIP: 0033:0x7fe3a7f8b7df [ 325.174355][T10015] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 325.174371][T10015] RSP: 002b:00007fe3a8d2d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 325.174388][T10015] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe3a7f8b7df [ 325.174399][T10015] RDX: 0000000000000001 RSI: 00007fe3a8d2d0a0 RDI: 0000000000000005 [ 325.174408][T10015] RBP: 00007fe3a8d2d090 R08: 0000000000000000 R09: 0000000000000000 [ 325.174418][T10015] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 325.174427][T10015] R13: 0000000000000000 R14: 00007fe3a81a5fa0 R15: 00007ffe2c0e57b8 [ 325.174451][T10015] [ 325.364971][T10013] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 325.389033][ T970] usb 4-1: Invalid ep0 maxpacket: 64 [ 325.394694][ T970] usb usb4-port1: unable to enumerate USB device [ 325.525353][T10025] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 325.703888][T10032] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 326.778808][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 326.778827][ T29] audit: type=1400 audit(1737820609.932:945): avc: denied { read } for pid=10035 comm="syz.1.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 326.808652][ T29] audit: type=1400 audit(1737820610.272:946): avc: denied { bind } for pid=10035 comm="syz.1.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 326.828897][ T29] audit: type=1400 audit(1737820610.272:947): avc: denied { node_bind } for pid=10035 comm="syz.1.1189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 326.857952][ T29] audit: type=1400 audit(1737820610.662:948): avc: denied { connect } for pid=10038 comm="syz.4.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 327.419809][T10026] delete_channel: no stack [ 327.628810][ T29] audit: type=1400 audit(1737820611.432:949): avc: denied { ioctl } for pid=10064 comm="syz.0.1195" path="/dev/sg0" dev="devtmpfs" ino=738 ioctlcmd=0x2201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 328.139058][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'. [ 329.047737][ T29] audit: type=1400 audit(1737820612.852:950): avc: denied { name_bind } for pid=10083 comm="syz.1.1201" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 329.082485][T10084] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1201'. [ 329.185363][ T29] audit: type=1400 audit(1737820612.852:951): avc: denied { node_bind } for pid=10083 comm="syz.1.1201" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 329.677682][ T29] audit: type=1400 audit(1737820613.472:952): avc: denied { mounton } for pid=10085 comm="syz.0.1203" path="/193/file0" dev="tmpfs" ino=1037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 329.753125][T10092] XFS (nullb0): Invalid superblock magic number [ 331.615758][ T29] audit: type=1400 audit(1737820615.412:953): avc: denied { connect } for pid=10115 comm="syz.2.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 331.886883][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1210'. [ 332.167696][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 332.334565][ T29] audit: type=1400 audit(1737820616.142:954): avc: denied { accept } for pid=10131 comm="syz.2.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 332.527942][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 333.188253][ T29] audit: type=1400 audit(1737820616.422:955): avc: denied { write } for pid=10131 comm="syz.2.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 333.225419][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 333.237339][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.245417][ T9] usb 1-1: Product: syz [ 333.274222][ T9] usb 1-1: Manufacturer: syz [ 333.287032][T10135] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 333.293726][ T9] usb 1-1: SerialNumber: syz [ 333.329891][T10104] delete_channel: no stack [ 333.466702][ T8] IPVS: starting estimator thread 0... [ 333.468725][T10145] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 333.511631][ T29] audit: type=1400 audit(1737820617.322:956): avc: denied { create } for pid=10146 comm="syz.2.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 333.531741][ T29] audit: type=1400 audit(1737820617.322:957): avc: denied { create } for pid=10146 comm="syz.2.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 333.579500][ T29] audit: type=1400 audit(1737820617.342:958): avc: denied { connect } for pid=10146 comm="syz.2.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 333.581070][T10148] IPVS: using max 41 ests per chain, 98400 per kthread [ 333.934366][T10159] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 334.439146][T10159] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 334.469559][T10159] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 334.584736][T10170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1221'. [ 334.644496][T10170] bridge1: entered promiscuous mode [ 334.651669][T10170] bridge1: entered allmulticast mode [ 334.895660][T10181] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 334.917892][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 334.944602][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 334.987121][ T9] usb 1-1: USB disconnect, device number 22 [ 335.017802][ T9] usblp0: removed [ 335.067237][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1227'. [ 335.078917][ T8] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 335.089223][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1227'. [ 335.098478][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.129761][ T8] usb 5-1: config 0 descriptor?? [ 335.141381][T10188] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1229'. [ 335.471588][ T8] [drm] vendor descriptor length:6 data:06 5f 01 6f 23 00 00 00 00 00 00 [ 335.503770][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 335.593378][ T29] audit: type=1400 audit(1737820619.402:959): avc: denied { open } for pid=10193 comm="syz.0.1231" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 335.633067][ T29] audit: type=1400 audit(1737820619.442:960): avc: denied { getopt } for pid=10192 comm="syz.2.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 335.654483][ T29] audit: type=1400 audit(1737820619.442:961): avc: denied { ioctl } for pid=10193 comm="syz.0.1231" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x5438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 335.705137][ T8] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 335.712002][ T8] [drm] Initialized udl on minor 2 [ 336.115597][ T8] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 336.144465][ T8] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 336.172621][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 336.189458][ T8] usb 5-1: USB disconnect, device number 10 [ 336.207295][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 337.177424][T10215] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 337.900080][ T29] audit: type=1400 audit(1737820621.692:962): avc: denied { write } for pid=10217 comm="syz.0.1239" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 337.923659][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.402386][ T29] audit: type=1326 audit(1737820621.702:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.1.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0a1158cd29 code=0x7ffc0000 [ 338.442814][ T29] audit: type=1326 audit(1737820621.712:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.1.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0a1158cd29 code=0x7ffc0000 [ 338.475914][ T29] audit: type=1400 audit(1737820621.842:965): avc: denied { read } for pid=10233 comm="syz.1.1243" path="socket:[23579]" dev="sockfs" ino=23579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 338.511376][ T29] audit: type=1400 audit(1737820622.242:966): avc: denied { map } for pid=10238 comm="syz.2.1244" path="socket:[23655]" dev="sockfs" ino=23655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 338.535670][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.547388][ T29] audit: type=1400 audit(1737820622.242:967): avc: denied { read } for pid=10238 comm="syz.2.1244" path="socket:[23655]" dev="sockfs" ino=23655 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 338.571755][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.354839][T10270] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 341.675770][ T29] audit: type=1400 audit(1737820625.482:968): avc: denied { connect } for pid=10277 comm="syz.1.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 341.998989][T10284] netlink: 'syz.4.1257': attribute type 16 has an invalid length. [ 342.122928][T10284] netlink: 'syz.4.1257': attribute type 17 has an invalid length. [ 342.224707][T10284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.243930][ T29] audit: type=1400 audit(1737820626.052:969): avc: denied { bind } for pid=10285 comm="syz.0.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 342.266169][ T29] audit: type=1400 audit(1737820626.052:970): avc: denied { listen } for pid=10285 comm="syz.0.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 342.285969][ T29] audit: type=1400 audit(1737820626.072:971): avc: denied { read } for pid=10285 comm="syz.0.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 342.847885][ T5865] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 343.443256][ T5865] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 343.606137][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.617246][ T5865] usb 4-1: config 0 descriptor?? [ 343.630159][ T5865] usb 4-1: selecting invalid altsetting 3 [ 343.635921][ T5865] comedi comedi0: could not set alternate setting 3 in high speed [ 343.673193][ T5865] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 343.690486][ T5865] usbduxsigma 4-1:0.0: probe with driver usbduxsigma failed with error -22 [ 343.712707][T10316] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 343.900456][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 343.900471][ T29] audit: type=1400 audit(1737820627.712:974): avc: denied { append } for pid=10295 comm="syz.3.1260" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.985659][ T29] audit: type=1400 audit(1737820627.752:975): avc: denied { setopt } for pid=10295 comm="syz.3.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 344.821946][ T29] audit: type=1400 audit(1737820628.632:976): avc: denied { read } for pid=10327 comm="syz.0.1270" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 344.882204][ T29] audit: type=1400 audit(1737820628.632:977): avc: denied { open } for pid=10327 comm="syz.0.1270" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 344.945119][ T29] audit: type=1400 audit(1737820628.662:978): avc: denied { ioctl } for pid=10327 comm="syz.0.1270" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x460f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 345.040363][ T29] audit: type=1400 audit(1737820628.852:979): avc: denied { create } for pid=10337 comm="syz.4.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 345.353349][ T29] audit: type=1400 audit(1737820629.152:980): avc: denied { write } for pid=10337 comm="syz.4.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 345.488588][ T5819] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 345.746247][ T8] usb 4-1: USB disconnect, device number 25 [ 346.049820][T10348] fuse: Bad value for 'group_id' [ 346.054802][T10348] fuse: Bad value for 'group_id' [ 346.170698][ T5819] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 346.178964][ T5819] usb 1-1: config 0 has no interface number 0 [ 346.260342][T10354] pimreg: entered allmulticast mode [ 346.273044][ T5819] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.097648][ T5819] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.112078][ T5819] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 347.148259][T10358] ptrace attach of "./syz-executor exec"[5814] was attempted by "./syz-executor exec"[10358] [ 347.460126][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.468590][T10358] IPVS: length: 8 != 2625037000 [ 347.490659][ T5819] usb 1-1: config 0 descriptor?? [ 347.558898][ T8] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 348.146732][T10332] ipt_ECN: cannot use operation on non-tcp rule [ 348.147702][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 348.170465][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 348.194898][ T8] usb 4-1: config 0 has no interface number 0 [ 348.213064][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.246236][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.263118][ T8] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 348.273744][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.290056][ T8] usb 4-1: config 0 descriptor?? [ 348.468336][ T5819] logitech-djreceiver 0003:046D:C71B.0009: unknown main item tag 0x0 [ 348.505309][ T29] audit: type=1400 audit(1737820632.192:981): avc: denied { ioctl } for pid=10349 comm="syz.2.1278" path="socket:[23868]" dev="sockfs" ino=23868 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 348.554498][ T5819] logitech-djreceiver 0003:046D:C71B.0009: unknown main item tag 0x0 [ 348.591974][ T5819] logitech-djreceiver 0003:046D:C71B.0009: unknown main item tag 0x0 [ 348.631560][ T5819] logitech-djreceiver 0003:046D:C71B.0009: unknown main item tag 0x0 [ 348.647524][ T29] audit: type=1400 audit(1737820632.432:982): avc: denied { create } for pid=10374 comm="syz.1.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 348.673360][ T29] audit: type=1400 audit(1737820632.432:983): avc: denied { write } for pid=10374 comm="syz.1.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 348.710716][ T5819] logitech-djreceiver 0003:046D:C71B.0009: unbalanced collection at end of report description [ 348.750190][ T5819] logitech-djreceiver 0003:046D:C71B.0009: logi_dj_probe: parse failed [ 348.913791][ T5819] logitech-djreceiver 0003:046D:C71B.0009: probe with driver logitech-djreceiver failed with error -22 [ 348.930238][ T5819] usb 1-1: USB disconnect, device number 23 [ 349.108000][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 349.108035][ T29] audit: type=1400 audit(1737820632.842:986): avc: denied { write } for pid=10380 comm="syz.2.1284" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 349.693366][ T8] usbhid 4-1:0.1: can't add hid device: -71 [ 349.702520][ T8] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 349.727890][ T8] usb 4-1: USB disconnect, device number 26 [ 351.798819][ T29] audit: type=1400 audit(1737820635.612:987): avc: denied { create } for pid=10411 comm="syz.0.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 352.021197][ T29] audit: type=1400 audit(1737820635.812:988): avc: denied { create } for pid=10411 comm="syz.0.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 352.122517][T10425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1295'. [ 352.131739][T10425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1295'. [ 352.285417][T10427] xt_policy: output policy not valid in PREROUTING and INPUT [ 352.659708][T10420] kAFS: unparsable volume name [ 352.715541][ T29] audit: type=1400 audit(1737820636.522:989): avc: denied { connect } for pid=10411 comm="syz.0.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 352.818225][T10420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1044 sclass=netlink_route_socket pid=10420 comm=syz.0.1294 [ 353.042033][T10432] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.049302][T10432] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.393075][T10432] bridge0: entered allmulticast mode [ 353.557465][T10437] 9pnet_fd: Insufficient options for proto=fd [ 353.846075][ T29] audit: type=1400 audit(1737820637.642:990): avc: denied { name_bind } for pid=10440 comm="syz.0.1300" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 353.866966][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.075041][T10450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.097158][T10450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.153571][ T29] audit: type=1400 audit(1737820638.962:991): avc: denied { execute } for pid=10459 comm="syz.0.1307" path="/210/pids.current" dev="tmpfs" ino=1128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 355.270705][ T29] audit: type=1400 audit(1737820638.992:992): avc: denied { create } for pid=10459 comm="syz.0.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 355.316284][T10447] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 355.326068][T10447] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 355.363601][ T29] audit: type=1400 audit(1737820639.122:993): avc: denied { setattr } for pid=10445 comm="syz.4.1303" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 355.424502][T10447] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 355.646333][ T5868] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 355.725590][T10473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1311'. [ 355.754571][T10473] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.763620][T10473] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.772482][T10473] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.781285][T10473] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.826386][T10473] vxlan0: entered promiscuous mode [ 355.878111][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 355.884783][ T5868] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 355.905966][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.945516][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 355.983858][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 356.020852][ T5868] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 356.050386][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.080755][ T5868] usb 1-1: Product: syz [ 356.111448][ T5868] usb 1-1: Manufacturer: syz [ 356.121963][ T5868] usb 1-1: SerialNumber: syz [ 356.157917][ T5868] usb 1-1: config 0 descriptor?? [ 356.168122][T10467] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 356.226706][ T5868] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 356.378972][ T5868] imon:send_packet: packet tx failed (-71) [ 356.407762][ T5868] imon 1-1:0.0: panel buttons/knobs setup failed [ 356.533695][ T29] audit: type=1400 audit(1737820640.342:994): avc: denied { sqpoll } for pid=10484 comm="syz.4.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 356.573700][ T5868] rc_core: IR keymap rc-imon-pad not found [ 356.604068][T10485] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1316'. [ 356.792243][ T5820] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 356.793756][ T5868] Registered IR keymap rc-empty [ 356.821720][ T29] audit: type=1400 audit(1737820640.602:995): avc: denied { getopt } for pid=10491 comm="syz.1.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 357.508419][ T5868] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 357.836214][ T5868] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 357.850131][ T29] audit: type=1400 audit(1737820641.412:996): avc: denied { create } for pid=10498 comm="syz.4.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 358.091483][ T29] audit: type=1400 audit(1737820641.862:997): avc: denied { ioctl } for pid=10498 comm="syz.4.1321" path="socket:[24627]" dev="sockfs" ino=24627 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 358.116335][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.124587][ T5868] imon:send_packet: packet tx failed (-71) [ 358.157702][ T5868] imon 1-1:0.0: remote input dev register failed [ 358.257457][ T5868] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 358.355087][T10524] FAULT_INJECTION: forcing a failure. [ 358.355087][T10524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.404143][T10524] CPU: 0 UID: 0 PID: 10524 Comm: syz.3.1322 Not tainted 6.13.0-syzkaller-06167-g0afd22092df4 #0 [ 358.404170][T10524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 358.404180][T10524] Call Trace: [ 358.404185][T10524] [ 358.404192][T10524] dump_stack_lvl+0x16c/0x1f0 [ 358.404221][T10524] should_fail_ex+0x497/0x5b0 [ 358.404246][T10524] _copy_to_user+0x32/0xd0 [ 358.404269][T10524] simple_read_from_buffer+0xd0/0x160 [ 358.404292][T10524] proc_fail_nth_read+0x198/0x270 [ 358.404312][T10524] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 358.404333][T10524] ? rw_verify_area+0xcf/0x680 [ 358.404354][T10524] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 358.404375][T10524] vfs_read+0x1df/0xbf0 [ 358.404395][T10524] ? __fget_files+0x1fc/0x3a0 [ 358.404418][T10524] ? __pfx___mutex_lock+0x10/0x10 [ 358.404442][T10524] ? __pfx_vfs_read+0x10/0x10 [ 358.404472][T10524] ? __fget_files+0x206/0x3a0 [ 358.404500][T10524] ksys_read+0x12b/0x250 [ 358.404522][T10524] ? __pfx_ksys_read+0x10/0x10 [ 358.404551][T10524] do_syscall_64+0xcd/0x250 [ 358.404575][T10524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.404597][T10524] RIP: 0033:0x7fc065d8b73c [ 358.404611][T10524] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 358.404627][T10524] RSP: 002b:00007fc066bb6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 358.404643][T10524] RAX: ffffffffffffffda RBX: 00007fc065fa6080 RCX: 00007fc065d8b73c [ 358.404654][T10524] RDX: 000000000000000f RSI: 00007fc066bb60a0 RDI: 0000000000000003 [ 358.404664][T10524] RBP: 00007fc066bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 358.404674][T10524] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 358.404684][T10524] R13: 0000000000000000 R14: 00007fc065fa6080 R15: 00007ffef1ea6168 [ 358.404707][T10524] [ 359.421734][ T5868] imon 1-1:0.0: unable to initialize intf0, err 0 [ 359.429221][ T5868] imon:imon_probe: failed to initialize context! [ 359.435686][ T5868] imon 1-1:0.0: unable to register, err -19 [ 359.449703][ T5868] usb 1-1: USB disconnect, device number 24 [ 359.571106][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 359.796805][T10539] netlink: 'syz.1.1328': attribute type 8 has an invalid length. [ 359.818691][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 359.831525][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 359.834754][ T8] usb 5-1: config 4 has an invalid interface number: 185 but max is 0 [ 359.854525][ T8] usb 5-1: config 4 has no interface number 0 [ 359.862485][ T8] usb 5-1: config 4 interface 185 has no altsetting 0 [ 359.933863][ T29] audit: type=1400 audit(1737820643.742:998): avc: denied { create } for pid=10531 comm="syz.4.1326" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 359.935681][ T8] usb 5-1: string descriptor 0 read error: -71 [ 359.980623][T10548] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1331'. [ 359.985293][ T8] usb 5-1: New USB device found, idVendor=07ab, idProduct=fccd, bcdDevice=15.0a [ 359.999398][ T29] audit: type=1400 audit(1737820643.742:999): avc: denied { write } for pid=10531 comm="syz.4.1326" name="file0" dev="tmpfs" ino=1218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 360.044432][ T29] audit: type=1400 audit(1737820643.742:1000): avc: denied { open } for pid=10531 comm="syz.4.1326" path="/226/file0" dev="tmpfs" ino=1218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 360.137018][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.146870][ T8] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 360.155758][ T8] usb 5-1: no configuration chosen from 1 choice [ 360.164555][ T8] usb 5-1: USB disconnect, device number 11 [ 361.232982][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 361.232999][ T29] audit: type=1326 audit(1737820644.902:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.2.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5938cd29 code=0x7ffc0000 [ 361.302505][ T29] audit: type=1326 audit(1737820644.912:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.2.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8d5938cd29 code=0x7ffc0000 [ 361.352842][ T29] audit: type=1326 audit(1737820644.912:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.2.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5938cd29 code=0x7ffc0000 [ 361.419960][ T5868] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 361.559159][ T29] audit: type=1326 audit(1737820644.912:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.2.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d5938b690 code=0x7ffc0000 [ 361.604754][ T29] audit: type=1326 audit(1737820644.912:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.2.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5938cd29 code=0x7ffc0000 [ 361.699811][ T5868] usb 1-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 361.716027][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.786856][ T5868] usb 1-1: config 0 descriptor?? [ 362.400476][ T29] audit: type=1326 audit(1737820644.912:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.2.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8d5938cd29 code=0x7ffc0000 [ 362.423962][ T29] audit: type=1326 audit(1737820644.912:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.2.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5938cd29 code=0x7ffc0000 [ 362.457302][ T5868] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 362.583520][ T29] audit: type=1326 audit(1737820644.912:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.2.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8d5938cd29 code=0x7ffc0000 [ 362.601551][T10584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1343'. [ 362.667675][ T29] audit: type=1326 audit(1737820644.912:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.2.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5938cd29 code=0x7ffc0000 [ 362.716759][T10550] overlayfs: missing 'lowerdir' [ 362.730007][T10590] 9pnet_fd: Insufficient options for proto=fd [ 362.763690][ T29] audit: type=1326 audit(1737820644.912:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10553 comm="syz.2.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d5938b690 code=0x7ffc0000 [ 362.765122][T10550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.825623][T10586] syzkaller0: entered promiscuous mode [ 362.831531][T10586] syzkaller0: entered allmulticast mode [ 362.848325][T10550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.862251][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 362.930412][T10589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1343'. [ 363.028184][ T5868] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110 [ 363.038501][ T5868] pac7311 1-1:0.0: probe with driver pac7311 failed with error -110 [ 363.184078][ T5868] usb 1-1: USB disconnect, device number 25 [ 364.326749][T10613] netlink: 'syz.0.1351': attribute type 8 has an invalid length. [ 364.337522][T10613] fuse: Unknown parameter 'Jroup_id' [ 364.580882][ T5869] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 364.757718][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 364.796062][ T5869] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 364.806018][ T5869] usb 1-1: config 0 has no interface number 0 [ 364.822541][ T5869] usb 1-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=bf.0a [ 364.831887][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.841102][ T5869] usb 1-1: Product: syz [ 364.847201][ T5869] usb 1-1: Manufacturer: syz [ 364.855112][ T5869] usb 1-1: SerialNumber: syz [ 364.868698][ T5869] usb 1-1: config 0 descriptor?? [ 364.901429][ T5869] gspca_main: t613-2.14.0 probing 17a1:0128 [ 365.091211][ T5869] gspca_t613: unknown sensor 0000 [ 365.104058][ T5869] t613 1-1:0.196: probe with driver t613 failed with error -22 [ 365.126089][ T5869] usb 1-1: USB disconnect, device number 26 [ 366.002708][T10627] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 366.171261][T10634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1360'. [ 366.397745][ T5869] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 366.571831][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 44, changing to 9 [ 366.691389][ T5869] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 366.740966][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.791733][ T5869] usb 4-1: config 0 descriptor?? [ 366.834705][T10638] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 366.843185][T10638] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 366.851732][T10638] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 367.036041][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 367.036070][ T29] audit: type=1400 audit(1737820650.842:1036): avc: denied { read } for pid=10643 comm="syz.4.1364" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 367.189961][ T29] audit: type=1400 audit(1737820650.872:1037): avc: denied { open } for pid=10643 comm="syz.4.1364" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 367.258600][ T5869] usbhid 4-1:0.0: can't add hid device: -71 [ 367.370340][ T5869] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 367.386264][ T29] audit: type=1400 audit(1737820650.942:1038): avc: denied { read } for pid=10619 comm="syz.0.1354" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 367.428095][ T5869] usb 4-1: USB disconnect, device number 27 [ 367.446954][ T29] audit: type=1400 audit(1737820650.942:1039): avc: denied { open } for pid=10619 comm="syz.0.1354" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 367.476305][ T29] audit: type=1400 audit(1737820650.952:1040): avc: denied { ioctl } for pid=10619 comm="syz.0.1354" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 367.505134][ T29] audit: type=1400 audit(1737820650.952:1041): avc: denied { set_context_mgr } for pid=10619 comm="syz.0.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 367.558466][ T29] audit: type=1400 audit(1737820650.982:1042): avc: denied { name_bind } for pid=10645 comm="syz.1.1363" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 367.582466][ T29] audit: type=1400 audit(1737820651.242:1043): avc: denied { setopt } for pid=10648 comm="syz.0.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 367.651704][T10658] netlink: 'syz.0.1368': attribute type 1 has an invalid length. [ 367.694619][ T29] audit: type=1400 audit(1737820651.502:1044): avc: denied { read } for pid=10653 comm="syz.4.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 367.753850][ T29] audit: type=1400 audit(1737820651.562:1045): avc: denied { associate } for pid=10664 comm="syz.2.1371" name="file0" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 367.754964][T10665] 9pnet_fd: Insufficient options for proto=fd [ 367.811844][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'. [ 367.987867][ T5866] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 368.148883][T10669] fuse: Unknown parameter 'use00000000000000000000' [ 368.238230][ T5866] usb 1-1: device descriptor read/64, error -71 [ 368.508816][ T5866] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 368.647909][ T5866] usb 1-1: device descriptor read/64, error -71 [ 368.758925][ T5866] usb usb1-port1: attempt power cycle [ 369.137740][ T5866] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 369.629354][ T5866] usb 1-1: device descriptor read/8, error -71 [ 369.697658][ T5869] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 369.878085][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 369.881976][ T5866] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 369.899727][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.918160][ T5866] usb 1-1: device descriptor read/8, error -71 [ 369.921150][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.949055][ T5869] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 369.958953][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.968546][ T5869] usb 5-1: config 0 descriptor?? [ 370.139237][ T5866] usb usb1-port1: unable to enumerate USB device [ 370.262276][T10702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10702 comm=syz.1.1382 [ 370.275203][T10702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=10702 comm=syz.1.1382 [ 370.921147][ T5869] lua 0003:1E7D:2C2E.000A: item fetching failed at offset 1/5 [ 370.931787][ T5869] lua 0003:1E7D:2C2E.000A: parse failed [ 370.937359][ T5869] lua 0003:1E7D:2C2E.000A: probe with driver lua failed with error -22 [ 371.376386][ T5869] usb 5-1: USB disconnect, device number 12 [ 371.804177][T10729] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1392'. [ 372.208196][ T5869] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 372.222151][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 372.222165][ T29] audit: type=1400 audit(1737820656.032:1052): avc: denied { mount } for pid=10738 comm="syz.4.1394" name="/" dev="ramfs" ino=25180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 372.274332][T10739] erofs (device erofs): cannot find valid erofs superblock [ 372.283204][ T29] audit: type=1400 audit(1737820656.072:1053): avc: denied { mounton } for pid=10738 comm="syz.4.1394" path="/235/file0/file0" dev="ramfs" ino=24462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 372.420697][ T29] audit: type=1400 audit(1737820656.182:1054): avc: denied { execute } for pid=10740 comm="syz.2.1395" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=25186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 372.448283][ T29] audit: type=1400 audit(1737820656.262:1055): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 372.450332][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.509986][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.601623][T10746] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=10746 comm=syz.3.1396 [ 372.932848][ T5869] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 372.952318][ T5869] usb 1-1: New USB device strings: Mfr=255, Product=221, SerialNumber=0 [ 372.963082][ T5869] usb 1-1: Product: syz [ 372.967263][ T5869] usb 1-1: Manufacturer: syz [ 372.977787][ T5869] usb 1-1: config 0 descriptor?? [ 373.144302][ T29] audit: type=1400 audit(1737820656.952:1056): avc: denied { watch } for pid=10762 comm="syz.3.1404" path="/241/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 373.145715][T10764] FAULT_INJECTION: forcing a failure. [ 373.145715][T10764] name failslab, interval 1, probability 0, space 0, times 0 [ 373.248268][T10764] CPU: 1 UID: 0 PID: 10764 Comm: syz.3.1404 Not tainted 6.13.0-syzkaller-06167-g0afd22092df4 #0 [ 373.248292][T10764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 373.248302][T10764] Call Trace: [ 373.248307][T10764] [ 373.248313][T10764] dump_stack_lvl+0x16c/0x1f0 [ 373.248341][T10764] should_fail_ex+0x497/0x5b0 [ 373.248361][T10764] ? fs_reclaim_acquire+0xae/0x150 [ 373.248393][T10764] should_failslab+0xc2/0x120 [ 373.248410][T10764] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 373.248438][T10764] ? __d_alloc+0x31/0xaa0 [ 373.248458][T10764] __d_alloc+0x31/0xaa0 [ 373.248477][T10764] d_alloc+0x4a/0x1e0 [ 373.248495][T10764] lookup_one_qstr_excl+0xcb/0x190 [ 373.248513][T10764] ? mnt_want_write+0x161/0x450 [ 373.248536][T10764] do_renameat2+0x5ae/0xdd0 [ 373.248561][T10764] ? __pfx_do_renameat2+0x10/0x10 [ 373.248576][T10764] ? lock_acquire+0x2f/0xb0 [ 373.248603][T10764] ? __virt_addr_valid+0x5e/0x590 [ 373.248620][T10764] ? __phys_addr_symbol+0x30/0x80 [ 373.248644][T10764] ? getname_flags.part.0+0x1c5/0x550 [ 373.248669][T10764] __x64_sys_renameat2+0xe7/0x130 [ 373.248688][T10764] do_syscall_64+0xcd/0x250 [ 373.248714][T10764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.248736][T10764] RIP: 0033:0x7fc065d8cd29 [ 373.248749][T10764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.248764][T10764] RSP: 002b:00007fc066bd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 373.248780][T10764] RAX: ffffffffffffffda RBX: 00007fc065fa5fa0 RCX: 00007fc065d8cd29 [ 373.248791][T10764] RDX: 0000000000000005 RSI: 0000000020000280 RDI: 0000000000000006 [ 373.248800][T10764] RBP: 00007fc066bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 373.248810][T10764] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 373.248819][T10764] R13: 0000000000000000 R14: 00007fc065fa5fa0 R15: 00007ffef1ea6168 [ 373.248842][T10764] [ 373.255383][ T29] audit: type=1400 audit(1737820656.952:1057): avc: denied { watch_sb } for pid=10762 comm="syz.3.1404" path="/241/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 373.504105][ T29] audit: type=1400 audit(1737820657.312:1058): avc: denied { mount } for pid=10726 comm="syz.0.1391" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 373.576592][T10755] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 373.585136][ T29] audit: type=1400 audit(1737820657.342:1059): avc: denied { append } for pid=10726 comm="syz.0.1391" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 373.623823][ T29] audit: type=1400 audit(1737820657.432:1060): avc: denied { read } for pid=5176 comm="acpid" name="event6" dev="devtmpfs" ino=2925 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 373.646931][T10755] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 373.655844][T10755] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 373.672693][ T29] audit: type=1400 audit(1737820657.432:1061): avc: denied { open } for pid=5176 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=2925 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 374.460873][T10780] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 374.474164][T10780] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1408'. [ 375.191478][ T5869] usbhid 1-1:0.0: can't add hid device: -71 [ 375.197513][ T5869] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 375.287286][T10789] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 375.287286][T10789] program syz.0.1412 not setting count and/or reply_len properly [ 375.551057][ T5869] usb 1-1: USB disconnect, device number 31 [ 376.313864][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1414'. [ 376.494547][T10807] FAULT_INJECTION: forcing a failure. [ 376.494547][T10807] name failslab, interval 1, probability 0, space 0, times 0 [ 376.507596][T10807] CPU: 0 UID: 0 PID: 10807 Comm: syz.4.1415 Not tainted 6.13.0-syzkaller-06167-g0afd22092df4 #0 [ 376.507618][T10807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 376.507627][T10807] Call Trace: [ 376.507632][T10807] [ 376.507637][T10807] dump_stack_lvl+0x16c/0x1f0 [ 376.507667][T10807] should_fail_ex+0x497/0x5b0 [ 376.507687][T10807] ? fs_reclaim_acquire+0xae/0x150 [ 376.507711][T10807] should_failslab+0xc2/0x120 [ 376.507729][T10807] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 376.507755][T10807] ? __alloc_skb+0x2b1/0x380 [ 376.507777][T10807] ? irqentry_exit+0x3b/0x90 [ 376.507801][T10807] __alloc_skb+0x2b1/0x380 [ 376.507824][T10807] ? __pfx___alloc_skb+0x10/0x10 [ 376.507853][T10807] ? __alloc_skb+0x8/0x380 [ 376.507879][T10807] alloc_skb_with_frags+0xe4/0x850 [ 376.507898][T10807] ? __pfx___schedule+0x10/0x10 [ 376.507921][T10807] sock_alloc_send_pskb+0x7f1/0x980 [ 376.507955][T10807] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 376.507983][T10807] ? unix_stream_sendmsg+0x1f6/0x1030 [ 376.508000][T10807] ? unix_stream_sendmsg+0x203/0x1030 [ 376.508019][T10807] unix_stream_sendmsg+0x3a1/0x1030 [ 376.508042][T10807] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 376.508070][T10807] ____sys_sendmsg+0xaaf/0xc90 [ 376.508091][T10807] ? lockdep_hardirqs_on+0x7c/0x110 [ 376.508113][T10807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.508144][T10807] ___sys_sendmsg+0x135/0x1e0 [ 376.508162][T10807] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.508189][T10807] ? __pfx_lock_release+0x10/0x10 [ 376.508211][T10807] ? trace_lock_acquire+0x14e/0x1f0 [ 376.508237][T10807] ? __fget_files+0x206/0x3a0 [ 376.508267][T10807] __sys_sendmsg+0x16e/0x220 [ 376.508283][T10807] ? __pfx___sys_sendmsg+0x10/0x10 [ 376.508314][T10807] do_syscall_64+0xcd/0x250 [ 376.508349][T10807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.508372][T10807] RIP: 0033:0x7f2eab18cd29 [ 376.508386][T10807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.508401][T10807] RSP: 002b:00007f2eabffc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.508419][T10807] RAX: ffffffffffffffda RBX: 00007f2eab3a6080 RCX: 00007f2eab18cd29 [ 376.508429][T10807] RDX: 0000000000000003 RSI: 0000000020000980 RDI: 0000000000000006 [ 376.508439][T10807] RBP: 00007f2eabffc090 R08: 0000000000000000 R09: 0000000000000000 [ 376.508449][T10807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.508458][T10807] R13: 0000000000000000 R14: 00007f2eab3a6080 R15: 00007ffc8cb6f1a8 [ 376.508478][T10807] [ 377.147832][ T5869] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 378.309098][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.316111][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.695213][ T5869] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 378.707609][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.725432][ T5869] usb 1-1: config 0 descriptor?? [ 378.925162][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 378.925178][ T29] audit: type=1400 audit(1737820662.732:1066): avc: denied { setopt } for pid=10826 comm="syz.4.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 378.971769][ T5869] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 378.996563][ T29] audit: type=1400 audit(1737820662.772:1067): avc: denied { read } for pid=10826 comm="syz.4.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 379.023351][ T5869] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 379.026870][ T29] audit: type=1400 audit(1737820662.832:1068): avc: denied { listen } for pid=10831 comm="syz.1.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 379.038124][T10830] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.060841][T10830] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.069610][T10830] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.078783][T10830] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.168381][ T5869] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 379.181777][ T5869] [drm] Initialized udl on minor 2 [ 379.291282][ T29] audit: type=1400 audit(1737820663.102:1069): avc: denied { connect } for pid=10836 comm="syz.2.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 379.355794][ T29] audit: type=1400 audit(1737820663.162:1070): avc: denied { write } for pid=10836 comm="syz.2.1427" path="socket:[25410]" dev="sockfs" ino=25410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 379.384140][ T5869] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 379.397753][ T5865] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 379.407800][ T5869] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 379.425582][ T29] audit: type=1400 audit(1737820663.232:1071): avc: denied { getopt } for pid=10836 comm="syz.2.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 379.549843][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 379.561565][ T5865] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 379.573672][ T5865] usb 5-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=69.70 [ 379.582947][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.591504][ T5865] usb 5-1: Product: syz [ 379.595834][ T5865] usb 5-1: Manufacturer: syz [ 379.597148][ T970] usb 1-1: USB disconnect, device number 32 [ 379.600550][ T5865] usb 5-1: SerialNumber: syz [ 379.602009][ T5865] usb 5-1: config 0 descriptor?? [ 379.606801][ T5869] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 379.621757][ T5869] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 379.625013][ T5865] HFC-S_USB 5-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 379.636189][ T5869] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 379.807862][ T29] audit: type=1400 audit(1737820663.612:1072): avc: denied { mount } for pid=10840 comm="syz.3.1428" name="/" dev="overlay" ino=1329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 379.840555][ T5865] usb 5-1: USB disconnect, device number 13 [ 379.868817][ T29] audit: type=1400 audit(1737820663.682:1073): avc: denied { setopt } for pid=10840 comm="syz.3.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 379.894061][T10843] evm: overlay not supported [ 379.918989][ T29] audit: type=1400 audit(1737820663.732:1074): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 380.173170][ T29] audit: type=1400 audit(1737820663.982:1075): avc: denied { map } for pid=10844 comm="syz.1.1429" path="socket:[25670]" dev="sockfs" ino=25670 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 380.383120][T10828] syz.4.1422 (10828) used greatest stack depth: 21248 bytes left [ 380.537897][ T5869] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 380.676978][T10856] xt_hashlimit: invalid rate [ 380.679778][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1432'. [ 380.690688][T10855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1432'. [ 380.828180][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1432'. [ 380.837108][T10855] bridge_slave_1: left allmulticast mode [ 380.847805][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 380.861190][ T5869] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 380.871881][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.880370][ T5869] usb 4-1: Product: syz [ 380.884553][ T5869] usb 4-1: Manufacturer: syz [ 380.889361][ T5869] usb 4-1: SerialNumber: syz [ 380.902284][T10855] bridge_slave_1: left promiscuous mode [ 380.921236][ T5869] r8152-cfgselector 4-1: Unknown version 0x0000 [ 380.928239][T10855] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.939677][ T5869] r8152-cfgselector 4-1: config 0 descriptor?? [ 380.947637][T10855] bridge_slave_0: left allmulticast mode [ 380.953302][T10855] bridge_slave_0: left promiscuous mode [ 381.087946][T10855] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.828037][ T8] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 382.010973][ T8] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 382.030503][ T8] usb 5-1: config 0 has no interface number 0 [ 382.045110][T10875] delete_channel: no stack [ 382.056932][ T8] usb 5-1: config 0 interface 29 has no altsetting 0 [ 382.082741][ T8] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 382.097404][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.115750][ T8] usb 5-1: Product: syz [ 382.125882][ T8] usb 5-1: Manufacturer: syz [ 382.134307][ T8] usb 5-1: SerialNumber: syz [ 382.150692][ T8] usb 5-1: config 0 descriptor?? [ 382.387790][ T8] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 382.518030][ T5869] r8152-cfgselector 4-1: USB disconnect, device number 28 [ 382.590168][ T8] peak_usb 5-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 382.599092][ T8] peak_usb 5-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 382.649368][ T8] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 382.686506][ T8] usb 5-1: USB disconnect, device number 14 [ 382.798001][T10893] netlink: 'syz.1.1445': attribute type 1 has an invalid length. [ 383.151872][T10908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1449'. [ 384.887780][ T8] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 385.177685][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 385.188725][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.290064][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 385.387174][ T8] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 385.414007][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.491428][ T8] usb 4-1: config 0 descriptor?? [ 386.383696][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 386.383734][ T29] audit: type=1400 audit(1737820670.192:1083): avc: denied { ioctl } for pid=10945 comm="syz.2.1459" path="socket:[25568]" dev="sockfs" ino=25568 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 387.052818][T10925] xt_CT: You must specify a L4 protocol and not use inversions on it [ 387.297837][ T5868] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 387.458196][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 387.468988][ T5868] usb 5-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 387.517471][ T5868] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 387.527498][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.538575][ T5868] usb 5-1: Product: syz [ 387.546665][ T5868] usb 5-1: Manufacturer: syz [ 387.551980][ T5868] usb 5-1: SerialNumber: syz [ 387.557865][ T5868] usb 5-1: config 0 descriptor?? [ 388.605913][ T5868] usb 5-1: bad CDC descriptors [ 388.612251][ T5868] usb 5-1: unsupported MDLM descriptors [ 388.650431][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 388.660026][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 388.669940][ T8] usb 4-1: USB disconnect, device number 29 [ 388.712830][ T29] audit: type=1400 audit(1737820672.512:1084): avc: denied { relabelfrom } for pid=10953 comm="syz.4.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 388.763646][ T29] audit: type=1400 audit(1737820672.522:1085): avc: denied { relabelto } for pid=10953 comm="syz.4.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 389.037551][ T29] audit: type=1326 audit(1737820672.792:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10990 comm="syz.0.1471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3a7f8cd29 code=0x0 [ 389.132253][ T5868] usb 5-1: USB disconnect, device number 15 [ 389.429086][ T29] audit: type=1400 audit(1737820672.972:1087): avc: denied { mount } for pid=10990 comm="syz.0.1471" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 389.492466][T11002] netlink: 'syz.3.1468': attribute type 63 has an invalid length. [ 389.533451][ T29] audit: type=1400 audit(1737820673.032:1088): avc: denied { mounton } for pid=10990 comm="syz.0.1471" path="/230/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 390.388055][ T29] audit: type=1400 audit(1737820674.082:1089): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 390.674933][ T29] audit: type=1400 audit(1737820674.482:1090): avc: denied { setopt } for pid=11005 comm="syz.1.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 391.246113][ T970] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 393.183928][ T970] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 393.200768][T11024] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 393.214205][ T970] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 393.228822][T11024] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 393.272021][ T970] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 393.352398][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.386632][ T970] usb 1-1: Product: syz [ 393.445953][T11024] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 393.473706][ T970] usb 1-1: Manufacturer: syz [ 393.486971][ T970] usb 1-1: SerialNumber: syz [ 393.501809][ T970] usb 1-1: config 0 descriptor?? [ 393.559854][ T970] usb 1-1: can't set config #0, error -71 [ 393.585871][ T970] usb 1-1: USB disconnect, device number 33 [ 393.992472][T11041] x_tables: duplicate underflow at hook 1 [ 394.423319][ T29] audit: type=1400 audit(1737820678.232:1091): avc: denied { shutdown } for pid=11047 comm="syz.0.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 394.553672][ T29] audit: type=1400 audit(1737820678.252:1092): avc: denied { read write } for pid=11047 comm="syz.0.1486" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 394.728320][ T29] audit: type=1400 audit(1737820678.252:1093): avc: denied { open } for pid=11047 comm="syz.0.1486" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 394.773575][ T29] audit: type=1400 audit(1737820678.332:1094): avc: denied { read } for pid=11047 comm="syz.0.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 395.140101][T11066] netlink: 'syz.2.1493': attribute type 11 has an invalid length. [ 395.402349][T11072] netlink: 'syz.1.1495': attribute type 2 has an invalid length. [ 395.426910][T11072] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 395.445798][ T29] audit: type=1400 audit(1737820679.242:1095): avc: denied { bind } for pid=11073 comm="syz.3.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 395.921648][ T29] audit: type=1400 audit(1737820679.322:1096): avc: denied { write } for pid=11073 comm="syz.3.1496" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 395.989677][T11080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1497'. [ 396.260609][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1497'. [ 396.310936][ T29] audit: type=1400 audit(1737820680.122:1097): avc: denied { write } for pid=11088 comm="syz.3.1500" path="socket:[26134]" dev="sockfs" ino=26134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 396.365762][ T29] audit: type=1400 audit(1737820680.172:1098): avc: denied { shutdown } for pid=11088 comm="syz.3.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 396.373699][T11092] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 396.390013][ T8] kernel write not supported for file /sg0 (pid: 8 comm: kworker/0:0) [ 396.408996][T11093] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 396.437936][ T970] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 396.637792][ T970] usb 5-1: Using ep0 maxpacket: 16 [ 396.645481][ T970] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 396.653934][ T970] usb 5-1: config 0 has no interface number 0 [ 396.660478][ T970] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.671415][ T970] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.700743][ T970] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 396.709893][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.721478][ T970] usb 5-1: config 0 descriptor?? [ 396.781945][T11107] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.792676][T11107] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.907761][T11107] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.918257][T11107] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.006522][T11107] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.017057][T11107] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.181506][ T29] audit: type=1326 audit(1737820680.992:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.4.1499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2eab18cd29 code=0x0 [ 397.188525][T11107] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.223737][T11107] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.532839][ T970] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000B/input/input11 [ 397.576090][T11107] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.586885][T11122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.595963][T11107] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.604852][T11122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.620137][ T970] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000B/input/input12 [ 397.620845][T11107] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.634670][ T970] uclogic 0003:28BD:0071.000B: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 397.641028][T11107] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.722958][T11107] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.731389][T11107] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.747046][T11120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.751028][T11107] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.761979][T11120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.765976][T11107] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.828193][T10872] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 397.867033][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1513'. [ 397.877153][T11131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1513'. [ 397.886212][T11131] netlink: 'syz.3.1513': attribute type 20 has an invalid length. [ 398.856394][ T970] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 399.222444][ T5869] usb 5-1: USB disconnect, device number 16 [ 399.251109][ T29] audit: type=1400 audit(1737820683.052:1100): avc: denied { name_bind } for pid=11152 comm="syz.1.1519" src=65528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 399.729784][ T29] audit: type=1400 audit(1737820683.502:1101): avc: denied { ioctl } for pid=11154 comm="syz.4.1520" path="socket:[27023]" dev="sockfs" ino=27023 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 400.629406][T11163] team0: Device gtp0 is of different type [ 400.731143][ T29] audit: type=1400 audit(1737820684.542:1102): avc: denied { read append } for pid=11162 comm="syz.3.1522" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 400.758865][ T29] audit: type=1400 audit(1737820684.542:1103): avc: denied { open } for pid=11162 comm="syz.3.1522" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 400.857811][ T5869] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 401.026459][T11140] delete_channel: no stack [ 401.560649][ T5869] usb 5-1: config 0 has an invalid interface number: 102 but max is 0 [ 401.581450][ T5869] usb 5-1: config 0 has no interface number 0 [ 401.606421][ T5869] usb 5-1: config 0 interface 102 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 401.654828][ T5869] usb 5-1: config 0 interface 102 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 401.669896][ T5869] usb 5-1: New USB device found, idVendor=3923, idProduct=7825, bcdDevice=c6.57 [ 401.674005][ T29] audit: type=1400 audit(1737820685.482:1104): avc: denied { write } for pid=11183 comm="syz.3.1528" path="socket:[27126]" dev="sockfs" ino=27126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 401.686482][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.763258][ T5869] usb 5-1: Product: syz [ 401.772011][ T5869] usb 5-1: Manufacturer: syz [ 401.780822][ T5869] usb 5-1: SerialNumber: syz [ 401.792223][ T5869] usb 5-1: config 0 descriptor?? [ 401.804308][T11165] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 401.817720][T11165] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 401.827746][ T29] audit: type=1400 audit(1737820685.622:1105): avc: denied { connect } for pid=11180 comm="syz.0.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 401.873126][ T5869] plusb 5-1:0.102 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 8e:c1:34:db:99:55 [ 402.576615][ T5869] usb 5-1: USB disconnect, device number 17 [ 402.584362][ T5869] plusb 5-1:0.102 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 402.938980][T11204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1533'. [ 403.130256][ T29] audit: type=1400 audit(1737820686.942:1106): avc: denied { getopt } for pid=11203 comm="syz.3.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 403.232249][T11206] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.241686][T11206] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.250776][T11206] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.259631][T11206] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.430449][T11206] vxlan1: entered promiscuous mode [ 403.435755][T11206] vxlan1: entered allmulticast mode [ 403.593259][T11214] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 404.656280][T11232] sctp: [Deprecated]: syz.2.1544 (pid 11232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.656280][T11232] Use struct sctp_sack_info instead [ 404.706978][T11235] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 404.715442][T11235] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 404.749907][T11235] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 405.232784][T11252] kvm: emulating exchange as write [ 405.441101][T11254] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 405.530809][ T29] audit: type=1400 audit(1737820689.332:1107): avc: denied { ioctl } for pid=11253 comm="syz.2.1551" path="socket:[27204]" dev="sockfs" ino=27204 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 405.730706][ T29] audit: type=1326 audit(1737820689.542:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11242 comm="syz.1.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1158cd29 code=0x7fc00000 [ 406.239517][T11281] overlayfs: missing 'workdir' [ 406.282526][T11288] overlayfs: failed to clone upperpath [ 406.835418][T11305] 9pnet_fd: Insufficient options for proto=fd [ 407.070113][T10872] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 407.704049][T11304] Set syz1 is full, maxelem 65536 reached [ 407.769260][T10872] usb 5-1: Using ep0 maxpacket: 16 [ 407.823195][T10872] usb 5-1: config index 0 descriptor too short (expected 36, got 28) [ 407.873657][T10872] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 407.894894][T10872] usb 5-1: config 0 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 407.939887][T10872] usb 5-1: config 0 interface 0 has no altsetting 0 [ 407.950649][T11312] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 407.970129][T10872] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 407.979423][T10872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.988405][T10872] usb 5-1: config 0 descriptor?? [ 407.995350][T10872] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 408.203994][ T29] audit: type=1400 audit(1737820692.012:1109): avc: denied { read } for pid=11276 comm="syz.4.1560" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 408.226700][ C0] vkms_vblank_simulate: vblank timer overrun [ 408.241363][ T29] audit: type=1400 audit(1737820692.012:1110): avc: denied { open } for pid=11276 comm="syz.4.1560" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 408.264529][ C0] vkms_vblank_simulate: vblank timer overrun [ 408.328103][ T29] audit: type=1400 audit(1737820692.132:1111): avc: denied { mount } for pid=11276 comm="syz.4.1560" name="/" dev="configfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 408.360863][ T29] audit: type=1400 audit(1737820692.162:1112): avc: denied { setattr } for pid=11276 comm="syz.4.1560" name="/" dev="configfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 408.448991][T10872] usb 5-1: USB disconnect, device number 18 [ 408.844497][ T29] audit: type=1400 audit(1737820692.652:1113): avc: denied { wake_alarm } for pid=11325 comm="syz.3.1575" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 408.877255][T11329] fuse: Unknown parameter 'rootmodi' [ 409.026426][ T29] audit: type=1400 audit(1737820692.822:1114): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 410.363854][T11353] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 411.391789][ T29] audit: type=1400 audit(1737820695.202:1115): avc: denied { ioctl } for pid=11367 comm="syz.0.1589" path="socket:[27437]" dev="sockfs" ino=27437 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 412.170613][T11379] 9pnet: p9_errstr2errno: server reported unknown error loc_percpu [ 412.253185][T11381] Invalid ELF header magic: != ELF [ 412.276709][ T29] audit: type=1400 audit(1737820696.062:1116): avc: denied { module_load } for pid=11380 comm="syz.0.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 412.753984][ T29] audit: type=1400 audit(1737820696.562:1117): avc: denied { read } for pid=11385 comm="syz.0.1595" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 412.802462][ T29] audit: type=1400 audit(1737820696.562:1118): avc: denied { open } for pid=11385 comm="syz.0.1595" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 413.779988][T11399] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 413.817048][T11386] kvm: pic: non byte read [ 413.822907][T11386] kvm: pic: level sensitive irq not supported [ 413.823201][T11386] kvm: pic: non byte read [ 413.838083][T11386] kvm: pic: level sensitive irq not supported [ 413.838180][T11386] kvm: pic: non byte read [ 414.339285][T11386] kvm: pic: level sensitive irq not supported [ 414.339414][T11386] kvm: pic: non byte read [ 415.409996][ T29] audit: type=1400 audit(1737820699.222:1119): avc: denied { append } for pid=11418 comm="syz.0.1604" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 416.124340][ T29] audit: type=1400 audit(1737820699.932:1120): avc: denied { map } for pid=11434 comm="syz.3.1610" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 416.150403][T11435] binder_alloc: binder_alloc_mmap_handler: 11434 20fff000-21000000 already mapped failed -16 [ 416.936883][T11455] tmpfs: Bad value for 'mpol' [ 417.893353][ T29] audit: type=1400 audit(1737820701.702:1121): avc: denied { setopt } for pid=11462 comm="syz.3.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 419.022436][ T29] audit: type=1400 audit(1737820702.822:1122): avc: denied { read } for pid=11484 comm="syz.0.1626" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 419.067641][ T29] audit: type=1400 audit(1737820702.822:1123): avc: denied { open } for pid=11484 comm="syz.0.1626" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 419.115380][ T29] audit: type=1400 audit(1737820702.822:1124): avc: denied { ioctl } for pid=11484 comm="syz.0.1626" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 419.200818][T11496] overlayfs: failed to clone upperpath [ 419.213254][T11496] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1630'. [ 419.215073][T11498] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1631'. [ 419.404764][ T5819] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 420.053840][ T5819] usb 4-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 420.063169][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.100198][ T5819] usb 4-1: config 0 descriptor?? [ 420.290834][ T5819] usb 4-1: selecting invalid altsetting 1 [ 420.330770][ T5819] flexcop_usb: set interface failed. [ 420.341810][ T5819] b2c2_flexcop_usb 4-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 420.493555][T11494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.503316][T11494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.648453][ T5819] usb 4-1: USB disconnect, device number 31 [ 420.801529][ T29] audit: type=1400 audit(1737820704.602:1125): avc: denied { listen } for pid=11518 comm="syz.2.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 422.541584][ T29] audit: type=1400 audit(1737820706.352:1126): avc: denied { bind } for pid=11529 comm="syz.2.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 423.197974][ T29] audit: type=1400 audit(1737820707.002:1127): avc: denied { accept } for pid=11529 comm="syz.2.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 424.439152][ T29] audit: type=1326 audit(1737820708.252:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11562 comm="syz.4.1644" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2eab18cd29 code=0x0 [ 425.151670][T11588] FAULT_INJECTION: forcing a failure. [ 425.151670][T11588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.187912][T11588] CPU: 0 UID: 0 PID: 11588 Comm: syz.3.1655 Not tainted 6.13.0-syzkaller-06167-g0afd22092df4 #0 [ 425.187939][T11588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 425.187948][T11588] Call Trace: [ 425.187953][T11588] [ 425.187960][T11588] dump_stack_lvl+0x16c/0x1f0 [ 425.187988][T11588] should_fail_ex+0x497/0x5b0 [ 425.188013][T11588] _copy_from_user+0x2e/0xd0 [ 425.188037][T11588] memdup_user+0x71/0xd0 [ 425.188060][T11588] strndup_user+0x78/0xe0 [ 425.188082][T11588] __do_sys_add_key+0x157/0x460 [ 425.188108][T11588] ? __pfx___do_sys_add_key+0x10/0x10 [ 425.188129][T11588] ? ksys_write+0x1ba/0x250 [ 425.188161][T11588] do_syscall_64+0xcd/0x250 [ 425.188186][T11588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.188209][T11588] RIP: 0033:0x7fc065d8cd29 [ 425.188222][T11588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.188237][T11588] RSP: 002b:00007fc066bd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 425.188255][T11588] RAX: ffffffffffffffda RBX: 00007fc065fa5fa0 RCX: 00007fc065d8cd29 [ 425.188266][T11588] RDX: 0000000020000100 RSI: 0000000020000180 RDI: 0000000020000140 [ 425.188277][T11588] RBP: 00007fc066bd7090 R08: fffffffffffffffe R09: 0000000000000000 [ 425.188287][T11588] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000001 [ 425.188296][T11588] R13: 0000000000000000 R14: 00007fc065fa5fa0 R15: 00007ffef1ea6168 [ 425.188318][T11588] [ 425.213529][T11590] netlink: 'syz.1.1657': attribute type 10 has an invalid length. [ 426.386407][ T29] audit: type=1400 audit(1737820710.192:1129): avc: denied { setopt } for pid=11615 comm="syz.4.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 426.555678][ T29] audit: type=1400 audit(1737820710.212:1130): avc: denied { bind } for pid=11615 comm="syz.4.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 426.635608][ T29] audit: type=1400 audit(1737820710.212:1131): avc: denied { name_bind } for pid=11615 comm="syz.4.1664" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 426.674771][ T29] audit: type=1400 audit(1737820710.212:1132): avc: denied { node_bind } for pid=11615 comm="syz.4.1664" saddr=127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 426.700960][ T29] audit: type=1400 audit(1737820710.212:1133): avc: denied { connect } for pid=11615 comm="syz.4.1664" laddr=127.0.0.1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 426.725605][ T29] audit: type=1400 audit(1737820710.212:1134): avc: denied { name_connect } for pid=11615 comm="syz.4.1664" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 426.749910][ T29] audit: type=1400 audit(1737820710.282:1135): avc: denied { setattr } for pid=11615 comm="syz.4.1664" name="UDPLITEv6" dev="sockfs" ino=28774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 426.773100][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.783322][ T29] audit: type=1400 audit(1737820710.452:1136): avc: denied { write } for pid=11625 comm="syz.4.1666" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 426.802410][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.878080][ T5819] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 426.954288][T11631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.163954][ T5819] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 427.190176][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.227511][ T5819] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 427.251620][ T5819] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 427.261729][ T5819] usb 5-1: Manufacturer: syz [ 427.273302][ T5819] usb 5-1: config 0 descriptor?? [ 427.347959][ T5819] rc_core: IR keymap rc-hauppauge not found [ 427.361855][ T5819] Registered IR keymap rc-empty [ 427.394832][ T5819] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 427.463063][ T5819] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 428.077917][ T5865] usb 5-1: USB disconnect, device number 19 [ 428.508159][T11653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=11653 comm=syz.2.1674 [ 428.554604][T11651] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 428.563104][T11651] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 428.572024][T11651] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 428.631662][T11618] kexec: Could not allocate control_code_buffer [ 428.654181][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 428.654191][ T29] audit: type=1400 audit(1737820712.462:1140): avc: denied { map } for pid=11655 comm="syz.4.1675" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 428.717199][T11656] veth3: entered allmulticast mode [ 428.793220][ T29] audit: type=1400 audit(1737820712.602:1141): avc: denied { ioctl } for pid=11655 comm="syz.4.1675" path="socket:[28484]" dev="sockfs" ino=28484 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 428.818028][ C0] vkms_vblank_simulate: vblank timer overrun [ 428.833016][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1675'. [ 428.953773][T11659] hsr_slave_1 (unregistering): left promiscuous mode [ 429.003051][ T29] audit: type=1400 audit(1737820712.812:1142): avc: denied { mount } for pid=11670 comm="syz.2.1680" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 429.027480][T11671] openvswitch: netlink: Actions may not be safe on all matching packets [ 430.226368][T11689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1686'. [ 430.341707][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1686'. [ 430.788568][ T29] audit: type=1326 audit(1737820714.602:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.4.1681" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2eab18cd29 code=0x0 [ 431.204937][ T29] audit: type=1400 audit(1737820715.012:1144): avc: denied { getattr } for pid=11698 comm="syz.2.1688" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 432.479805][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1694'. [ 432.678254][ T5820] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 432.904797][ T29] audit: type=1326 audit(1737820716.712:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11737 comm="syz.2.1699" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d5938cd29 code=0x0 [ 434.114309][T11749] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 434.160205][T11749] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 434.193441][T11749] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 434.271609][ T29] audit: type=1400 audit(1737820718.072:1146): avc: denied { read } for pid=11756 comm="syz.1.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 435.052060][ T29] audit: type=1400 audit(1737820718.852:1147): avc: denied { execute } for pid=11774 comm="syz.0.1709" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 435.162878][T11782] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1710'. [ 435.690918][ T29] audit: type=1400 audit(1737820719.502:1148): avc: denied { write } for pid=11783 comm="syz.4.1711" name="ptype" dev="proc" ino=4026533181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 436.226097][T11801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1717'. [ 436.236197][T11801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1717'. [ 436.280384][T11803] netlink: 'syz.1.1718': attribute type 1 has an invalid length. [ 436.299867][T11803] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1718'. [ 436.752621][T11812] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 436.781281][T11812] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 436.791928][T11812] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 436.834009][T11820] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1723'. [ 437.137763][ T5865] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 437.287663][ T5865] usb 1-1: Invalid ep0 maxpacket: 64 [ 437.367865][ T970] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 437.417966][ T5865] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 437.531873][ T970] usb 5-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 437.541476][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.552274][ T970] usb 5-1: config 0 descriptor?? [ 437.587821][ T5865] usb 1-1: Invalid ep0 maxpacket: 64 [ 437.596818][ T5865] usb usb1-port1: attempt power cycle [ 437.968297][ T5865] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 438.009586][ T5865] usb 1-1: Invalid ep0 maxpacket: 64 [ 438.517972][ T5865] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 438.623758][ T5865] usb 1-1: Invalid ep0 maxpacket: 64 [ 438.626132][ T970] usbhid 5-1:0.0: can't add hid device: -71 [ 438.706084][ T970] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 438.722660][ T970] usb 5-1: USB disconnect, device number 20 [ 439.082623][T11861] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 439.083445][ T5865] usb usb1-port1: unable to enumerate USB device [ 439.384375][ T29] audit: type=1400 audit(1737820723.192:1149): avc: denied { create } for pid=11872 comm="syz.1.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 439.504435][T11880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.723264][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.730332][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.753666][ T29] audit: type=1400 audit(1737820723.562:1150): avc: denied { create } for pid=11876 comm="syz.4.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 440.673811][T11897] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 440.682259][T11897] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 440.707774][T11897] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 440.895291][T11905] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 441.587785][T10872] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 441.789894][T10872] usb 1-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 441.799419][T10872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.876712][T11920] overlayfs: failed to clone upperpath [ 442.377269][T10872] usb 1-1: config 0 descriptor?? [ 442.427375][ T29] audit: type=1400 audit(1737820726.232:1151): avc: denied { setopt } for pid=11919 comm="syz.3.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 442.706532][T10872] usbhid 1-1:0.0: can't add hid device: -71 [ 442.738630][T10872] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 442.759817][T11935] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 442.774081][T10872] usb 1-1: USB disconnect, device number 39 [ 442.783390][T11937] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1760'. [ 443.371717][T11953] fuse: Bad value for 'user_id' [ 443.376741][T11953] fuse: Bad value for 'user_id' [ 443.796990][T11956] mmap: syz.1.1768 (11956): VmData 25841664 exceed data ulimit 236. Update limits or use boot option ignore_rlimit_data. [ 443.837716][ T970] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 443.913282][T11967] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 443.928716][T11967] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 443.946937][T11967] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 444.004939][ T970] usb 1-1: Using ep0 maxpacket: 8 [ 444.013228][ T970] usb 1-1: config 162 has an invalid interface number: 60 but max is 0 [ 444.026361][ T970] usb 1-1: config 162 has no interface number 0 [ 444.033080][ T970] usb 1-1: config 162 interface 60 has no altsetting 0 [ 444.045151][ T970] usb 1-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=9b.85 [ 444.177982][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.186346][ T970] usb 1-1: Product: syz [ 444.193986][ T970] usb 1-1: Manufacturer: syz [ 444.199208][ T970] usb 1-1: SerialNumber: syz [ 445.952623][T12000] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 445.959160][T12000] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 446.283048][T12007] ceph: No mds server is up or the cluster is laggy [ 446.308120][ T5868] vhci_hcd: vhci_device speed not set [ 446.378622][ T5868] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 446.852350][T12000] vhci_hcd vhci_hcd.0: Device attached [ 447.138032][ T29] audit: type=1400 audit(1737820730.942:1152): avc: denied { getopt } for pid=11998 comm="syz.3.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 447.308548][ T29] audit: type=1400 audit(1737820731.122:1153): avc: denied { ioctl } for pid=12020 comm="syz.2.1787" path="socket:[29506]" dev="sockfs" ino=29506 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 447.345539][T12020] delete_channel: no stack [ 447.426862][ T29] audit: type=1400 audit(1737820731.152:1154): avc: denied { bind } for pid=12020 comm="syz.2.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 447.676660][T12002] vhci_hcd: connection reset by peer [ 447.732241][ T9831] vhci_hcd: stop threads [ 447.738611][ T9831] vhci_hcd: release socket [ 447.770234][ T9831] vhci_hcd: disconnect device [ 448.029586][ T29] audit: type=1400 audit(1737820731.832:1155): avc: denied { bind } for pid=12028 comm="syz.3.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 448.062158][ T29] audit: type=1400 audit(1737820731.832:1156): avc: denied { read } for pid=12028 comm="syz.3.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 448.875932][T12051] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1797'. [ 448.955904][T11960] Set syz1 is full, maxelem 65536 reached [ 449.015332][ T970] keyspan 1-1:162.60: Keyspan 1 port adapter converter detected [ 449.063957][ T970] keyspan 1-1:162.60: found no endpoint descriptor for endpoint 84 [ 449.101223][ T970] keyspan 1-1:162.60: found no endpoint descriptor for endpoint 81 [ 449.109653][ T970] keyspan 1-1:162.60: found no endpoint descriptor for endpoint 82 [ 449.118063][ T970] keyspan 1-1:162.60: found no endpoint descriptor for endpoint 1 [ 449.126130][ T970] keyspan 1-1:162.60: found no endpoint descriptor for endpoint 83 [ 449.226252][ T970] keyspan 1-1:162.60: found no endpoint descriptor for endpoint 3 [ 449.235133][ T970] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 449.263487][ T970] usb 1-1: USB disconnect, device number 40 [ 449.271958][ T970] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 449.283848][ T970] keyspan 1-1:162.60: device disconnected [ 449.974002][T12062] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1801'. [ 450.693376][T12078] netlink: 'syz.3.1806': attribute type 12 has an invalid length. [ 451.699518][ T29] audit: type=1400 audit(1737820735.512:1157): avc: denied { mount } for pid=12087 comm="syz.2.1811" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 451.947745][ T5868] vhci_hcd: vhci_device speed not set [ 452.555654][ T29] audit: type=1400 audit(1737820736.362:1158): avc: denied { map } for pid=12102 comm="syz.2.1816" path="socket:[29661]" dev="sockfs" ino=29661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 453.213580][ T29] audit: type=1400 audit(1737820736.392:1159): avc: denied { read } for pid=12102 comm="syz.2.1816" path="socket:[29661]" dev="sockfs" ino=29661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 453.501583][ T29] audit: type=1400 audit(1737820737.312:1160): avc: denied { append } for pid=12112 comm="syz.3.1819" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 453.745532][ T29] audit: type=1400 audit(1737820737.552:1161): avc: denied { mounton } for pid=12118 comm="syz.3.1822" path="/proc/1047/task" dev="proc" ino=30332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 453.817604][ T29] audit: type=1400 audit(1737820737.582:1162): avc: denied { mount } for pid=12118 comm="syz.3.1822" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 454.993527][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1829'. [ 455.020889][ T29] audit: type=1400 audit(1737820738.822:1163): avc: denied { write } for pid=12142 comm="syz.3.1830" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 455.074012][T12143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1829'. [ 455.122030][ T29] audit: type=1400 audit(1737820738.822:1164): avc: denied { open } for pid=12142 comm="syz.3.1830" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 455.162009][T12143] geneve0: entered allmulticast mode [ 455.279232][ T29] audit: type=1400 audit(1737820738.942:1165): avc: denied { create } for pid=12140 comm="syz.2.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 455.299572][ T29] audit: type=1400 audit(1737820738.952:1166): avc: denied { read } for pid=12140 comm="syz.2.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 456.277663][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 456.335369][T12168] 9p: Unknown Cache mode or invalid value fscach [ 456.763697][T12188] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 456.876852][ T29] audit: type=1400 audit(1737820740.642:1167): avc: denied { write } for pid=12176 comm="syz.0.1844" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 457.656481][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 457.656495][ T29] audit: type=1400 audit(1737820741.462:1173): avc: denied { map } for pid=12204 comm="syz.3.1852" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 457.852586][ T29] audit: type=1400 audit(1737820741.652:1174): avc: denied { setopt } for pid=12204 comm="syz.3.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 457.975618][ T29] audit: type=1400 audit(1737820741.782:1175): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 458.074273][T12205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1852'. [ 458.090391][T12224] netlink: 'syz.2.1855': attribute type 10 has an invalid length. [ 458.131140][T12224] syz_tun: entered promiscuous mode [ 458.182132][T12224] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 458.222874][T12235] netlink: 'syz.4.1865': attribute type 12 has an invalid length. [ 458.478218][ T29] audit: type=1400 audit(1737820742.292:1176): avc: denied { setopt } for pid=12220 comm="syz.0.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 458.537696][ T29] audit: type=1400 audit(1737820742.292:1177): avc: denied { bind } for pid=12220 comm="syz.0.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 458.612020][ T29] audit: type=1400 audit(1737820742.422:1178): avc: denied { mount } for pid=12246 comm="syz.4.1869" name="/" dev="autofs" ino=30834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 458.686451][ T29] audit: type=1400 audit(1737820742.492:1179): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 458.837685][ T29] audit: type=1400 audit(1737820742.492:1180): avc: denied { write } for pid=12220 comm="syz.0.1860" path="socket:[30598]" dev="sockfs" ino=30598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 458.935917][ T29] audit: type=1400 audit(1737820742.532:1181): avc: denied { connect } for pid=12220 comm="syz.0.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 459.389313][ T5820] Bluetooth: hci0: Malformed LE Event: 0x0d [ 459.411041][T12269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1878'. [ 459.530520][T12273] netlink: 'syz.2.1880': attribute type 4 has an invalid length. [ 459.544735][T12220] ALSA: mixer_oss: invalid OSS volume '·' [ 459.720587][T12282] netlink: 'syz.2.1882': attribute type 4 has an invalid length. [ 460.258799][T12299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1890'. [ 461.218650][ T5820] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 461.233447][T12317] fuse: Bad value for 'fd' [ 461.459928][T12321] can: request_module (can-proto-3) failed. [ 462.768858][ T29] audit: type=1400 audit(1737820746.572:1182): avc: denied { mount } for pid=12355 comm="syz.3.1909" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 462.785947][T12356] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 463.053644][ T29] audit: type=1400 audit(1737820746.862:1183): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 463.158717][T12381] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1916'. [ 465.156750][T12449] netlink: 'syz.0.1929': attribute type 12 has an invalid length. [ 465.196221][T12453] 9pnet_virtio: no channels available for device syz [ 465.211361][T12453] overlayfs: failed to clone upperpath [ 465.396258][ T5820] Bluetooth: hci2: unexpected event for opcode 0x200b [ 465.441804][T12457] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.488116][T12457] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.640453][T12457] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.671109][T12457] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.765864][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1940'. [ 465.822825][T12457] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.838784][T12457] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.921645][T12457] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.938009][T12457] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.054401][T12457] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.069651][T12457] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.082618][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1945'. [ 466.098268][T12457] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.106531][T12457] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.122348][T12457] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.131441][T12457] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.145661][T12457] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.155510][T12457] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.333559][ T5820] Bluetooth: hci0: unexpected event for opcode 0x200b [ 466.343073][T12491] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1947'. [ 466.405357][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1947'. [ 469.583319][T12582] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 469.618696][T12582] kvm: pic: non byte read [ 469.631273][T12582] kvm: pic: level sensitive irq not supported [ 469.631336][T12582] kvm: pic: non byte read [ 469.659868][T12582] kvm: pic: level sensitive irq not supported [ 469.659931][T12582] kvm: pic: non byte read [ 469.686758][T12582] kvm: pic: level sensitive irq not supported [ 469.686862][T12582] kvm: pic: non byte read [ 470.260790][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1982'. [ 470.306334][T12573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1982'. [ 470.426324][ T5820] Bluetooth: hci1: unexpected event for opcode 0x200b [ 470.509313][T12613] overlayfs: failed to clone upperpath [ 470.754498][ T29] audit: type=1400 audit(1737820754.562:1184): avc: denied { listen } for pid=12622 comm="syz.1.2001" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 470.827647][ T29] audit: type=1400 audit(1737820754.562:1185): avc: denied { accept } for pid=12622 comm="syz.1.2001" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 471.029894][ T29] audit: type=1400 audit(1737820754.822:1186): avc: denied { create } for pid=12624 comm="syz.0.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 471.465417][ T5820] Bluetooth: hci4: unexpected event for opcode 0x200b [ 471.867990][ T5820] Bluetooth: hci2: unexpected event for opcode 0x200b [ 473.179917][T12703] netlink: 'syz.3.2032': attribute type 12 has an invalid length. [ 473.806161][ T5820] Bluetooth: hci4: unexpected event for opcode 0x200b [ 474.027977][T12666] ALSA: mixer_oss: invalid OSS volume '·' [ 475.172323][ T29] audit: type=1400 audit(1737820758.972:1187): avc: denied { write } for pid=12737 comm="syz.4.2042" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 580.181629][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 580.188609][ C0] rcu: 1-...!: (1 GPs behind) idle=9604/1/0x4000000000000000 softirq=42619/42623 fqs=0 [ 580.199475][ C0] rcu: (detected by 0, t=10502 jiffies, g=39589, q=237 ncpus=2) [ 580.207201][ C0] Sending NMI from CPU 0 to CPUs 1: [ 580.207224][ C1] NMI backtrace for cpu 1 [ 580.207234][ C1] CPU: 1 UID: 0 PID: 5816 Comm: syz-executor Not tainted 6.13.0-syzkaller-06167-g0afd22092df4 #0 [ 580.207250][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 580.207257][ C1] RIP: 0010:kasan_check_range+0x111/0x1a0 [ 580.207279][ C1] Code: 44 89 c2 e8 11 eb ff ff 83 f0 01 5b 5d 41 5c c3 cc cc cc cc 48 85 d2 74 4f 48 01 ea eb 09 48 83 c0 01 48 39 d0 74 41 80 38 00 <74> f2 eb b2 41 bc 08 00 00 00 45 29 dc 49 8d 14 2c eb 0c 48 83 c0 [ 580.207291][ C1] RSP: 0018:ffffc90000a18b08 EFLAGS: 00000046 [ 580.207302][ C1] RAX: fffffbfff2dd6fc5 RBX: fffffbfff2dd6fc6 RCX: ffffffff8195c64e [ 580.207311][ C1] RDX: fffffbfff2dd6fc6 RSI: 0000000000000008 RDI: ffffffff96eb7e28 [ 580.207320][ C1] RBP: fffffbfff2dd6fc5 R08: 0000000000000000 R09: fffffbfff2dd6fc5 [ 580.207329][ C1] R10: ffffffff96eb7e2f R11: 0000000000000003 R12: 0000000000000002 [ 580.207336][ C1] R13: ffff888030de0000 R14: 0000000000000b4d R15: ffff888030de0b30 [ 580.207345][ C1] FS: 000055556e0b2500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 580.207359][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 580.207368][ C1] CR2: 00007fe3a81762d8 CR3: 0000000068f3e000 CR4: 00000000003526f0 [ 580.207377][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 580.207384][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 580.207392][ C1] Call Trace: [ 580.207398][ C1] [ 580.207405][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 580.207422][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 580.207439][ C1] ? nmi_handle+0x1ac/0x5d0 [ 580.207457][ C1] ? kasan_check_range+0x111/0x1a0 [ 580.207472][ C1] ? default_do_nmi+0x6a/0x160 [ 580.207486][ C1] ? exc_nmi+0x170/0x1e0 [ 580.207499][ C1] ? end_repeat_nmi+0xf/0x53 [ 580.207525][ C1] ? hlock_class+0x4e/0x130 [ 580.207540][ C1] ? kasan_check_range+0x111/0x1a0 [ 580.207555][ C1] ? kasan_check_range+0x111/0x1a0 [ 580.207570][ C1] ? kasan_check_range+0x111/0x1a0 [ 580.207585][ C1] [ 580.207589][ C1] [ 580.207594][ C1] hlock_class+0x4e/0x130 [ 580.207606][ C1] __lock_acquire+0x410/0x3c40 [ 580.207624][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 580.207642][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 580.207659][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 580.207677][ C1] lock_acquire.part.0+0x11b/0x380 [ 580.207694][ C1] ? advance_sched+0xd8/0xc60 [ 580.207708][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 580.207725][ C1] ? rcu_is_watching+0x12/0xc0 [ 580.207739][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 580.207753][ C1] ? advance_sched+0xd8/0xc60 [ 580.207766][ C1] ? lock_acquire+0x2f/0xb0 [ 580.207782][ C1] ? advance_sched+0xd8/0xc60 [ 580.207795][ C1] ? __pfx_advance_sched+0x10/0x10 [ 580.207808][ C1] _raw_spin_lock+0x2e/0x40 [ 580.207822][ C1] ? advance_sched+0xd8/0xc60 [ 580.207835][ C1] advance_sched+0xd8/0xc60 [ 580.207849][ C1] ? timerqueue_del+0x83/0x150 [ 580.207863][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 580.207875][ C1] ? __pfx_advance_sched+0x10/0x10 [ 580.207888][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 580.207903][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 580.207916][ C1] ? read_tsc+0x9/0x20 [ 580.207931][ C1] hrtimer_interrupt+0x392/0x8e0 [ 580.207947][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 580.207966][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 580.207983][ C1] [ 580.207987][ C1] [ 580.207991][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 580.208008][ C1] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 580.208026][ C1] Code: b8 ff ff ff ff 65 0f c1 05 70 ca 6b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 580.208038][ C1] RSP: 0018:ffffc9000404f6f8 EFLAGS: 00000206 [ 580.208048][ C1] RAX: 0000000000000046 RBX: 1ffff92000809ee0 RCX: 00000000406dd9a6 [ 580.208057][ C1] RDX: 0000000000000001 RSI: ffffffff8b6cdb40 RDI: ffffffff8bd2e7c0 [ 580.208066][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dd6f98 [ 580.208074][ C1] R10: ffffffff96eb7cc7 R11: 0000000000000001 R12: 0000000000000000 [ 580.208082][ C1] R13: ffffffff8e1be140 R14: 0000000000000000 R15: 0000000000000000 [ 580.208095][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 580.208112][ C1] ? rcu_is_watching+0x12/0xc0 [ 580.208125][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 580.208139][ C1] ? is_bpf_text_address+0x30/0x1a0 [ 580.208159][ C1] ? lock_acquire+0x2f/0xb0 [ 580.208174][ C1] ? is_bpf_text_address+0x30/0x1a0 [ 580.208192][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 580.208208][ C1] is_bpf_text_address+0x36/0x1a0 [ 580.208225][ C1] ? is_bpf_text_address+0x30/0x1a0 [ 580.208243][ C1] kernel_text_address+0x8d/0x100 [ 580.208260][ C1] __kernel_text_address+0xd/0x40 [ 580.208277][ C1] unwind_get_return_address+0x59/0xa0 [ 580.208296][ C1] arch_stack_walk+0xa7/0x100 [ 580.208312][ C1] stack_trace_save+0x95/0xd0 [ 580.208326][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 580.208339][ C1] ? __pfx_mark_lock+0x10/0x10 [ 580.208356][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 580.208373][ C1] kasan_save_stack+0x33/0x60 [ 580.208392][ C1] ? kasan_save_stack+0x33/0x60 [ 580.208409][ C1] ? kasan_save_track+0x14/0x30 [ 580.208426][ C1] ? kasan_save_free_info+0x3b/0x60 [ 580.208442][ C1] ? __kasan_slab_free+0x51/0x70 [ 580.208453][ C1] ? kfree+0x14f/0x4b0 [ 580.208470][ C1] ? ref_tracker_free+0x377/0x820 [ 580.208486][ C1] ? __sk_destruct+0x36a/0x720 [ 580.208504][ C1] ? sk_destruct+0xc2/0xf0 [ 580.208525][ C1] ? __sk_free+0xf4/0x3e0 [ 580.208542][ C1] ? sk_free+0x6a/0x90 [ 580.208558][ C1] ? tcp_close+0xd3/0x120 [ 580.208571][ C1] ? inet_release+0x13c/0x280 [ 580.208583][ C1] ? __sock_release+0xb0/0x270 [ 580.208596][ C1] ? sock_close+0x1c/0x30 [ 580.208607][ C1] ? __fput+0x3ff/0xb70 [ 580.208620][ C1] ? __fput_sync+0xa1/0xc0 [ 580.208632][ C1] ? __x64_sys_close+0x86/0x100 [ 580.208646][ C1] ? do_syscall_64+0xcd/0x250 [ 580.208663][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.208689][ C1] kasan_save_track+0x14/0x30 [ 580.208706][ C1] kasan_save_free_info+0x3b/0x60 [ 580.208722][ C1] __kasan_slab_free+0x51/0x70 [ 580.208734][ C1] kfree+0x14f/0x4b0 [ 580.208750][ C1] ? ref_tracker_free+0x377/0x820 [ 580.208767][ C1] ref_tracker_free+0x377/0x820 [ 580.208783][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 580.208799][ C1] ? __sk_destruct+0x36a/0x720 [ 580.208815][ C1] ? sk_destruct+0xc2/0xf0 [ 580.208832][ C1] ? __sk_free+0xf4/0x3e0 [ 580.208848][ C1] ? sk_free+0x6a/0x90 [ 580.208864][ C1] ? tcp_close+0xd3/0x120 [ 580.208877][ C1] ? inet_release+0x13c/0x280 [ 580.208888][ C1] ? __sock_release+0xb0/0x270 [ 580.208900][ C1] ? sock_close+0x1c/0x30 [ 580.208912][ C1] ? __fput+0x3ff/0xb70 [ 580.208923][ C1] ? __fput_sync+0xa1/0xc0 [ 580.208935][ C1] ? __x64_sys_close+0x86/0x100 [ 580.208949][ C1] ? do_syscall_64+0xcd/0x250 [ 580.208965][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.208984][ C1] __sk_destruct+0x36a/0x720 [ 580.209002][ C1] sk_destruct+0xc2/0xf0 [ 580.209019][ C1] __sk_free+0xf4/0x3e0 [ 580.209036][ C1] sk_free+0x6a/0x90 [ 580.209053][ C1] tcp_close+0xd3/0x120 [ 580.209067][ C1] inet_release+0x13c/0x280 [ 580.209079][ C1] __sock_release+0xb0/0x270 [ 580.209092][ C1] ? __pfx_sock_close+0x10/0x10 [ 580.209104][ C1] sock_close+0x1c/0x30 [ 580.209116][ C1] __fput+0x3ff/0xb70 [ 580.209130][ C1] __fput_sync+0xa1/0xc0 [ 580.209143][ C1] __x64_sys_close+0x86/0x100 [ 580.209157][ C1] do_syscall_64+0xcd/0x250 [ 580.209174][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.209190][ C1] RIP: 0033:0x7fe3a7f8b98a [ 580.209201][ C1] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24 [ 580.209213][ C1] RSP: 002b:00007ffe2c0e5b30 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 580.209224][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fe3a7f8b98a [ 580.209232][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 580.209239][ C1] RBP: 00007ffe2c0e5b7c R08: 00007ffe2c0e547c R09: 0079746972756365 [ 580.209248][ C1] R10: 00007ffe2c0e54e0 R11: 0000000000000293 R12: 0000000000000032 [ 580.209256][ C1] R13: 0000000000073f99 R14: 00007ffe2c0e5bd0 R15: 0000000000000148 [ 580.209268][ C1] [ 580.210220][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g39589 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 581.050606][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 581.060571][ C0] rcu: RCU grace-period kthread stack dump: [ 581.066448][ C0] task:rcu_preempt state:R running task stack:27008 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 581.078195][ C0] Call Trace: [ 581.081468][ C0] [ 581.084399][ C0] __schedule+0x1142/0x5b60 [ 581.088932][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 581.094168][ C0] ? __pfx___schedule+0x10/0x10 [ 581.099033][ C0] ? schedule+0x298/0x350 [ 581.103366][ C0] ? __pfx_lock_release+0x10/0x10 [ 581.108398][ C0] ? lock_acquire+0x2f/0xb0 [ 581.112905][ C0] ? schedule+0x1fd/0x350 [ 581.117240][ C0] schedule+0xe7/0x350 [ 581.121311][ C0] schedule_timeout+0x124/0x280 [ 581.126163][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 581.131536][ C0] ? __pfx_process_timeout+0x10/0x10 [ 581.136828][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 581.142635][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 581.148100][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 581.152870][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 581.158158][ C0] ? rcu_gp_init+0xc82/0x1630 [ 581.162843][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 581.168049][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 581.173859][ C0] rcu_gp_kthread+0x271/0x380 [ 581.178542][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 581.183751][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 581.188952][ C0] ? __kthread_parkme+0x148/0x220 [ 581.193976][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 581.199182][ C0] kthread+0x3af/0x750 [ 581.203261][ C0] ? __pfx_kthread+0x10/0x10 [ 581.207856][ C0] ? __pfx_kthread+0x10/0x10 [ 581.212447][ C0] ret_from_fork+0x45/0x80 [ 581.216899][ C0] ? __pfx_kthread+0x10/0x10 [ 581.221491][ C0] ret_from_fork_asm+0x1a/0x30 [ 581.226290][ C0] [ 581.229305][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 581.235621][ C0] CPU: 0 UID: 0 PID: 12729 Comm: syz.3.2041 Not tainted 6.13.0-syzkaller-06167-g0afd22092df4 #0 [ 581.246029][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 581.256076][ C0] RIP: 0010:smp_call_function_single+0x1cb/0x580 [ 581.262399][ C0] Code: 89 fa c1 e2 10 09 d0 89 44 24 4c e8 af fa ff ff 41 89 c5 0f 1f 44 00 00 e8 32 eb 0b 00 eb 07 e8 2b eb 0b 00 f3 90 8b 5c 24 48 <31> ff 83 e3 01 89 de e8 19 e6 0b 00 85 db 75 e5 e8 10 eb 0b 00 e8 [ 581.282008][ C0] RSP: 0018:ffffc9000c10fb60 EFLAGS: 00000293 [ 581.288071][ C0] RAX: 0000000000000000 RBX: 0000000000000011 RCX: ffffffff81addc97 [ 581.296038][ C0] RDX: ffff88802b1e2440 RSI: ffffffff81addc85 RDI: 0000000000000005 [ 581.304004][ C0] RBP: ffffc9000c10fc28 R08: 0000000000000005 R09: 0000000000000000 [ 581.311983][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff92001821f70 [ 581.319967][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880b873fb40 [ 581.327942][ C0] FS: 000055557c2b4500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 581.336869][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 581.343464][ C0] CR2: 000000110c298e8e CR3: 0000000066cd4000 CR4: 00000000003526f0 [ 581.351452][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 581.359428][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 581.367397][ C0] Call Trace: [ 581.370673][ C0] [ 581.373515][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 581.379848][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 581.385048][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 581.390518][ C0] ? timekeeping_advance+0x72e/0xa90 [ 581.395808][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 581.401438][ C0] ? __asan_memcpy+0x3c/0x60 [ 581.406029][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 581.411335][ C0] ? rcu_is_watching+0x12/0xc0 [ 581.416117][ C0] ? update_process_times+0x178/0x2d0 [ 581.421504][ C0] ? __pfx_update_process_times+0x10/0x10 [ 581.427244][ C0] ? update_wall_time+0x1c/0x40 [ 581.432218][ C0] ? tick_nohz_handler+0x376/0x530 [ 581.437341][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 581.442797][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 581.448173][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 581.453894][ C0] ? read_tsc+0x9/0x20 [ 581.457972][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 581.463092][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 581.469250][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 581.475054][ C0] [ 581.477981][ C0] [ 581.480907][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 581.487068][ C0] ? smp_call_function_single+0x1d7/0x580 [ 581.492780][ C0] ? smp_call_function_single+0x1c5/0x580 [ 581.498493][ C0] ? smp_call_function_single+0x1cb/0x580 [ 581.504219][ C0] ? rcu_barrier+0x277/0x700 [ 581.508811][ C0] ? __pfx_rcu_barrier_handler+0x10/0x10 [ 581.514440][ C0] ? __pfx_smp_call_function_single+0x10/0x10 [ 581.520508][ C0] ? __pfx_rcu_barrier_handler+0x10/0x10 [ 581.526152][ C0] ? mark_held_locks+0x9f/0xe0 [ 581.530921][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 581.536730][ C0] rcu_barrier+0x28d/0x700 [ 581.541161][ C0] ? do_raw_read_unlock+0x44/0xe0 [ 581.546185][ C0] kvm_mmu_uninit_vm+0x5b/0x60 [ 581.550948][ C0] kvm_arch_destroy_vm+0x360/0x490 [ 581.556067][ C0] ? __pfx_kvm_arch_destroy_vm+0x10/0x10 [ 581.561724][ C0] kvm_put_kvm+0x4fa/0xb40 [ 581.566148][ C0] ? __pfx_kvm_vm_release+0x10/0x10 [ 581.571346][ C0] kvm_vm_release+0x3c/0x50 [ 581.575853][ C0] __fput+0x3ff/0xb70 [ 581.579836][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.585032][ C0] task_work_run+0x14e/0x250 [ 581.589622][ C0] ? __pfx_task_work_run+0x10/0x10 [ 581.594742][ C0] ? __pfx___do_sys_close_range+0x10/0x10 [ 581.600478][ C0] syscall_exit_to_user_mode+0x27b/0x2a0 [ 581.606116][ C0] do_syscall_64+0xda/0x250 [ 581.610626][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.616522][ C0] RIP: 0033:0x7fc065d8cd29 [ 581.620933][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.640541][ C0] RSP: 002b:00007ffef1ea62c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 581.648951][ C0] RAX: 0000000000000000 RBX: 00007fc065fa7ba0 RCX: 00007fc065d8cd29 [ 581.656915][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 581.664887][ C0] RBP: 00007fc065fa7ba0 R08: 00000000000000d8 R09: 00007ffef1ea65bf [ 581.672853][ C0] R10: 00000000003ffd04 R11: 0000000000000246 R12: 000000000007406d [ 581.680817][ C0] R13: 00007fc065fa6080 R14: 0000000000000032 R15: ffffffffffffffff [ 581.688795][ C0]