last executing test programs: 7.95300356s ago: executing program 2 (id=382): sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000800), 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042c111ec80000000000000000009f9a0a530437dd49d554bc912e628c00080004"], 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000180)={'team0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x0) 7.751209002s ago: executing program 2 (id=383): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="00000f00000024c8c8c503000000a8eb767e3a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f12f0d4071040403dfe400000001"], 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x0, @mcast2, 0x42, 0x1}, 0x80, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 7.140669339s ago: executing program 0 (id=385): r0 = openat$sequencer(0xffffff9c, &(0x7f0000004700), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000004740)={"f3a992c5f0640ce3df762062bc2a6b18c8f7b5ffabec44e38f218d52e570"}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000001d000100000000000000000007"], 0x30}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newspdinfo={0x54, 0x24, 0x300, 0x70bd26, 0x25dfdbfe, 0x3, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.140511441s ago: executing program 3 (id=386): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x10004000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x400}, 0x8) write$nci(0xffffffffffffffff, &(0x7f0000000000)=@NCI_OP_CORE_RESET_NTF={0x0, 0x0, 0x3, 0x0, 0x1, {0x29, 0x6, 0x0, 0x10, 0xc, 0xffff}}, 0xc) 6.777969148s ago: executing program 3 (id=387): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000007480)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0xa101}, @sack_perm={0x4, 0x2}, @generic={0x0, 0xa, "69fbd54ae56dd076"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @fastopen={0x22, 0x2}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @mptcp=@ack={0x1e, 0xb, 0x0, 0x4, "5882a08027c176"}]}}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x6, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x88, &(0x7f00000002c0)={{0x12, 0x1, 0x211, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0xf, 0x0, 0xc0, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x3, {{0xa, 0x24, 0x6, 0x0, 0x0, "becac119ea"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x2, 0x0, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0xdf7, 0x4, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x8, 0x5, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x0, 0xf2, 0x40}, @mdlm={0x15, 0x24, 0x12, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0xcf, 0x81, 0x79, 0x16}, @acm={0x4, 0x24, 0x2, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x4, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5a, 0x0, 0xdb}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0xfe, 0x4, 0x8, 0x40, 0x5}, 0x52, &(0x7f0000000380)={0x5, 0xf, 0x52, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0xf7, 0x5, 0x4, 0xf, 0x5, [0xc0c0, 0x30, 0xf0, 0x7e00, 0x1fe0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0xa0, 0x800}, @wireless={0xb, 0x10, 0x1, 0xc, 0x92, 0x0, 0x77, 0x5, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x0, 0xff00, 0x7, [0x0, 0xf, 0xff0000]}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x439}}]}) write$tcp_congestion(r0, &(0x7f0000000040)='veno\x00', 0x5) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@multicast2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x9}, {0x80000000000000}, {}, 0x70bd2b, 0x0, 0xa, 0x0, 0x0, 0x81}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="570100000000b5c83f4bcf00000000000008000200010000000000000000"], 0x1c}}, 0x0) 6.616267329s ago: executing program 0 (id=388): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (fail_nth: 7) 6.409673155s ago: executing program 3 (id=390): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64]) 6.115163127s ago: executing program 0 (id=391): r0 = io_uring_setup(0x669, &(0x7f0000000140)={0x0, 0x10, 0x800, 0x0, 0x31b}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(0x0, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='\x01') r4 = dup3(r1, r1, 0x80000) r5 = socket$kcm(0x10, 0x2, 0x0) pread64(r4, &(0x7f0000000200)=""/28, 0x1c, 0x5) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000002c0)={0x0, 'batadv0\x00', {0x8}, 0xfffb}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000804) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0}) dup3(r6, r1, 0x0) eventfd(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.599954784s ago: executing program 3 (id=392): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x30) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4) socket$inet6(0xa, 0x80003, 0xff) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 5.458623678s ago: executing program 0 (id=394): r0 = io_uring_setup(0x669, &(0x7f0000000140)={0x0, 0x10, 0x800, 0x0, 0x31b}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(0x0, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='\x01') r4 = dup3(r1, r1, 0x80000) r5 = socket$kcm(0x10, 0x2, 0x0) pread64(r4, &(0x7f0000000200)=""/28, 0x1c, 0x5) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000002c0)={0x0, 'batadv0\x00', {0x8}, 0xfffb}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000804) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0}) dup3(r6, r1, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) close_range(r0, 0xffffffffffffffff, 0x0) 4.288655409s ago: executing program 0 (id=396): socket$kcm(0x10, 0x3, 0x10) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000012c0)={0x2}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip_vs_stats\x00') preadv(r3, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0) bind$alg(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_setup(0x410f, &(0x7f0000000080)={0x0, 0xfff5, 0x800, 0x0, 0x80000}) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000001280)={0x5, 0x4, 0x81}) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 4.18698828s ago: executing program 2 (id=397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 4.133265726s ago: executing program 4 (id=398): r0 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240)=0x0, &(0x7f0000001880)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000409'], 0x2a, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 4.104111207s ago: executing program 2 (id=399): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0xe09, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0xc, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "c6f521190c134e2a", "9f69314bfec4da11aaa1a5437d3160f1", "94853f8e", "8a7d17d4bbf535c2"}, 0x28) syz_emit_ethernet(0x82, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ee527e", 0x4c, 0x3c, 0x0, @empty, @mcast2, {[@dstopts={0x33}], {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1}}}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x84, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_csum={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x12, 0x6, "4d216fcee3ceced2b1eee27e471e"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 3.946766468s ago: executing program 3 (id=400): prctl$PR_SET_MM(0x23, 0x2, &(0x7f00002b4000/0x3000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x6897b900, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000040)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00080000800002000a000100e7ffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4891}, 0x24004010) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r8, 0x5607, 0x2c) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r9) 3.883732017s ago: executing program 1 (id=401): r0 = io_uring_setup(0x669, &(0x7f0000000140)={0x0, 0x10, 0x800, 0x0, 0x31b}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(0x0, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff}) socket$inet6(0xa, 0x3, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='\x01') r4 = dup3(r1, r1, 0x80000) r5 = socket$kcm(0x10, 0x2, 0x0) pread64(r4, &(0x7f0000000200)=""/28, 0x1c, 0x5) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000002c0)={0x0, 'batadv0\x00', {0x8}, 0xfffb}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000804) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0}) dup3(r6, r1, 0x0) eventfd(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.760488799s ago: executing program 4 (id=402): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000062c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x237, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, 0x0, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'vlan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x80047453, &(0x7f0000000040)={0x18, 0x0, {0x7, @local, 'vlan0\x00'}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009293c9401320460274600102ea0109021b00010000000009041d00011f886c0009050602ff03000000"], 0x0) 3.181531639s ago: executing program 2 (id=403): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) prlimit64(r1, 0xe, &(0x7f0000000000)={0x1, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000000c0)={r1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x3}}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, 0x0, 0x0}, 0x61) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r5, &(0x7f0000000240), 0x0, 0x900000000000000}, 0x20) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) munlockall() 3.135875162s ago: executing program 1 (id=404): r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20004880}, 0x40) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') getdents64(r3, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.618523813s ago: executing program 1 (id=405): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(0x0, 0x100000000ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fdff00003e00210300000000000000000a0000003d8ec9ea46e8ced409f8ff9f7e5d1261a3dbe9debf754bff1b7f6f855c607c0bc1eb9a41a2bd35cb889b4c41bd41f42f0d301811fc90641d7127477637d478a4b02cf4c614f592de484c3f7447f408f808111996723a22406ce4d7553ad61596151dcb4ce09b3581aaed08000000e5ffffff631bbe231bfe680040889a8688f3247e5a72b16828b1c72c9c14a98bef226b359f0d41ebb98aeda028aa33f6ed"], 0x14}}, 0x4004010) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f000001b700)=ANY=[@ANYBLOB="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"], 0x2dd8}, 0x1, 0x0, 0x0, 0x20040841}, 0x20044) io_setup(0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r2, r4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x46d, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x101a001, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet6(0xa, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r6, 0x9, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) 2.563663452s ago: executing program 2 (id=406): waitid(0x258a6cbf2effb0f1, 0x0, 0x0, 0x8, 0x0) getgroups(0x0, &(0x7f0000001080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40008c0, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb0102030109021200ea030020000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x40, 0x30, 0x34, "e7b51eb521ec306d3bb995bdf9e960c7445f05a6e03a0c608f9a8c8b553edd13bb4a7fd88597200fbee5a6a95a842eaeca96fc50"}, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1b}, 0x0, &(0x7f0000000440)={0x20, 0x85, 0x4, 0xa83}, &(0x7f0000000480)={0x20, 0x83, 0x2}, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = semget$private(0x0, 0x5, 0x0) semtimedop(r4, 0x0, 0x25, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x40) dup3(r2, r3, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) eventfd2(0x0, 0x0) r6 = fsopen(&(0x7f00000001c0)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) 2.535365697s ago: executing program 3 (id=407): r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@host}, {@local}, 0x400, "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"}, 0x418}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xc8) r5 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000000000/0x4000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) 1.959043378s ago: executing program 1 (id=408): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) (async) statx(0xffffffffffffffff, &(0x7f0000002080)='./file0\x00', 0x400, 0x20, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = geteuid() write$FUSE_DIRENTPLUS(r0, &(0x7f00000021c0)={0x148, 0xffffffffffffffda, r1, [{{0x5, 0x1, 0x100000000, 0xa, 0x9, 0xfffffffd, {0x1, 0x3, 0xfffffffffffff000, 0xd, 0x0, 0xa3, 0x101, 0x80000000, 0x8, 0x6000, 0xc, 0xee01, r2, 0x8000, 0x800}}, {0x6, 0x101}}, {{0x0, 0x0, 0x3, 0x4, 0x0, 0x4, {0x0, 0x944, 0x3, 0xaf, 0x5, 0x9, 0xc, 0xe, 0x5, 0x6000, 0x2, r3, 0xee00, 0x9, 0x5}}, {0x1, 0x1000, 0x2, 0x3b, ',{'}}]}, 0x148) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) clock_gettime(0x0, &(0x7f0000004b80)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000004ac0)=[{{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002340)=""/111, 0x6f}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/14, 0xe}, {&(0x7f0000003400)=""/252, 0xfc}], 0x4, &(0x7f0000003540)=""/50, 0x32}, 0x6}, {{0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000003580)=""/76, 0x4c}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/52, 0x34}, {&(0x7f0000004640)=""/67, 0x43}, {&(0x7f00000046c0)=""/10, 0xa}, {&(0x7f0000004700)=""/82, 0x52}], 0x6, &(0x7f0000004800)=""/246, 0xf6}, 0x2}, {{&(0x7f0000004900)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004980)=""/30, 0x1e}], 0x1, &(0x7f0000004a00)=""/180, 0xb4}, 0x10000}], 0x3, 0x60, &(0x7f0000004bc0)={r5, r6+60000000}) sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000004dc0)={&(0x7f0000004c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004d80)={&(0x7f0000004c40)={0x13c, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xa7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x24040080}, 0x4000805) (async) write$FUSE_BMAP(r0, &(0x7f0000004e00)={0x18, 0x0, r1, {0x1}}, 0x18) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000004e40)={{0x1, 0x1, 0x18, r7, {0xb89}}, './file0\x00'}) write$tcp_mem(r8, &(0x7f0000004e80)={0x67c, 0x20, 0x3ff, 0x20, 0x5}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005080)={0x18, 0x1, &(0x7f0000004f00)=@raw=[@exit], &(0x7f0000004f40)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000004f80)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000004fc0)={0x4, 0x7, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000005000)=[r0, r8], &(0x7f0000005040)=[{0x2, 0x1, 0x1, 0x4}, {0x4, 0x3, 0x5, 0x6}], 0x10, 0xb623, @void, @value}, 0x94) r9 = syz_clone(0x12800, &(0x7f0000005140)="289e9439bd235098a2ce0035", 0xc, &(0x7f0000005180), &(0x7f00000051c0), &(0x7f0000005200)="2e3bac2d8697e6f016c06b18c29899a95be8fff07a12adb1353f8e2c76f2ac109151e18636cd303be0c143b008feca163cdacc426b09cf8e466ec512c8785e74f0ff6658cab71d53fe24f1cee622974f4ff381c1b11d1dac93cd1b269ab1a49fc2a0a925f119bbd2dc9cb91088191527de86988764539a38cd27eddd38c0026451ea1c0c8dd3f0a4c98e7869d6bacd96b1b516cf406bc03cab77a9b161bd80666c7a24c9fa6912c8b1794ebe01c0985ee5ae2906a0b8969d25cb97e051b2fdd18761c3031498c77dc712d2a3ef526588cd46c713b529541e32bacc078637b16f2f594c5a21754d509734cb97ea6df6e2aee56f5b038721234040ba9695a44cdd6cc4928bf88e6ecd545979fb83397a8a1f5cb7f44ae4cf2d585e55c77d1c970981243ab247da7c7729c2cbfe1a59859591709be61de60437e1d95ea59447ff7a8ae50d8cf0770c410ddfb64f7070613a7e9e905398560c280273fb100bdd643b35df9e158d8631f943e722b8dbe7355e734ad62000097f46a173c90ed3a59abe341e4ca71b83ff25966a4e4a31c99815c4b287a2b65fe38e81a0a57f0ad82c6f85bbc118df57e2e2d1179d470fb0c83bd12f4c492023be2d04ab6512b31bba820e3ee2524a0c5db4a6ea4e1d9c328854a1e38d5b46d3022a41f4c9a9bec8245f0d3646f99d6cf620edf76f28b49e55c986436db5a6bb20c3d7022678796dabcaaa511193798134220f2c4662728e8ac5762e25570c044a6d5bd3e2b8a35fb6392575df44526470eac73c823e7f71dfe7757bed6fe551740ac2d88751b7c16b676e708adafb3bacd411cde81b1fc9b0b186b284a2c6ae9b5ddaafaeb685c5c590762bcc16ea7f4623e86e8bbea8a586c02434d018273a376739d21499aa87f8c7b055d10dee30456008e524d10d9ebbd6980060b7b0ea1145945b7c17c28f3e89152b0b5159d3b3e1b3726e8ba1a2277b62077d7236fd0476b0ed3d38f9b4508adb7a553e63dcf59ac9bdbbee2bc9439809a6c547a5e4452adc93c786de9f96d93fbeef1a2e3777ccb9ba5e9f648c5fd614230686655da9a29797a9d1e63404c143ab0c671fb983d13d25c1273912cc9179d457b24b0f1f5aeda60c981570601127393139f0d381127f2e77d20a09e88480ec88956da683a3a49444097531e00e40c2d60ee532a20b3f8e6f72beada41a4cddcc8d611d5eec14cb637dbf6ba71c75193d7c30357cefb653aa32ef004fe5ed2e2016fabaac9f813d3609db40ae08e55ee717f3a4b2612904d12ef2301d8a384b3beff4f2682639678ab9180c1846bca68c512fbd2c1e254aabed8824cabd28a57ea3a866fbb655ae83796806de5c5b011c0af967f7475dd2a5181f2e13c3d5b29b5548e323970e92cb8f93c68777b7554ee1caa40adb942adef85077b55b8cc661a67912c6f96c5e39697790fce492d63be6de47407bba35dfb982ae6fd5f190f52d8bdde6887da2377543f494dbd05c26a2bfa8c4c5443bc4a8ca9dc401f5b494780df3fec30749d7369b2f69f6bac6e6260164c6719b14bdf8a7cafa6752ae787cca05f6790d6506e9df6a784f6b5e71450e963f6d185a2ed60b49311d4a9b7149807ba2d8c2990c4e92a639755acc73727a6ba474dc047bb57aba272483d2cecc6967af7439b15588f05e978bfac225372aa0c779f32182a982c9be9ff941485300ca1a06ced30131b34db540e8f4bb6923ee89e324e16d2b1fefc602912b19444530cf301a716c50a018f6c318a6c089868d432b7d3364d82d4f9d1f77170dfecbdcea9e371142a0888e00ca869717ba792df4796cdbeada0b9f0b5feb0f4971e3e2bdf068f86dd86dd2394b5047cf590a8078b0453990633e878d9d8296a3cc8605d3a0590cc2a348607704bfe4cec3b084bfb77d65e83bc3fa057e19c14c4b83ab075e0945e5a32dac8c3d125f1698364ed7349fcf8d40fbacfcf123c311bc552ef02d1425f243466b5b58567cd5611d028d22063a6c16577a2ab962e361e019fe0f4908200df1e65bc968e75ae1b3fe0b72ee03a92314369478e469c6508654898ddc45579e42152ae534b936bd78887cb9d1597906f0310232a26f080ab624d08d0b215bea486bcdf7ab6078430de8f891f935eba05e80bda22e0e5496b47ceeb37d9208ec7ce546955ac604693cbbf8fb0fe8e2ffcac5524c2870053bc02174e34928ef5553e1e9fc6660081942d9da2a1bc30e118d0680950efeeb9d173c2d18874310c8242ac5ff44f3d0776e7191e168cb3705131afdbb04ca208a48d5767e2c16b7cf60cbbfdf975455a72a92c426c193e8fe68529c827ece088ca1761dd654d6d744d1348f87cc4d4a65d16519f33569d9cdbde10b6d500cebf5e2541bc6946bdd700746c071e58048096345e06faa5dc519b4bce0c21b175fd7abb8f58580540992037eaee4e443da0c5f1d94f7a637742daa8c464730cf2a803ef32a547c6b66c898966b788c6fe27b8521c8446a0f9d11650393f17b7e2e44ac75976dcbaa8b7490bc18499df0348bc1554367a69e15b16f45a3e58f9b0e586a07d6fec9e3ea13b3177a93341d2c6f5eaeaa58082b951b7442a7ec8d927a4c5f72a90b448d2f5fb1a5fd43adb5be7423a5805995baa7e9f673c7e5775c00ce434a5b2f187a0dd88da11ac8429be2db0475caf0ea070191da00d71fcaa79dc78a0d50b48fb901c06b3a8be8d2c69d619622eecd1b8d673b8358c12c0963f116ecd639b94c412b7c161d580f2c35dbafa56614d343fa531934024c3e8aa6cc938d0f4c3e78ef43694661491ed57b2df80dfa90292550e14a8daf7ba007a85497618d0dc10bcb2ab87316e79f9dada48c9d40814c5bb7d77c1f13c125da6fd1c2948430114c8a1c8ff7c0ccfcd8d65fe143b7e8857074cea0aa2435fdb26441bbe04ae31fadfe3d57c7992bd79ec65887e0e6c1a85843e9da45b64a1d023d28e2932e3cb67a6315dd87413a534c06d588345703a241302d8edf6f482b52014b72f11258feec9da724ce3d0921ab7cc53d8a3b456b18fb79d79de0ed433848d7a2fd79591319da5d5472c4fd3d80d2c0dfa065376c789eca8ec7eccf9ae6be63b59ec43b75102c568b6549570520dadb5f877db7a28483473e9614d95dd94dc023841ce540e9fac9b4e4f3e1e493e04df72651360dd260eeabbbe3e4c8ecde07cf6e2bd0e400fc95b27e1d3748ed520d25fd7b80432be499e7997e8338ac89a286e0b90615b73827dfc3e084a6a52279350875f3db6f11a3d14bd883e81338ad0b9a393d68da7a07d21e580919408c70a0d874418956212be7e30ee15ca7c946977a0b3b3e13be0b8171b02ed78de4b9ae045c72a6c517747be11b33b5d27b4a81fdcbc4cf4dcca4bd4af8b9e61c878d0cc8347aff9c014f176a722298bcbad43045603a0f4e020f2cef1873226164b73651a7d1623eaef5d1971ab08bcffa1f205249717cfaa8fd7c34c42f7d4fa533875a1f1dd130b8164dff2d2fce6120a81ea9e3add01c925bd4e0b1dc1cf8bb29c4994f0dcf48eb8ca4b5bb13ac8b30a7d8057606c5c7d3215ae547cbb78e8a409ef15cf8ec726837180b404a41abdf68fafc3635cd855660b005f28db06d873848edf58c4a0f0b525ce20f1f0f4c71b5064454b36ccbb27be93295f759634130bb052a6262b9bbc495819af810c19524d22de6364c5580da9efdcbad7e0a4b55e4d8fb5797f5eb3b2b9533d508475ea74d32356ebf31e2a66c3bad170c8b315d8e39e55135431c6c4fe280f56b4a5d426d57ab5427fdd95917b1954ac15e1541b4160609925238dd54e23935766089474b658d5e4cc6548c7d13d16efd91a482537856ecb2ad2836ddec7def827f9b18249ab31d096ed7dce48a084edb4a275e335aef4ec5cb9669f9b4cef51564d05e263df26226aaa53fff69b2f9937f4c10473e3ce37e649261e846b5e1b275f240de622dd20918c9f39d6162456a1b863ef078b3d9ba51cc95f7c4df4f67fe2eaabd65d2367645d9c0364fc3f3b3ef9a69db577b6285cdb95e36cc165de4376b109ee6d60f635e4e6e43b2b9e2e663cfbb214dae2a6131ef68741d80035908add2369dde110fd01dcbfe0c19d97a2ac094afc32610ddd1d4b3f245bf962b44393df8c7764e2baf4bee8ba7eb9935f8bbfd1be19834aa4928c13c2592f2f18ba5acbcbf52451c515eba4e051010c35a19374ba7d73423633bcf6d9847864078db26801e3d253a7f52e681d5a5630c090ca8e05814b2ba0abeef4657ada00b951e57a39494fe9dc7dbc2591128f1567a1c06afce0f54a1d59f77d61a193dc98d9e6c6291afb8dd27610e95ac76323158a97a9afe80fe03c12e16f2ca9131a78bc4a5e8d32584f54cada076a8a1fb482327f2430c73a27e61d27d75f2636f7ee496726e525e402958ee14437e98cdec6f770902fbdfc282cb96667983fcfa8dc5cbcab758837bafb7929f6d66ab3171e040f5bf2b2929211a2279ad0e2c2826ecdfc6d9047693dc904cbee6873c18fa6c75f4432229d807e773e07025a0fc5bcb1c8d2b0217e58a2b23c7bf07d211fc3ce08984b817e93a088c8a4f81da19582202676980169766060aa70b1baf531272d66a5f6570726956eca1c801cb11ae694c7aff8bad3cb09464d5a0dca16fff20d6d36eaa9d2651d6a42fa592479e51dfc1676b3d2c5b1af6621c8ba88817ce6e10f1e5b87e6166065d3efb139cf9b2cc70cd144d1c896dda9d13a0fb186c7bcee9f7ffd722ea508bb6a655449db66019814e30366e994c24a1d2e627ecf6efcbf4deb0ab36dca5bcbad75af85f4b43deaf566c2fcee9db4bbe33c8dcc867151404bc426b313dcd7b4d89644cb6122f9f8bfd5b9261a06ffbdb58c97102df17c156bb1e5466fc6096ee838bfde52150657c14db19328c375555b6932908875f2a863edbda2c7916799497e4400b2c19a90f162763c926b957d38b96685b554318b6b22a8f91f4683abafdedcbb2da984bafce31d5b39b22b4457849b49a01096967685b97c05786d956a0fa33ce92faa5cc9293c1efba78af90f335b6a30af86a160d0f437250bf56c6d0b4d22ec98faa94901022deb8e1b8ecde13a076a903be7450262900d6942bcae46a4e9c23019a268d8c94d6c0b22b4e0fb87d35f3317c1f301d408b106feb9c78ec0065b6848d3757706064140306ca5084d02b90a3ec594955ed2dd1aa0a61b1fe5a0d70f2dabaed9067ef27897a1cc3310548ff355692cf09ce34e0014178504b2ce181c3ae34c50e7c9590554faa320124cbd190c86f7f0fbadcb458cdbcce3a8f24954d2bf53d975e56db31a81901fe90717d0d599fce42518deb41dcd08199c290824123de8fb7a1226d84b5f9a1852ae4ac470d40f2f15baebb829595b59ee9b1f6cc26f7936a737d4b83aaa015a8cd44cbcfda2f514aaaab29c2043adf7510d0fb2dfbd2808e25dad857cafdd2ec6426413b6614f4f68095470ecd59b5e0dfb124124f3873dcd366b06af8016ac00cbd9b44d86e943729bb2796575bf4a2ff1b87d3f2e38b6d4a9ca607d208272075173324957e1d10eec2ca1a6144c66321cadd5d13ba6e9771779aac481e02ac17c6893edbd1bac4b3523fb23f207208cfbca818b6a5c30578688005a2145f783822d04cb88ce47044593a4c0f27042b616f0fb03f1fdcaedea3b7ff160185aa02f63aaa51e837a8c99c23567e327d4eb5a2a01d9857fb60a4f1fce61c3499f29ca2a84398dffde31d9d83047338849e6a4b3411c4211b0c23e8e511d84c28dfa670112152") prlimit64(r9, 0xc, 0x0, &(0x7f0000006200)) (async) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r7) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f00000069c0)=@broute={'broute\x00', 0x20, 0x4, 0x740, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20006280], 0x0, &(0x7f0000006240), &(0x7f0000006280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x9, 0xfc, 0x809b, 'veth1\x00', 'ipvlan1\x00', 'veth1_to_batadv\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0xa, 0x4, 0x1c6c, 'syzkaller0\x00', 'gre0\x00', 'sit0\x00', 'dummy0\x00', @multicast, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x11e, 0x16e, 0x1be, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x6}, {0x8}], 0x1, 0x2}}}, @stp={{'stp\x00', 0x0, 0x48}, {{0x6, {0xd, 0x300, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0x0, 0xff, 0x993f41c4427d35b2, 0xff], 0xffffffff, 0x6, 0x7, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, [0x0, 0xff, 0x0, 0xff], 0x4e23, 0x4e22, 0x790, 0x8f, 0x4, 0x200, 0x4, 0x0, 0x1, 0xd}, 0x400}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7f, 'syz1\x00', {0x10000}}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz0\x00', {0x5}}}}}, {0x9, 0x11, 0x6005, 'ip6tnl0\x00', 'wg2\x00', 'macvlan1\x00', '\x00', @empty, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, [0x0, 0xff, 0x80, 0x0, 0xff, 0xff], 0xfe, 0x1be, 0x236, [@limit={{'limit\x00', 0x0, 0x20}, {{0x7, 0x5, 0x1, 0x50fb, 0x5, 0xc}}}, @ip={{'ip\x00', 0x0, 0x20}, {{@broadcast, @rand_addr=0x64010102, 0x0, 0xffffffff, 0x98, 0x6a, 0xa, 0x0, 0x4e22, 0x4e22, 0x4e23, 0x4e21}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x89, 0x35, 0x8, 0x0, 0x0, "8f01ed2edfa1a3892ff31261a688278d2b76f5a59026cebfc962391fb5330afd97524c4e9fedd1b5f3853cded3dffdab8f5eff086fd9a25e8c7c459df6b1dce3"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x0, 0x1, {0x622}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x6, 0x3ff, 0x0, 0x0, 0x0, "598be019c6f228cbf8e4f9b86e59c98fa62353f27626e5adc6498f235fae3bcfe5d7b63bfbbe78e8abea4567d9ef2cccd8c2129c0c410cc4b61165f772d9c68f"}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{0x5, 0x16, 0x88be, 'pim6reg0\x00', 'veth0_to_team\x00', 'veth1\x00', 'syz_tun\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, [0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x1e6, 0x21e, [], [@common=@ERROR={'ERROR\x00', 0x20, {"eac997d5bacbdd8f4ecaa943fcee79f02473285bdc522d6dc67666451b60"}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xffff, 'system_u:object_r:var_log_t:s0\x00'}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffc}}}}]}]}, 0x7b8) openat$cgroup_int(r8, &(0x7f0000006a40)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000006a80), 0x40, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000006ac0)={@remote, 0x0}, &(0x7f0000006b00)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000006b40)=@bloom_filter={0x1e, 0x4, 0xfffffff9, 0x6, 0x4, r8, 0x18a000, '\x00', r11, r8, 0x1, 0x4, 0x5, 0xf, @void, @value, @void, @value}, 0x50) io_uring_enter(r8, 0x3466, 0x74e0, 0x10, &(0x7f0000006bc0)={[0x1]}, 0x8) (async) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x5) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000006c00), 0x2, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40), r7) ioctl$DRM_IOCTL_RES_CTX(r8, 0xc0106426, &(0x7f0000006cc0)={0x6, &(0x7f0000006c80)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r8, 0x40086425, &(0x7f0000006d00)={r12, 0x3}) syz_genetlink_get_family_id$devlink(&(0x7f0000006d40), 0xffffffffffffffff) 1.509005499s ago: executing program 4 (id=409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 1.398669484s ago: executing program 1 (id=410): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f0000000340)="c88ca41443def930559634317d074690ac7552ac3ef6aa3e0ca608c78fc27d83dadf568d5e8a00a001aacadeb12f9be18bc16ddf9cc48e8b387f85033dc25ff8e24318bde51bc03de36524af49b0a50f693ba365cc021a77", 0x58, 0x0) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0xffffffffffffffff) (async) socket$kcm(0x28, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000040000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00fffffffffffffffb00"/28], 0x48) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000008010000000000000000000000cbfc0b9af540340c3f2765b7e4c25d97d724b75a94e0ecec4147cc62d74af08e5ffa322388b31b"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "af9c1d95b59ceb13"}}, 0x48}}, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r6, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/98, 0x62}], 0x1, 0xf48, 0x0) (async) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) (async) add_key$user(&(0x7f0000000540), 0x0, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) 1.359148543s ago: executing program 4 (id=411): waitid(0x258a6cbf2effb0f1, 0x0, 0x0, 0x8, 0x0) getgroups(0x0, &(0x7f0000001080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40008c0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) semget$private(0x0, 0x5, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x40) dup3(r1, r2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) eventfd2(0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) 1.215109178s ago: executing program 0 (id=412): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000010850000006d00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kfree\x00', r3}, 0x10) unshare(0x62040200) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) bind$bt_hci(r2, &(0x7f00000009c0)={0x1f, 0xffff, 0x3}, 0x6) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write(r2, &(0x7f0000000340)="07000000010000", 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "10400b0a96f2a7161fa703d65d4a953271e9fed85dc56dd87c18c4926c130b1c691fb8f234704a6c56e3095aa924516c117c6bef1c0c1eb3eec4d868cbe92300", 0x37}, 0x48, 0xfffffffffffffffa) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, r7}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) add_key(&(0x7f0000000600)='dns_resolver\x00', &(0x7f0000000800)={'syz', 0x2}, &(0x7f0000000840)="49429f8d8bd45425135bedb4f768f62d8a9c7942ea24e883e16ec2962193a9a83a78e731dfc488f37183e308eb08d57aadf6ead3c34eb92e52fe54ac58e3be0ac71e1b83aef0f91b04f0769940b51e78e9220e620e72ec352a8135ad30384ada2e9e5c03bdb97bf5", 0x68, 0xfffffffffffffffd) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000900)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r8, &(0x7f0000000140)={0x0, 0xfffffffffffffef6, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="96ffff26eb047aab9c2ea6ccbf10ff05fb00e7ff"], 0x14}, 0x1, 0x0, 0x0, 0xc0081}, 0x4000000) keyctl$instantiate_iov(0x14, r5, &(0x7f0000000780)=[{&(0x7f0000000400)="ad5399055d02fa74b340f7f00da3f2372a516d37573c0f6bbdeee64d03a7520fb79417e93e17881aeda7919130d925e026fe396303a7fbddf9c901d52db0a07e617a7ebad6c656c39b1366d2f6287df1cabb9171f6b37d78ba5925f00bb2050223846b1f4a54e1636de847990c0b90c66392facc69950204f7ee7613d6ec6c44ce178d777cfc3fbc034da9a52ec2a3da5f9c2a5dfec03da74e0e5445d2aa41442c24a7fc1627a7cd6f36a570626dd2b3289a40b3c5c458", 0xb7}, {&(0x7f00000004c0)="45527847a8e1f2fdd48385c618341789f5cf64b3226e38f24852ece627794b6f53a0799fa87423370b3a4ba17da9d0b2485018f4ecd30a718420d7e8def45e44fdb9b863c8d0f323ef9e075b5c6e94e2dd4b3bf653c2c6388ff0b8b1db2400ac578979b867643846700c17b538a62add86f5055efb02028776b5bb07e1545083a7cb906e7f7393d586b2701c4482f86198f924d42a3b476e5914dce71403", 0x9e}, {&(0x7f0000000280)="17daf465aa605feec4e81ad99d2f9c9809d7ca796050745e786e096adac801d2777138ab6d2c6365e19d54c6a18d417c37ec3f0b1285", 0x36}, {&(0x7f0000000580)="b8de2ba822913122857243b011e2201df919367edf4b3d2a014955c6d70bffea46b77d62aa20", 0x26}, {&(0x7f00000005c0)="9e4078a9fffc5caf77ccc20e303c1ee067c2ca0a1acdd909c137782a91da", 0x1e}, {&(0x7f00000006c0)="5d3a42d4000dc9a042f4e555110633222333602f255e4d570e22695023b350705455c03e4f59c1dc0df9c36e5ec29b3a0f460a31b9b829144f343acfb08834100b087d4447370cc8c0a832aa9cd582b3c6ef2110e1ca7c499772714d180f203a64799470ac3e74847231a11e55a99cc0326cd3f95bb924b16ec8ab8cd78ee174b716d75cc743887ccb887f83ec8785114ba2b9cb1ddcaa361e81f03e542c21c10891e86b61050a00394400a928d1b1d53c53690a5d2ee2", 0xb7}], 0x6, r5) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1905000000fa06333365e6d91dc572b69a0adebc5f99d4bc0bdbec7c51cd78ade6e3f500894063e1bbd7ed98a945e57695856a20d5aa2524126adba043d121f435b435206fcf497a22e130e507ae3341d2c59b23061f2e", @ANYRES32=0x0, @ANYBLOB="0200"/20, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="000000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x30}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r9}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.122739529s ago: executing program 1 (id=413): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r1 = socket$kcm(0xa, 0x3, 0x3a) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000003d00)=ANY=[@ANYBLOB="2170a505b807aaaaaaaaaaaa0806001b001b0608000000bbbbbbbbbbaaaaaaaa47e294370ff81fdcbbbe"], 0x0) sendto$inet6(r2, &(0x7f0000000200)="8b3486c2d9afb819ffa54a", 0xb, 0x8004, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000001080), 0x82000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @remote}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000010c0)={'geneve1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c000000f1ff0204000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000428000001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x4c}}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) msgsnd(0x0, &(0x7f00000000c0)={0x1, "ae42b21e7429ed0a16d400f280b8fda425744a99ec6a8151e3a5a35da677c758f09017382e5875c5dbe94b7e41357105764edcde58c276e4d04faa3e1f279d140ba043874cd2a785402d5bed0da15ac08192edafb77a5673cf2f0d75ba"}, 0x65, 0x800) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f00000000c0)={@val={0x6f01, 0x800}, @val={0x1, 0x3, 0x0, 0x4, 0x3d}, @mpls={[], @ipv4=@tcp={{0x7, 0x4, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@timestamp={0x44, 0x8, 0xce}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x4, 0x0, 0x0, 0x4000, {[@window={0x9, 0x3}, @sack={0x5, 0x0, [0x8d6, 0x61, 0xfffffffc, 0xffff, 0x1ff, 0x0, 0x8, 0xda1c1483, 0x28187510]}]}}, {"c4f6ad54bd"}}}}}, 0x5b) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3001ff00", @ANYRES16=r8, @ANYBLOB="000127bd7000fedbdf250200000008000300030000004000068006000100020000000600010002000000080006001000000008000700", @ANYRES32=r9, @ANYBLOB="060001000200000014000400fe800000000000000000000000000043050005005100000008000300020000002000018008000700", @ANYRES32=r9, @ANYBLOB="14000400ff02000000000000000000000000000108000200040000000400018054000180060001000a000000140004000000000000000000000000000000000014000400fc000000000000000000000000000001060001000a00000003000200090000000800060008000000060001000a0000003c0001800800060012000000140004000000000000000000000000000000000014000400fc02000000000000000000000000000108000300e00000020800020003000000"], 0x130}, 0x1, 0x0, 0x0, 0x20004022}, 0x8800) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 564.130457ms ago: executing program 4 (id=414): r0 = io_uring_setup(0x669, &(0x7f0000000140)={0x0, 0x10, 0x800, 0x0, 0x31b}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(0x0, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff}) socket$inet6(0xa, 0x3, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='\x01') r4 = dup3(r1, r1, 0x80000) r5 = socket$kcm(0x10, 0x2, 0x0) pread64(r4, &(0x7f0000000200)=""/28, 0x1c, 0x5) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000002c0)={0x0, 'batadv0\x00', {0x8}, 0xfffb}) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000804) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={0x0}) dup3(r6, r1, 0x0) eventfd(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=415): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.850919][ T6239] RSP: 002b:00007f72729c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.859348][ T6239] RAX: ffffffffffffffda RBX: 00007f7271d35f80 RCX: 00007f7271b7e719 [ 88.867317][ T6239] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 88.875280][ T6239] RBP: 00007f72729c8090 R08: 0000000000000000 R09: 0000000000000000 [ 88.883241][ T6239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.891201][ T6239] R13: 0000000000000000 R14: 00007f7271d35f80 R15: 00007ffef247a6a8 [ 88.899177][ T6239] [ 89.229486][ T6252] netlink: 'syz.3.84': attribute type 10 has an invalid length. [ 89.284786][ T5876] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 89.526541][ T5876] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 89.536979][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.555708][ T5876] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 89.567529][ T5876] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 89.770401][ T5876] usb 2-1: Manufacturer: syz [ 89.777985][ T5876] usb 2-1: config 0 descriptor?? [ 89.833438][ T6257] netlink: 'syz.2.85': attribute type 10 has an invalid length. [ 89.991649][ T6237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.011398][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.86'. [ 90.011430][ T5876] rc_core: IR keymap rc-hauppauge not found [ 90.031156][ T6237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.055849][ T5876] Registered IR keymap rc-empty [ 90.062069][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 90.062083][ T29] audit: type=1400 audit(1731291207.163:472): avc: denied { write } for pid=6236 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.065126][ T5876] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 90.114819][ T5876] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 90.115049][ T29] audit: type=1400 audit(1731291207.213:473): avc: denied { write } for pid=6263 comm="syz.3.87" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.166422][ T29] audit: type=1400 audit(1731291207.263:474): avc: denied { open } for pid=6263 comm="syz.3.87" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.205142][ T5873] IPVS: starting estimator thread 0... [ 90.749394][ T6267] IPVS: using max 23 ests per chain, 55200 per kthread [ 90.897984][ T29] audit: type=1400 audit(1731291207.623:475): avc: denied { create } for pid=6269 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 91.171340][ T29] audit: type=1400 audit(1731291207.903:476): avc: denied { mounton } for pid=6268 comm="syz.2.89" path="/23" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 91.192979][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.237050][ T29] audit: type=1400 audit(1731291207.903:477): avc: denied { mount } for pid=6268 comm="syz.2.89" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 91.258517][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.299612][ T29] audit: type=1400 audit(1731291207.953:478): avc: denied { read write } for pid=6268 comm="syz.2.89" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 91.323039][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.334839][ T29] audit: type=1400 audit(1731291207.953:479): avc: denied { open } for pid=6268 comm="syz.2.89" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 91.358123][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.366696][ T29] audit: type=1400 audit(1731291207.963:480): avc: denied { ioctl } for pid=6268 comm="syz.2.89" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 91.391478][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.397935][ T29] audit: type=1400 audit(1731291208.393:481): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 91.423113][ T5875] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.426242][ T5876] usb 2-1: USB disconnect, device number 5 [ 91.528761][ T6280] netlink: 'syz.0.91': attribute type 10 has an invalid length. [ 91.872755][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 91.880713][ T5875] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.891973][ T5875] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.902004][ T5875] usb 4-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 91.920105][ T5875] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 91.929179][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.942651][ T5039] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.149010][ T6294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.94'. [ 92.151923][ T5039] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 92.220501][ T5039] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 92.249503][ T5039] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 92.259466][ T5039] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.270446][ T5039] usb 5-1: Product: syz [ 92.276477][ T5039] usb 5-1: Manufacturer: syz [ 92.284231][ T5039] usb 5-1: SerialNumber: syz [ 92.418735][ T5039] usb 5-1: config 0 descriptor?? [ 92.426950][ T6270] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 92.569057][ T6270] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 92.585364][ T5875] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/0003:0458:5011.0001/input/input8 [ 92.794709][ T5875] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/0003:0458:5011.0001/input/input9 [ 92.824604][ T5875] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 92.838301][ T6270] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 92.847288][ T6270] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 93.318783][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.96'. [ 93.340358][ T6310] process 'syz.1.97' launched './file1' with NULL argv: empty string added [ 93.370516][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.96'. [ 93.763627][ C0] kye 0003:0458:5011.0001: usb_submit_urb(ctrl) failed: -1 [ 94.030460][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 94.253274][ T6321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.99'. [ 94.273229][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 94.456466][ T45] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 94.509953][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.538253][ T45] usb 2-1: Product: syz [ 94.543274][ T45] usb 2-1: Manufacturer: syz [ 94.548092][ T45] usb 2-1: SerialNumber: syz [ 94.556093][ T45] usb 2-1: config 0 descriptor?? [ 94.628624][ T25] usb 4-1: USB disconnect, device number 2 [ 94.649277][ T6327] netlink: 'syz.2.100': attribute type 10 has an invalid length. [ 95.054411][ T45] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 95.272446][ T5039] Error reading MAC address [ 95.282158][ T5039] usb 5-1: USB disconnect, device number 3 [ 95.856153][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 95.856168][ T29] audit: type=1400 audit(1731291215.423:490): avc: denied { write } for pid=5182 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.857079][ T45] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 95.870230][ T29] audit: type=1400 audit(1731291215.423:491): avc: denied { remove_name } for pid=5182 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.883938][ T45] visor 2-1:0.0: probe with driver visor failed with error -71 [ 95.891455][ T29] audit: type=1400 audit(1731291215.423:492): avc: denied { rename } for pid=5182 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.931127][ T45] usb 2-1: USB disconnect, device number 6 [ 95.944478][ T29] audit: type=1400 audit(1731291215.423:493): avc: denied { add_name } for pid=5182 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.972473][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.982787][ T29] audit: type=1400 audit(1731291215.423:494): avc: denied { unlink } for pid=5182 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.024164][ T29] audit: type=1400 audit(1731291215.423:495): avc: denied { create } for pid=5182 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.088030][ T6336] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 96.136322][ T29] audit: type=1400 audit(1731291216.233:496): avc: denied { append } for pid=5182 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.184733][ T29] audit: type=1400 audit(1731291216.243:497): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.371164][ T29] audit: type=1400 audit(1731291216.243:498): avc: denied { open } for pid=5822 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.395220][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.651859][ T6351] jfs: Unrecognized mount option "/dev/fb0" or missing value [ 96.999207][ T29] audit: type=1400 audit(1731291216.243:499): avc: denied { ioctl } for pid=5822 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.024711][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.090029][ T6375] netlink: 'syz.1.110': attribute type 10 has an invalid length. [ 98.153445][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.521906][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 99.529827][ T25] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 99.538215][ T25] usb 4-1: config 0 has no interface number 0 [ 99.646747][ T6385] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 99.726269][ T25] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 99.735433][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.743562][ T25] usb 4-1: Product: syz [ 99.748167][ T25] usb 4-1: Manufacturer: syz [ 99.752993][ T25] usb 4-1: SerialNumber: syz [ 99.776708][ T25] usb 4-1: config 0 descriptor?? [ 99.956522][ T25] smsc95xx v2.0.0 [ 100.160272][ T6394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.116'. [ 100.993145][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 100.993161][ T29] audit: type=1400 audit(1731291222.090:589): avc: denied { view } for pid=6370 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 101.229281][ T6407] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.119'. [ 101.238473][ T29] audit: type=1400 audit(1731291222.180:590): avc: denied { execute } for pid=6370 comm="syz.3.111" name="file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.312219][ T29] audit: type=1400 audit(1731291222.180:591): avc: denied { execute_no_trans } for pid=6370 comm="syz.3.111" path="/21/file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.336128][ T29] audit: type=1400 audit(1731291222.180:592): avc: denied { module_request } for pid=6370 comm="syz.3.111" kmod="binfmt-0000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 101.397288][ T29] audit: type=1400 audit(1731291222.460:593): avc: denied { read write } for pid=6408 comm="syz.2.120" name="vbi8" dev="devtmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 101.421263][ T29] audit: type=1400 audit(1731291222.460:594): avc: denied { open } for pid=6408 comm="syz.2.120" path="/dev/vbi8" dev="devtmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 101.471464][ T29] audit: type=1400 audit(1731291222.570:595): avc: denied { create } for pid=6408 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.836505][ T29] audit: type=1400 audit(1731291222.840:596): avc: denied { write } for pid=6370 comm="syz.3.111" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 101.860051][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.248705][ T25] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 102.259882][ T25] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 102.301187][ T25] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 102.335707][ T25] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 102.391243][ T25] usb 4-1: USB disconnect, device number 3 [ 102.396215][ T29] audit: type=1400 audit(1731291223.440:597): avc: denied { setopt } for pid=6388 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.416690][ T29] audit: type=1400 audit(1731291223.450:598): avc: denied { bind } for pid=6388 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.783031][ T6425] netlink: 173 bytes leftover after parsing attributes in process `syz.1.125'. [ 102.801847][ T6425] netlink: 36 bytes leftover after parsing attributes in process `syz.1.125'. [ 102.839875][ T6425] Bluetooth: hci5: Frame reassembly failed (-84) [ 102.879783][ T738] Bluetooth: hci5: Frame reassembly failed (-84) [ 102.940151][ T6329] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.038729][ T5840] Bluetooth: hci0: link tx timeout [ 103.045438][ T5840] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 103.100838][ T6329] usb 3-1: Using ep0 maxpacket: 16 [ 103.112077][ T6329] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=36.00 [ 103.139012][ T6329] usb 3-1: New USB device strings: Mfr=168, Product=81, SerialNumber=40 [ 103.148286][ T6329] usb 3-1: Product: syz [ 103.153056][ T6329] usb 3-1: Manufacturer: syz [ 103.158812][ T6329] usb 3-1: SerialNumber: syz [ 103.192473][ T6431] syzkaller0: entered promiscuous mode [ 103.206877][ T6431] syzkaller0: entered allmulticast mode [ 103.214920][ T6329] usb 3-1: config 0 descriptor?? [ 103.225407][ T6329] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 103.236457][ T6329] usb 3-1: Detected FT4232HA [ 103.445640][ T6329] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 103.466340][ T6329] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 103.491348][ T6329] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 103.524846][ T6329] usb 3-1: USB disconnect, device number 3 [ 103.546032][ T6329] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 103.557214][ T6329] ftdi_sio 3-1:0.0: device disconnected [ 104.642026][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'. [ 104.862361][ T5837] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 105.138053][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 106.350895][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 106.350911][ T29] audit: type=1400 audit(1731291227.440:684): avc: denied { create } for pid=6463 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.376817][ T29] audit: type=1400 audit(1731291227.440:685): avc: denied { setopt } for pid=6463 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.839943][ T29] audit: type=1400 audit(1731291227.930:686): avc: denied { create } for pid=6467 comm="syz.0.137" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 106.872858][ T29] audit: type=1400 audit(1731291227.950:687): avc: denied { read } for pid=6467 comm="syz.0.137" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 106.897786][ T29] audit: type=1400 audit(1731291227.950:688): avc: denied { open } for pid=6467 comm="syz.0.137" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 106.921892][ T29] audit: type=1400 audit(1731291227.970:689): avc: denied { read } for pid=6467 comm="syz.0.137" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 106.945436][ T29] audit: type=1400 audit(1731291227.970:690): avc: denied { open } for pid=6467 comm="syz.0.137" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 107.073998][ T29] audit: type=1400 audit(1731291228.160:691): avc: denied { ioctl } for pid=6467 comm="syz.0.137" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 107.127187][ T29] audit: type=1400 audit(1731291228.200:692): avc: denied { read write } for pid=6467 comm="syz.0.137" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.152400][ T29] audit: type=1400 audit(1731291228.200:693): avc: denied { open } for pid=6467 comm="syz.0.137" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.580571][ T6444] netlink: 'syz.2.131': attribute type 1 has an invalid length. [ 107.659703][ T6470] netlink: 'syz.0.137': attribute type 10 has an invalid length. [ 107.865019][ T6483] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.140'. [ 107.874741][ T6483] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 109.020187][ T6329] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.180153][ T6329] usb 3-1: Using ep0 maxpacket: 8 [ 109.198383][ T6329] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.224527][ T6329] usb 3-1: config 0 has no interface number 0 [ 109.402237][ T6329] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 109.460281][ T6329] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.480045][ T6329] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 109.489580][ T6329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.516429][ T6329] usb 3-1: config 0 descriptor?? [ 109.527530][ T6329] hso 3-1:0.1: Failed to find BULK IN ep [ 109.850264][ T6329] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.020073][ T6329] usb 1-1: Using ep0 maxpacket: 16 [ 110.061266][ T6329] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 110.190825][ T6329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.198856][ T6329] usb 1-1: Product: syz [ 110.203122][ T6329] usb 1-1: Manufacturer: syz [ 110.207724][ T6329] usb 1-1: SerialNumber: syz [ 110.735417][ T6517] netlink: 5300 bytes leftover after parsing attributes in process `syz.3.150'. [ 110.744589][ T6517] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 111.573104][ T6329] usb 1-1: config 0 descriptor?? [ 111.581128][ T6329] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 111.863697][ T6329] usb 1-1: clie_3_5_startup: get config number failed: -71 [ 111.872936][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 111.872951][ T29] audit: type=1400 audit(1731291232.950:718): avc: denied { create } for pid=6501 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.901447][ T6329] visor 1-1:0.0: probe with driver visor failed with error -71 [ 111.903732][ T29] audit: type=1400 audit(1731291232.950:719): avc: denied { write } for pid=6501 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.955946][ T29] audit: type=1400 audit(1731291232.950:720): avc: denied { nlmsg_write } for pid=6501 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.007110][ T6521] ubi0: attaching mtd0 [ 112.011425][ T6521] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 112.036184][ T6329] usb 1-1: USB disconnect, device number 4 [ 112.078010][ T29] audit: type=1400 audit(1731291233.030:721): avc: denied { ioctl } for pid=6518 comm="syz.3.151" path="socket:[10173]" dev="sockfs" ino=10173 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.103535][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.114697][ T29] audit: type=1400 audit(1731291233.030:722): avc: denied { create } for pid=6518 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 112.134541][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.206459][ T29] audit: type=1400 audit(1731291233.030:723): avc: denied { bind } for pid=6518 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 112.421650][ T6525] capability: warning: `syz.1.152' uses deprecated v2 capabilities in a way that may be insecure [ 113.012990][ T29] audit: type=1400 audit(1731291233.540:724): avc: denied { setopt } for pid=6522 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.075880][ T29] audit: type=1400 audit(1731291233.550:725): avc: denied { create } for pid=6522 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 113.123294][ T29] audit: type=1400 audit(1731291233.560:726): avc: denied { bind } for pid=6522 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 113.166523][ T29] audit: type=1400 audit(1731291233.560:727): avc: denied { setopt } for pid=6522 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 113.224895][ T8] usb 3-1: USB disconnect, device number 4 [ 113.360195][ T5876] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.446394][ T6535] FAULT_INJECTION: forcing a failure. [ 113.446394][ T6535] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.512028][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 113.525023][ T5876] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 113.628136][ T6535] CPU: 1 UID: 0 PID: 6535 Comm: syz.2.157 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 113.638769][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 113.648829][ T6535] Call Trace: [ 113.652111][ T6535] [ 113.655045][ T6535] dump_stack_lvl+0x16c/0x1f0 [ 113.659735][ T6535] should_fail_ex+0x497/0x5b0 [ 113.664424][ T6535] _copy_to_user+0x32/0xd0 [ 113.668849][ T6535] simple_read_from_buffer+0xd0/0x160 [ 113.674235][ T6535] proc_fail_nth_read+0x198/0x270 [ 113.679265][ T6535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.684822][ T6535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.690376][ T6535] vfs_read+0x1df/0xbe0 [ 113.694548][ T6535] ? __fget_files+0x23a/0x3f0 [ 113.699234][ T6535] ? fdget_pos+0x24c/0x360 [ 113.703663][ T6535] ? __pfx_lock_release+0x10/0x10 [ 113.708690][ T6535] ? trace_lock_acquire+0x14a/0x1d0 [ 113.713899][ T6535] ? __pfx_vfs_read+0x10/0x10 [ 113.718590][ T6535] ? __pfx___mutex_lock+0x10/0x10 [ 113.723637][ T6535] ? __fget_files+0x244/0x3f0 [ 113.728339][ T6535] ksys_read+0x12f/0x260 [ 113.732597][ T6535] ? __pfx_ksys_read+0x10/0x10 [ 113.737386][ T6535] do_syscall_64+0xcd/0x250 [ 113.741898][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.747805][ T6535] RIP: 0033:0x7f662617d15c [ 113.752221][ T6535] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 113.771837][ T6535] RSP: 002b:00007f6627031030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.780256][ T6535] RAX: ffffffffffffffda RBX: 00007f6626335f80 RCX: 00007f662617d15c [ 113.788229][ T6535] RDX: 000000000000000f RSI: 00007f66270310a0 RDI: 0000000000000004 [ 113.796291][ T6535] RBP: 00007f6627031090 R08: 0000000000000000 R09: 0000000000000000 [ 113.804265][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.812250][ T6535] R13: 0000000000000000 R14: 00007f6626335f80 R15: 00007ffec4ce10d8 [ 113.820249][ T6535] [ 113.868848][ T5876] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 113.877059][ T5876] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 113.886145][ T5876] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 113.897005][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.908713][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 113.920142][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 113.931426][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 114.003830][ T5876] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 114.053327][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.061580][ T5876] usb 4-1: Product: syz [ 114.065830][ T5876] usb 4-1: Manufacturer: syz [ 114.070898][ T5876] usb 4-1: SerialNumber: syz [ 114.077259][ T5876] usb 4-1: config 0 descriptor?? [ 114.100317][ T6527] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 114.432566][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.441868][ T5876] hub 4-1:0.0: bad descriptor, ignoring hub [ 114.450003][ T5876] hub 4-1:0.0: probe with driver hub failed with error -5 [ 114.471381][ T5876] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 114.534530][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.594020][ T5876] usb 4-1: USB disconnect, device number 4 [ 115.620946][ T6556] lo speed is unknown, defaulting to 1000 [ 115.987252][ T6575] Bluetooth: MGMT ver 1.23 [ 116.571068][ T6577] FAULT_INJECTION: forcing a failure. [ 116.571068][ T6577] name failslab, interval 1, probability 0, space 0, times 0 [ 116.584020][ T6577] CPU: 1 UID: 0 PID: 6577 Comm: syz.1.168 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 116.594619][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 116.604679][ T6577] Call Trace: [ 116.607968][ T6577] [ 116.610903][ T6577] dump_stack_lvl+0x16c/0x1f0 [ 116.615595][ T6577] should_fail_ex+0x497/0x5b0 [ 116.620283][ T6577] ? br_multicast_new_group.part.0+0x35c/0x680 [ 116.626457][ T6577] should_failslab+0xc2/0x120 [ 116.631153][ T6577] __kmalloc_cache_noprof+0x6b/0x300 [ 116.636448][ T6577] ? br_multicast_new_port_group+0x133/0xb40 [ 116.642447][ T6577] br_multicast_new_port_group+0x133/0xb40 [ 116.648272][ T6577] br_mdb_add_group+0x8e2/0x1620 [ 116.653229][ T6577] ? __pfx_br_mdb_add_group+0x10/0x10 [ 116.658617][ T6577] ? rcu_is_watching+0x12/0xc0 [ 116.663402][ T6577] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 116.668788][ T6577] ? lock_acquire+0x2f/0xb0 [ 116.673299][ T6577] ? br_mdb_add+0x3ca/0x920 [ 116.677815][ T6577] ? br_mdb_add+0x3d5/0x920 [ 116.682329][ T6577] br_mdb_add+0x3d5/0x920 [ 116.686673][ T6577] ? __pfx_br_mdb_add+0x10/0x10 [ 116.691544][ T6577] ? rcu_is_watching+0x12/0xc0 [ 116.696329][ T6577] ? __nla_parse+0x40/0x60 [ 116.700764][ T6577] ? __pfx_br_mdb_add+0x10/0x10 [ 116.705631][ T6577] rtnl_mdb_add+0x26d/0x530 [ 116.710139][ T6577] ? __pfx_rtnl_mdb_add+0x10/0x10 [ 116.715177][ T6577] ? __pfx_rtnl_mdb_add+0x10/0x10 [ 116.720208][ T6577] rtnetlink_rcv_msg+0x3c7/0xea0 [ 116.725160][ T6577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.730643][ T6577] netlink_rcv_skb+0x16b/0x440 [ 116.735417][ T6577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.740888][ T6577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.746194][ T6577] ? netlink_deliver_tap+0x1ae/0xd90 [ 116.751499][ T6577] netlink_unicast+0x53c/0x7f0 [ 116.756271][ T6577] ? __pfx_netlink_unicast+0x10/0x10 [ 116.761568][ T6577] netlink_sendmsg+0x8b8/0xd70 [ 116.766342][ T6577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.771640][ T6577] ____sys_sendmsg+0xaaf/0xc90 [ 116.776426][ T6577] ? copy_msghdr_from_user+0x10b/0x160 [ 116.781900][ T6577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.787204][ T6577] ? __pfx___lock_acquire+0x10/0x10 [ 116.792422][ T6577] ___sys_sendmsg+0x135/0x1e0 [ 116.797116][ T6577] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.802348][ T6577] ? lock_acquire+0x2f/0xb0 [ 116.806868][ T6577] ? __fget_files+0x40/0x3f0 [ 116.811487][ T6577] ? fdget+0x176/0x210 [ 116.815574][ T6577] __sys_sendmsg+0x117/0x1f0 [ 116.820173][ T6577] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.825295][ T6577] ? __fget_files+0x244/0x3f0 [ 116.830003][ T6577] do_syscall_64+0xcd/0x250 [ 116.834520][ T6577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.840428][ T6577] RIP: 0033:0x7f76fe17e719 [ 116.844849][ T6577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.864464][ T6577] RSP: 002b:00007f76fefa8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.872888][ T6577] RAX: ffffffffffffffda RBX: 00007f76fe335f80 RCX: 00007f76fe17e719 [ 116.880868][ T6577] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 116.888844][ T6577] RBP: 00007f76fefa8090 R08: 0000000000000000 R09: 0000000000000000 [ 116.896823][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.904804][ T6577] R13: 0000000000000000 R14: 00007f76fe335f80 R15: 00007ffcdeaf6968 [ 116.912797][ T6577] [ 116.920671][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.072947][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 117.088155][ T25] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 117.107121][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.237144][ T25] usb 4-1: Product: syz [ 117.241489][ T25] usb 4-1: Manufacturer: syz [ 117.247363][ T25] usb 4-1: SerialNumber: syz [ 117.425050][ T25] usb 4-1: config 0 descriptor?? [ 117.462857][ T25] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 117.469907][ T5978] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.740316][ T5978] usb 5-1: Using ep0 maxpacket: 16 [ 117.781261][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.946753][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.045483][ T25] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 118.055275][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 118.055298][ T29] audit: type=1400 audit(1731291239.564:754): avc: denied { read } for pid=6592 comm="syz.0.174" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 118.064974][ T25] visor 4-1:0.0: probe with driver visor failed with error -71 [ 118.108573][ T5978] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.111551][ T29] audit: type=1400 audit(1731291239.564:755): avc: denied { open } for pid=6592 comm="syz.0.174" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 118.171765][ T29] audit: type=1400 audit(1731291239.574:756): avc: denied { ioctl } for pid=6592 comm="syz.0.174" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 118.195996][ T5978] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 118.226096][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.231287][ T6600] FAULT_INJECTION: forcing a failure. [ 118.231287][ T6600] name failslab, interval 1, probability 0, space 0, times 0 [ 118.248043][ T6600] CPU: 0 UID: 0 PID: 6600 Comm: syz.1.176 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 118.255186][ T25] usb 4-1: USB disconnect, device number 5 [ 118.258637][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 118.270485][ T5978] usb 5-1: config 0 descriptor?? [ 118.274454][ T6600] Call Trace: [ 118.274464][ T6600] [ 118.285611][ T6600] dump_stack_lvl+0x16c/0x1f0 [ 118.290298][ T6600] should_fail_ex+0x497/0x5b0 [ 118.294977][ T6600] ? fs_reclaim_acquire+0xae/0x150 [ 118.300089][ T6600] should_failslab+0xc2/0x120 [ 118.304779][ T6600] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 118.310169][ T6600] ? create_new_namespaces+0x30/0xad0 [ 118.315566][ T6600] create_new_namespaces+0x30/0xad0 [ 118.320789][ T6600] __do_sys_setns+0x22e/0x18b0 [ 118.325552][ T6600] ? __x64_sys_openat+0x175/0x210 [ 118.330581][ T6600] ? __pfx___do_sys_setns+0x10/0x10 [ 118.335774][ T6600] ? ksys_write+0x1ad/0x260 [ 118.340295][ T6600] do_syscall_64+0xcd/0x250 [ 118.344804][ T6600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.350743][ T6600] RIP: 0033:0x7f76fe17ff47 [ 118.355175][ T6600] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.374803][ T6600] RSP: 002b:00007f76fefa7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 118.383235][ T6600] RAX: ffffffffffffffda RBX: 00007f76fe335f80 RCX: 00007f76fe17ff47 [ 118.391198][ T6600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 118.399180][ T6600] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 118.407145][ T6600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.415109][ T6600] R13: 0000000000000001 R14: 00007f76fe335f80 R15: 00007ffcdeaf6968 [ 118.423090][ T6600] [ 118.481604][ T5876] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.506703][ T29] audit: type=1400 audit(1731291240.604:757): avc: denied { block_suspend } for pid=6601 comm="syz.1.177" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.687662][ T5876] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 118.708961][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.717777][ T29] audit: type=1400 audit(1731291240.804:758): avc: denied { create } for pid=6583 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 118.790297][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.805795][ T5876] usb 3-1: config 0 descriptor?? [ 118.832110][ T29] audit: type=1400 audit(1731291240.934:759): avc: denied { ioctl } for pid=6607 comm="syz.1.180" path="/dev/video8" dev="devtmpfs" ino=951 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 118.920251][ T8] usb 1-1: device descriptor read/64, error -71 [ 119.154588][ T29] audit: type=1400 audit(1731291241.134:760): avc: denied { create } for pid=6583 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.184228][ T6598] netlink: 'syz.2.175': attribute type 4 has an invalid length. [ 119.224216][ T29] audit: type=1400 audit(1731291241.134:761): avc: denied { read write } for pid=6583 comm="syz.4.171" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 119.248900][ T29] audit: type=1400 audit(1731291241.144:762): avc: denied { open } for pid=6583 comm="syz.4.171" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 119.248934][ T6616] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 119.271802][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.280274][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.294063][ T29] audit: type=1400 audit(1731291241.154:763): avc: denied { bind } for pid=6583 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.340899][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.413965][ T5876] usb 3-1: Cannot read MAC address [ 119.420090][ T5876] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 119.445203][ T5876] usb 3-1: USB disconnect, device number 5 [ 119.454636][ T8] usb 1-1: device descriptor read/64, error -71 [ 119.502446][ T25] usb 4-1: config 0 has an invalid descriptor of length 238, skipping remainder of the config [ 119.522369][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.550046][ T25] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 119.559251][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.570257][ T8] usb usb1-port1: attempt power cycle [ 119.571105][ T25] usb 4-1: config 0 descriptor?? [ 119.862039][ T6622] netlink: 'syz.1.184': attribute type 10 has an invalid length. [ 120.020947][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 120.233081][ T8] usb 1-1: device descriptor read/8, error -71 [ 120.360391][ T5978] usbhid 5-1:0.0: can't add hid device: -71 [ 120.366432][ T5978] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 120.396837][ T5978] usb 5-1: USB disconnect, device number 4 [ 120.458976][ T25] usb 4-1: string descriptor 0 read error: -71 [ 120.550374][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 120.576880][ T25] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 120.777852][ T25] usb 4-1: USB disconnect, device number 6 [ 120.782031][ T8] usb 1-1: device descriptor read/8, error -71 [ 120.970288][ T8] usb usb1-port1: unable to enumerate USB device [ 121.430193][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 121.450078][ T5873] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 121.581614][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 121.600094][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 121.605410][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 121.629848][ T5873] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 121.645258][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 121.654986][ T5873] usb 4-1: Product: syz [ 121.659434][ T5873] usb 4-1: Manufacturer: syz [ 121.669660][ T5873] usb 4-1: SerialNumber: syz [ 121.674551][ T8] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 121.685180][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.699414][ T8] usb 3-1: Product: syz [ 121.705528][ T5873] usb 4-1: config 0 descriptor?? [ 121.715676][ T8] usb 3-1: Manufacturer: syz [ 121.722164][ T8] usb 3-1: SerialNumber: syz [ 121.759562][ T8] usb 3-1: config 0 descriptor?? [ 121.769924][ T6648] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.785958][ T6648] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.088417][ T6648] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.098800][ T6648] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 123.545231][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 123.545446][ T29] audit: type=1400 audit(1731291246.648:773): avc: denied { read } for pid=6656 comm="syz.0.196" name="usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 123.550067][ T5978] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 123.551975][ T29] audit: type=1400 audit(1731291246.648:774): avc: denied { open } for pid=6656 comm="syz.0.196" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 123.707465][ T29] audit: type=1400 audit(1731291246.758:775): avc: denied { create } for pid=6656 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 123.890229][ T5978] usb 2-1: Using ep0 maxpacket: 32 [ 123.925320][ T5978] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 123.991823][ T5978] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 124.052408][ T6663] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 124.071894][ T5978] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 124.085655][ T29] audit: type=1400 audit(1731291247.188:776): avc: denied { append } for pid=5182 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.087484][ T5978] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 124.136616][ T8] Error reading MAC address [ 124.137185][ T5978] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.150174][ T29] audit: type=1400 audit(1731291247.248:777): avc: denied { read write } for pid=5824 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.158909][ T5978] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 124.185153][ T5978] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 124.193205][ T8] usb 3-1: USB disconnect, device number 6 [ 124.240197][ T29] audit: type=1400 audit(1731291247.248:778): avc: denied { open } for pid=5824 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.268189][ T29] audit: type=1400 audit(1731291247.248:779): avc: denied { ioctl } for pid=5824 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.298978][ T5978] usb 2-1: Product: syz [ 124.320378][ T5978] usb 2-1: Manufacturer: syz [ 124.327934][ T5978] usb 2-1: SerialNumber: syz [ 124.424783][ T5978] usb 2-1: config 0 descriptor?? [ 124.801500][ T6673] ubi0: attaching mtd0 [ 124.820599][ T6673] ubi0: scanning is finished [ 124.825344][ T6673] ubi0: empty MTD device detected [ 124.850116][ T29] audit: type=1400 audit(1731291247.258:780): avc: denied { ioctl } for pid=6657 comm="syz.1.197" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.874824][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.874961][ T5873] usb 4-1: USB disconnect, device number 7 [ 125.059107][ T29] audit: type=1400 audit(1731291247.308:781): avc: denied { read } for pid=6667 comm="syz.0.198" name="usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 125.084115][ T29] audit: type=1400 audit(1731291247.308:782): avc: denied { open } for pid=6667 comm="syz.0.198" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 125.742440][ T6670] bridge0: port 3(vlan2) entered blocking state [ 125.748773][ T6670] bridge0: port 3(vlan2) entered disabled state [ 125.755792][ T6670] vlan2: entered allmulticast mode [ 126.090908][ T6670] vlan2: left allmulticast mode [ 126.110150][ T5978] usb 2-1: can't set config #0, error -71 [ 126.153924][ T5978] usb 2-1: USB disconnect, device number 7 [ 126.204227][ T6673] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 126.788023][ T6693] netlink: 'syz.1.202': attribute type 4 has an invalid length. [ 126.795844][ T6693] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.202'. [ 126.819296][ T6693] netlink: 'syz.1.202': attribute type 4 has an invalid length. [ 126.827094][ T6693] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.202'. [ 127.372005][ T6690] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 127.445259][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 127.691663][ T8] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 127.805387][ T6693] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 127.812008][ T6693] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 127.819682][ T6693] vhci_hcd vhci_hcd.0: Device attached [ 127.838153][ T6699] vhci_hcd: connection closed [ 127.844054][ T12] vhci_hcd: stop threads [ 127.932982][ T8] usb 1-1: Invalid ep0 maxpacket: 64 [ 128.128738][ T12] vhci_hcd: release socket [ 128.134108][ T12] vhci_hcd: disconnect device [ 128.230799][ T5873] vhci_hcd: vhci_device speed not set [ 128.295386][ T8] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 129.190033][ T8] usb 1-1: Invalid ep0 maxpacket: 64 [ 129.199498][ T8] usb usb1-port1: attempt power cycle [ 129.207007][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 129.207021][ T29] audit: type=1400 audit(1731291253.306:840): avc: denied { map_create } for pid=6713 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 129.244722][ T29] audit: type=1400 audit(1731291253.306:841): avc: denied { create } for pid=6713 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.264976][ T29] audit: type=1400 audit(1731291253.316:842): avc: denied { create } for pid=6717 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 129.540705][ T29] audit: type=1400 audit(1731291253.316:843): avc: denied { setopt } for pid=6717 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 129.560138][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.602519][ T6723] ISOFS: Unable to identify CD-ROM format. [ 129.615372][ T29] audit: type=1400 audit(1731291253.336:844): avc: denied { bind } for pid=6713 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.635676][ T29] audit: type=1400 audit(1731291253.346:845): avc: denied { mounton } for pid=6715 comm="syz.4.209" path="/28/file1" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 129.658192][ T29] audit: type=1400 audit(1731291253.346:846): avc: denied { mount } for pid=6715 comm="syz.4.209" name="/" dev="autofs" ino=11727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 129.682427][ T29] audit: type=1400 audit(1731291253.676:847): avc: denied { mounton } for pid=6717 comm="syz.3.211" path="/39/file0" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.705979][ T29] audit: type=1400 audit(1731291253.766:848): avc: denied { read } for pid=6715 comm="syz.4.209" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.728399][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.736304][ T29] audit: type=1400 audit(1731291253.766:849): avc: denied { open } for pid=6715 comm="syz.4.209" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.759194][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.636773][ T8] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 130.684257][ T8] usb 1-1: device descriptor read/8, error -71 [ 131.584108][ T6750] netlink: 'syz.0.218': attribute type 1 has an invalid length. [ 131.591851][ T6750] netlink: 224 bytes leftover after parsing attributes in process `syz.0.218'. [ 132.412510][ T5873] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.570084][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 132.576678][ T5873] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 132.584554][ T5873] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 132.613373][ T5873] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.763075][ T5873] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 132.770612][ T5873] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 132.853862][ T5873] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.803473][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.809785][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.008832][ T6759] netlink: 'syz.0.222': attribute type 10 has an invalid length. [ 134.072880][ T5873] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 134.080696][ T5873] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 134.092242][ T5873] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.441530][ T6764] syz.4.223 (6764) used greatest stack depth: 21648 bytes left [ 134.470256][ T5873] usb 3-1: string descriptor 0 read error: -71 [ 134.477881][ T5873] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 134.490786][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.539768][ T5873] usb 3-1: can't set config #168, error -71 [ 134.574297][ T5873] usb 3-1: USB disconnect, device number 7 [ 134.807361][ T6776] lo speed is unknown, defaulting to 1000 [ 135.237708][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 135.237725][ T29] audit: type=1400 audit(1731291261.330:870): avc: denied { write } for pid=6774 comm="syz.1.227" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 135.279196][ T5829] Bluetooth: Frame is too long (len 65, expected len 10) [ 135.465268][ T6777] mmap: syz.1.227 (6777) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 135.502419][ T29] audit: type=1400 audit(1731291261.450:871): avc: denied { read } for pid=6785 comm="syz.4.229" path="socket:[11050]" dev="sockfs" ino=11050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.526195][ T29] audit: type=1400 audit(1731291261.450:872): avc: denied { write } for pid=6785 comm="syz.4.229" path="socket:[11051]" dev="sockfs" ino=11051 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.577256][ T6788] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 135.720533][ T29] audit: type=1400 audit(1731291261.800:873): avc: denied { create } for pid=6774 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.765336][ T29] audit: type=1400 audit(1731291261.860:874): avc: denied { bind } for pid=6774 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.795620][ T29] audit: type=1400 audit(1731291261.860:875): avc: denied { setopt } for pid=6774 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.890196][ T29] audit: type=1400 audit(1731291261.870:876): avc: denied { name_bind } for pid=6792 comm="syz.0.231" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 135.920235][ T29] audit: type=1400 audit(1731291261.870:877): avc: denied { node_bind } for pid=6792 comm="syz.0.231" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 135.942379][ T29] audit: type=1400 audit(1731291261.880:878): avc: denied { create } for pid=6790 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 135.962447][ T29] audit: type=1400 audit(1731291261.890:879): avc: denied { read write } for pid=6790 comm="syz.3.230" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 136.290229][ T5873] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 136.484353][ T5873] usb 3-1: config 5 has an invalid interface number: 53 but max is 0 [ 136.516614][ T5873] usb 3-1: config 5 has no interface number 0 [ 136.522887][ T5873] usb 3-1: config 5 interface 53 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 136.537155][ T5873] usb 3-1: config 5 interface 53 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 136.551736][ T5873] usb 3-1: config 5 interface 53 has no altsetting 0 [ 136.731214][ T6811] netlink: 'syz.4.235': attribute type 10 has an invalid length. [ 137.244902][ T5873] usb 3-1: New USB device found, idVendor=0403, idProduct=fc70, bcdDevice=76.0a [ 137.254058][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.262339][ T5873] usb 3-1: Product: syz [ 137.266522][ T5873] usb 3-1: Manufacturer: syz [ 137.271363][ T5873] usb 3-1: SerialNumber: syz [ 137.281645][ T6825] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 137.340560][ T6800] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.415925][ T6822] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.955978][ T5873] ftdi_sio 3-1:5.53: FTDI USB Serial Device converter detected [ 137.970914][ T5873] ftdi_sio ttyUSB0: unknown device type: 0x760a [ 138.059156][ T5873] usb 3-1: USB disconnect, device number 8 [ 138.143287][ T5873] ftdi_sio 3-1:5.53: device disconnected [ 139.080306][ T6861] netlink: 'syz.0.248': attribute type 4 has an invalid length. [ 139.088440][ T6861] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.248'. [ 139.198526][ T6861] netlink: 'syz.0.248': attribute type 4 has an invalid length. [ 139.206903][ T6861] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.248'. [ 139.839586][ T6861] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 139.846225][ T6861] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 139.854144][ T6861] vhci_hcd vhci_hcd.0: Device attached [ 139.880113][ T6863] vhci_hcd: connection closed [ 139.891856][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 139.909526][ T738] vhci_hcd: stop threads [ 139.925648][ T738] vhci_hcd: release socket [ 139.974595][ T738] vhci_hcd: disconnect device [ 140.182369][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 140.253844][ T6872] netlink: 'syz.4.250': attribute type 10 has an invalid length. [ 140.507483][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.624757][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.634807][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 140.647998][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 140.663075][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.677668][ T8] usb 2-1: config 0 descriptor?? [ 140.727098][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 140.727110][ T29] audit: type=1400 audit(1731291269.826:896): avc: denied { bind } for pid=6874 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.752968][ T29] audit: type=1400 audit(1731291269.826:897): avc: denied { node_bind } for pid=6874 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 140.796479][ T6878] fuse: Bad value for 'fd' [ 141.557255][ T8] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 141.569818][ T8] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 141.581639][ T8] microsoft 0003:045E:07DA.0002: no inputs found [ 141.587994][ T8] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 141.622793][ T5873] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 141.656527][ T6889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.673713][ T6889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.759111][ T29] audit: type=1400 audit(1731291270.856:898): avc: denied { create } for pid=6890 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.795557][ T29] audit: type=1400 audit(1731291270.886:899): avc: denied { mount } for pid=6850 comm="syz.1.245" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 141.901363][ T5873] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 141.938563][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.082527][ T6901] fuse: Unknown parameter '¤d' [ 142.900039][ T5873] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 142.909113][ T5873] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 142.917610][ T5873] usb 4-1: Manufacturer: syz [ 142.991765][ T5873] usb 4-1: config 0 descriptor?? [ 143.799614][ T5873] usb 4-1: can't set config #0, error -71 [ 143.849872][ T5873] usb 4-1: USB disconnect, device number 8 [ 143.951059][ T29] audit: type=1400 audit(1731291273.016:900): avc: denied { ioctl } for pid=6906 comm="syz.4.262" path="socket:[12115]" dev="sockfs" ino=12115 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.063789][ T5978] usb 2-1: USB disconnect, device number 8 [ 144.072250][ T29] audit: type=1400 audit(1731291273.176:901): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 144.189167][ T29] audit: type=1400 audit(1731291273.286:902): avc: denied { write } for pid=6920 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.288126][ T6924] netlink: 5312 bytes leftover after parsing attributes in process `syz.3.265'. [ 144.297339][ T6924] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 144.563045][ T29] audit: type=1400 audit(1731291273.656:903): avc: denied { create } for pid=6914 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 144.583387][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.057783][ T29] audit: type=1400 audit(1731291274.156:904): avc: denied { write } for pid=6925 comm="syz.4.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.134184][ T29] audit: type=1400 audit(1731291274.216:905): avc: denied { mount } for pid=6932 comm="syz.0.271" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 145.160388][ T5978] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 145.238211][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.270773][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.403823][ T6944] FAULT_INJECTION: forcing a failure. [ 145.403823][ T6944] name failslab, interval 1, probability 0, space 0, times 0 [ 145.417028][ T6944] CPU: 1 UID: 0 PID: 6944 Comm: syz.0.277 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 145.427640][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 145.437708][ T6944] Call Trace: [ 145.440996][ T6944] [ 145.443934][ T6944] dump_stack_lvl+0x16c/0x1f0 [ 145.448629][ T6944] should_fail_ex+0x497/0x5b0 [ 145.453322][ T6944] ? fs_reclaim_acquire+0xae/0x150 [ 145.458459][ T6944] should_failslab+0xc2/0x120 [ 145.463149][ T6944] kmem_cache_alloc_node_noprof+0x71/0x310 [ 145.468952][ T6944] ? __alloc_skb+0x2b1/0x380 [ 145.473542][ T6944] __alloc_skb+0x2b1/0x380 [ 145.477957][ T6944] ? __pfx___alloc_skb+0x10/0x10 [ 145.482893][ T6944] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 145.488878][ T6944] netlink_alloc_large_skb+0x69/0x130 [ 145.494248][ T6944] netlink_sendmsg+0x689/0xd70 [ 145.499007][ T6944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.504292][ T6944] ____sys_sendmsg+0xaaf/0xc90 [ 145.509054][ T6944] ? copy_msghdr_from_user+0x10b/0x160 [ 145.514507][ T6944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.519797][ T6944] ? __pfx___lock_acquire+0x10/0x10 [ 145.524991][ T6944] ___sys_sendmsg+0x135/0x1e0 [ 145.529664][ T6944] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.534871][ T6944] ? lock_acquire+0x2f/0xb0 [ 145.539367][ T6944] ? __fget_files+0x40/0x3f0 [ 145.543964][ T6944] ? fdget+0x176/0x210 [ 145.548032][ T6944] __sys_sendmsg+0x117/0x1f0 [ 145.552618][ T6944] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.557721][ T6944] ? __fget_files+0x244/0x3f0 [ 145.562414][ T6944] do_syscall_64+0xcd/0x250 [ 145.566909][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.572801][ T6944] RIP: 0033:0x7f7271b7e719 [ 145.577208][ T6944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.597093][ T6944] RSP: 002b:00007f72729c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.605504][ T6944] RAX: ffffffffffffffda RBX: 00007f7271d35f80 RCX: 00007f7271b7e719 [ 145.613471][ T6944] RDX: 0000000000000040 RSI: 0000000020000180 RDI: 0000000000000003 [ 145.621432][ T6944] RBP: 00007f72729c8090 R08: 0000000000000000 R09: 0000000000000000 [ 145.629395][ T6944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.637357][ T6944] R13: 0000000000000000 R14: 00007f7271d35f80 R15: 00007ffef247a6a8 [ 145.645334][ T6944] [ 145.768281][ T5978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.771431][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 145.771445][ T29] audit: type=1400 audit(1731291274.866:908): avc: denied { connect } for pid=6947 comm="syz.4.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.920329][ T6329] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 145.930303][ T5978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.020715][ T5978] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 146.043783][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.100639][ T5978] usb 2-1: config 0 descriptor?? [ 146.157601][ T6329] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 146.215004][ T6329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 146.347633][ T6329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 255, setting to 64 [ 146.402534][ T6329] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 146.429668][ T6329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.478732][ T6329] usb 3-1: Product: syz [ 146.491495][ T6329] usb 3-1: Manufacturer: syz [ 146.508709][ T6329] usb 3-1: SerialNumber: syz [ 146.524086][ T6329] usb 3-1: config 0 descriptor?? [ 146.532111][ T6938] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 146.580606][ T5978] usbhid 2-1:0.0: can't add hid device: -71 [ 146.590931][ T5978] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 146.656479][ T5978] usb 2-1: USB disconnect, device number 9 [ 146.690507][ T6329] rc_core: IR keymap rc-streamzap not found [ 146.698474][ T6329] Registered IR keymap rc-empty [ 146.711001][ T6329] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 146.722660][ T29] audit: type=1400 audit(1731291276.814:909): avc: denied { setopt } for pid=6963 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 146.769300][ T6329] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 146.788551][ T29] audit: type=1400 audit(1731291276.884:910): avc: denied { read } for pid=5185 comm="acpid" name="event4" dev="devtmpfs" ino=2859 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.821408][ T6329] usb 3-1: USB disconnect, device number 9 [ 146.829400][ T29] audit: type=1400 audit(1731291276.884:911): avc: denied { open } for pid=5185 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2859 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.852872][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.946355][ T29] audit: type=1400 audit(1731291276.884:912): avc: denied { ioctl } for pid=5185 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2859 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.357043][ T6963] [U]  [ 148.385350][ T29] audit: type=1400 audit(1731291278.474:913): avc: denied { write } for pid=6989 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 148.414099][ T29] audit: type=1400 audit(1731291278.474:914): avc: denied { nlmsg_read } for pid=6989 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 148.434503][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.509094][ T29] audit: type=1400 audit(1731291278.474:915): avc: denied { read } for pid=6989 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 148.541091][ T29] audit: type=1400 audit(1731291278.634:916): avc: denied { read } for pid=5494 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 148.590330][ T6329] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 148.803184][ T6329] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.936253][ T6329] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 149.000194][ T29] audit: type=1400 audit(1731291280.096:917): avc: denied { search } for pid=5494 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.040349][ T6329] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.079923][ T6329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.115475][ T6329] usb 2-1: config 0 descriptor?? [ 150.135921][ T6329] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 150.190790][ T7011] nbd: must specify a size in bytes for the device [ 151.889336][ T8] usb 2-1: USB disconnect, device number 10 [ 152.494710][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 152.494727][ T29] audit: type=1400 audit(1731291283.086:924): avc: denied { write } for pid=7009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.556200][ T29] audit: type=1400 audit(1731291283.086:925): avc: denied { add_name } for pid=7009 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.579394][ T29] audit: type=1400 audit(1731291283.086:926): avc: denied { create } for pid=7009 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.616271][ T29] audit: type=1400 audit(1731291283.096:927): avc: denied { write } for pid=7009 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfptm0.link" dev="tmpfs" ino=3020 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.643569][ T29] audit: type=1400 audit(1731291283.096:928): avc: denied { append } for pid=7009 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=3020 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.239153][ T29] audit: type=1400 audit(1731291284.326:929): avc: denied { remove_name } for pid=7045 comm="rm" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=3020 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.312759][ T29] audit: type=1400 audit(1731291284.366:930): avc: denied { unlink } for pid=7045 comm="rm" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=3020 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 153.428352][ T7058] ISOFS: Unable to identify CD-ROM format. [ 154.396916][ T29] audit: type=1400 audit(1731291285.496:931): avc: denied { read write } for pid=7051 comm="syz.4.305" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 154.531390][ T7075] jfs: Unrecognized mount option "/dev/fb0" or missing value [ 155.149201][ T29] audit: type=1400 audit(1731291285.496:932): avc: denied { open } for pid=7051 comm="syz.4.305" path="/52/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 155.265932][ T29] audit: type=1400 audit(1731291285.526:933): avc: denied { read append } for pid=7069 comm="syz.0.309" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 156.271986][ T7093] FAULT_INJECTION: forcing a failure. [ 156.271986][ T7093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.285153][ T7093] CPU: 0 UID: 0 PID: 7093 Comm: syz.1.314 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 156.295730][ T7093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 156.305775][ T7093] Call Trace: [ 156.309042][ T7093] [ 156.311960][ T7093] dump_stack_lvl+0x16c/0x1f0 [ 156.316624][ T7093] should_fail_ex+0x497/0x5b0 [ 156.321291][ T7093] _copy_to_user+0x32/0xd0 [ 156.325694][ T7093] bpf_test_finish.isra.0+0x4a1/0x680 [ 156.331091][ T7093] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 156.337017][ T7093] ? __asan_memset+0x23/0x50 [ 156.341599][ T7093] bpf_prog_test_run_skb+0x1344/0x20f0 [ 156.347073][ T7093] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 156.352879][ T7093] ? fput+0x30/0x390 [ 156.356762][ T7093] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 156.362560][ T7093] __sys_bpf+0xfc6/0x49a0 [ 156.366885][ T7093] ? ksys_write+0x21e/0x260 [ 156.371384][ T7093] ? reacquire_held_locks+0x470/0x4c0 [ 156.376742][ T7093] ? __pfx___sys_bpf+0x10/0x10 [ 156.381506][ T7093] ? vfs_write+0x306/0x1150 [ 156.386011][ T7093] ? __mutex_unlock_slowpath+0x164/0x650 [ 156.391655][ T7093] ? fput+0x30/0x390 [ 156.395570][ T7093] ? ksys_write+0x1ad/0x260 [ 156.400088][ T7093] ? __pfx_ksys_write+0x10/0x10 [ 156.404958][ T7093] __x64_sys_bpf+0x78/0xc0 [ 156.409387][ T7093] ? lockdep_hardirqs_on+0x7c/0x110 [ 156.414605][ T7093] do_syscall_64+0xcd/0x250 [ 156.419126][ T7093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.425050][ T7093] RIP: 0033:0x7f76fe17e719 [ 156.429476][ T7093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.449098][ T7093] RSP: 002b:00007f76fefa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.457534][ T7093] RAX: ffffffffffffffda RBX: 00007f76fe335f80 RCX: 00007f76fe17e719 [ 156.465498][ T7093] RDX: 0000000000000050 RSI: 0000000020000740 RDI: 000000000000000a [ 156.473457][ T7093] RBP: 00007f76fefa8090 R08: 0000000000000000 R09: 0000000000000000 [ 156.481421][ T7093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.489394][ T7093] R13: 0000000000000000 R14: 00007f76fe335f80 R15: 00007ffcdeaf6968 [ 156.497382][ T7093] [ 156.562757][ T7096] netlink: 5300 bytes leftover after parsing attributes in process `syz.0.312'. [ 156.572310][ T7096] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 157.231362][ T7100] trusted_key: encrypted_key: keylen parameter is missing [ 157.722251][ T7098] netlink: 'syz.1.315': attribute type 10 has an invalid length. [ 157.741727][ T7098] bridge0: port 3(netdevsim0) entered blocking state [ 157.751872][ T7098] bridge0: port 3(netdevsim0) entered disabled state [ 157.803998][ T7098] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 157.831165][ T7098] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 157.840629][ T7098] bridge0: port 3(netdevsim0) entered blocking state [ 157.848543][ T7098] bridge0: port 3(netdevsim0) entered forwarding state [ 157.961502][ T7103] netlink: 'syz.0.316': attribute type 10 has an invalid length. [ 158.088531][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 158.088548][ T29] audit: type=1400 audit(1731291290.152:938): avc: denied { open } for pid=7114 comm="syz.2.319" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 158.118713][ T29] audit: type=1400 audit(1731291290.162:939): avc: denied { ioctl } for pid=7114 comm="syz.2.319" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 158.326274][ T7117] netlink: 'syz.4.317': attribute type 10 has an invalid length. [ 158.443807][ T5873] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 158.720180][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 158.922977][ T29] audit: type=1400 audit(1731291291.889:940): avc: denied { unlink } for pid=7118 comm="syz.0.320" name="#1" dev="tmpfs" ino=415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 159.137795][ T5873] usb 3-1: unable to get BOS descriptor or descriptor too short [ 159.162123][ T29] audit: type=1400 audit(1731291291.909:941): avc: denied { mount } for pid=7118 comm="syz.0.320" name="/" dev="overlay" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 159.186831][ T5873] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 159.216199][ T5873] usb 3-1: can't read configurations, error -71 [ 159.487703][ T29] audit: type=1400 audit(1731291292.579:942): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 159.768031][ T29] audit: type=1400 audit(1731291292.679:943): avc: denied { map } for pid=7126 comm="syz.4.321" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.971005][ T5829] Bluetooth: hci2: link tx timeout [ 159.977187][ T5829] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 160.224922][ T29] audit: type=1400 audit(1731291292.679:944): avc: denied { execute } for pid=7126 comm="syz.4.321" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 161.293550][ T7141] netlink: 'syz.4.324': attribute type 10 has an invalid length. [ 161.530057][ T29] audit: type=1400 audit(1731291295.528:945): avc: denied { read } for pid=7148 comm="syz.0.325" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 161.673236][ T29] audit: type=1400 audit(1731291295.528:946): avc: denied { open } for pid=7148 comm="syz.0.325" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 161.758765][ T7159] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.326'. [ 161.768759][ T7159] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 162.074137][ T6329] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 162.220277][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 162.903222][ T6329] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 162.918491][ T7171] netlink: 'syz.2.331': attribute type 10 has an invalid length. [ 162.932384][ T6329] usb 5-1: config 0 has no interface number 1 [ 162.962344][ T6329] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 163.007613][ T6329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.234061][ T6329] usb 5-1: config 0 descriptor?? [ 163.270290][ T6329] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.314051][ T6329] usb 5-1: MIDIStreaming interface descriptor not found [ 163.460662][ T6329] gspca_main: spca561-2.14.0 probing abcd:cdee [ 163.781682][ T29] audit: type=1400 audit(1731291298.842:947): avc: denied { sys_module } for pid=7176 comm="syz.1.334" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 164.026517][ T29] audit: type=1400 audit(1731291298.842:948): avc: denied { sys_module } for pid=7176 comm="syz.1.334" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 164.068335][ T6329] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 164.202047][ T6329] usb 5-1: USB disconnect, device number 5 [ 164.589067][ T29] audit: type=1400 audit(1731291299.492:949): avc: denied { read } for pid=7200 comm="syz.2.337" name="sg0" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 164.613507][ T29] audit: type=1400 audit(1731291299.492:950): avc: denied { open } for pid=7200 comm="syz.2.337" path="/dev/sg0" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 164.637263][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.645341][ T29] audit: type=1400 audit(1731291299.502:951): avc: denied { ioctl } for pid=7200 comm="syz.2.337" path="/dev/sg0" dev="devtmpfs" ino=709 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 164.717779][ T29] audit: type=1400 audit(1731291299.512:952): avc: denied { create } for pid=7200 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 164.738690][ T29] audit: type=1400 audit(1731291299.782:953): avc: denied { read } for pid=7200 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 164.762789][ T7202] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 164.957876][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.994798][ T7215] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.338'. [ 165.008240][ T7215] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 165.309913][ T7222] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.340'. [ 165.894077][ T29] audit: type=1400 audit(1731291300.992:954): avc: denied { create } for pid=7232 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 165.969642][ T29] audit: type=1400 audit(1731291301.062:955): avc: denied { write } for pid=7232 comm="syz.3.343" path="socket:[13915]" dev="sockfs" ino=13915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 166.141248][ T7244] FAULT_INJECTION: forcing a failure. [ 166.141248][ T7244] name failslab, interval 1, probability 0, space 0, times 0 [ 166.200122][ T7244] CPU: 0 UID: 0 PID: 7244 Comm: syz.2.347 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 166.210724][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 166.220768][ T7244] Call Trace: [ 166.224025][ T7244] [ 166.226936][ T7244] dump_stack_lvl+0x16c/0x1f0 [ 166.231596][ T7244] should_fail_ex+0x497/0x5b0 [ 166.236261][ T7244] ? fs_reclaim_acquire+0xae/0x150 [ 166.241358][ T7244] should_failslab+0xc2/0x120 [ 166.246021][ T7244] __kmalloc_noprof+0xcb/0x400 [ 166.250767][ T7244] nf_tables_newrule+0xbff/0x2890 [ 166.255777][ T7244] ? __pfx_nf_tables_newrule+0x10/0x10 [ 166.261221][ T7244] ? net_generic+0xea/0x2a0 [ 166.265711][ T7244] ? __pfx_lock_release+0x10/0x10 [ 166.270711][ T7244] ? trace_lock_acquire+0x14a/0x1d0 [ 166.275892][ T7244] ? __nla_parse+0x40/0x60 [ 166.280295][ T7244] nfnetlink_rcv_batch+0x1a28/0x24e0 [ 166.285569][ T7244] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 166.291191][ T7244] ? avc_has_perm_noaudit+0x119/0x3a0 [ 166.296551][ T7244] ? avc_has_perm_noaudit+0x143/0x3a0 [ 166.301920][ T7244] ? __nla_parse+0x40/0x60 [ 166.306323][ T7244] nfnetlink_rcv+0x3c3/0x430 [ 166.310890][ T7244] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 166.315997][ T7244] ? selinux_nlmsg_lookup+0x265/0x4b0 [ 166.321353][ T7244] netlink_unicast+0x53c/0x7f0 [ 166.326113][ T7244] ? __pfx_netlink_unicast+0x10/0x10 [ 166.331385][ T7244] netlink_sendmsg+0x8b8/0xd70 [ 166.336146][ T7244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.341434][ T7244] ____sys_sendmsg+0xaaf/0xc90 [ 166.346183][ T7244] ? copy_msghdr_from_user+0x10b/0x160 [ 166.351622][ T7244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.356892][ T7244] ? __pfx___lock_acquire+0x10/0x10 [ 166.362072][ T7244] ___sys_sendmsg+0x135/0x1e0 [ 166.366733][ T7244] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.371917][ T7244] ? lock_acquire+0x2f/0xb0 [ 166.376397][ T7244] ? __fget_files+0x40/0x3f0 [ 166.380978][ T7244] ? fdget+0x176/0x210 [ 166.385032][ T7244] __sys_sendmsg+0x117/0x1f0 [ 166.389604][ T7244] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.394692][ T7244] ? __fget_files+0x244/0x3f0 [ 166.399450][ T7244] do_syscall_64+0xcd/0x250 [ 166.403934][ T7244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.409828][ T7244] RIP: 0033:0x7f662617e719 [ 166.414222][ T7244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.433817][ T7244] RSP: 002b:00007f6627031038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.442219][ T7244] RAX: ffffffffffffffda RBX: 00007f6626335f80 RCX: 00007f662617e719 [ 166.450172][ T7244] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 166.458141][ T7244] RBP: 00007f6627031090 R08: 0000000000000000 R09: 0000000000000000 [ 166.466096][ T7244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.474046][ T7244] R13: 0000000000000000 R14: 00007f6626335f80 R15: 00007ffec4ce10d8 [ 166.482003][ T7244] [ 166.577541][ T29] audit: type=1400 audit(1731291301.672:956): avc: denied { name_bind } for pid=7228 comm="syz.4.342" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 166.695052][ T7255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.351'. [ 166.716658][ T7255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'. [ 166.727962][ T7255] FAULT_INJECTION: forcing a failure. [ 166.727962][ T7255] name failslab, interval 1, probability 0, space 0, times 0 [ 166.746480][ T7255] CPU: 1 UID: 0 PID: 7255 Comm: syz.2.351 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 166.757116][ T7255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 166.767193][ T7255] Call Trace: [ 166.770484][ T7255] [ 166.773420][ T7255] dump_stack_lvl+0x16c/0x1f0 [ 166.778145][ T7255] should_fail_ex+0x497/0x5b0 [ 166.782842][ T7255] ? fs_reclaim_acquire+0xae/0x150 [ 166.787973][ T7255] should_failslab+0xc2/0x120 [ 166.792673][ T7255] __kmalloc_cache_noprof+0x6b/0x300 [ 166.797984][ T7255] ? netlbl_cipsov4_add+0x3b6/0x2450 [ 166.800339][ T5828] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 166.803286][ T7255] netlbl_cipsov4_add+0x3b6/0x2450 [ 166.815945][ T7255] ? __nla_parse+0x40/0x60 [ 166.820394][ T7255] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 166.825962][ T7255] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 166.833352][ T7255] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 166.840758][ T7255] genl_family_rcv_msg_doit+0x202/0x2f0 [ 166.846326][ T7255] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 166.852420][ T7255] ? bpf_lsm_capable+0x9/0x10 [ 166.857120][ T7255] ? security_capable+0x7e/0x260 [ 166.862089][ T7255] genl_rcv_msg+0x565/0x800 [ 166.866634][ T7255] ? __pfx_genl_rcv_msg+0x10/0x10 [ 166.871684][ T7255] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 166.877254][ T7255] ? __pfx___lock_acquire+0x10/0x10 [ 166.882472][ T7255] netlink_rcv_skb+0x16b/0x440 [ 166.887259][ T7255] ? __pfx_genl_rcv_msg+0x10/0x10 [ 166.892321][ T7255] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 166.897655][ T7255] ? down_read+0xc9/0x330 [ 166.902010][ T7255] ? __pfx_down_read+0x10/0x10 [ 166.906791][ T7255] ? netlink_deliver_tap+0x1ae/0xd90 [ 166.912127][ T7255] ? selinux_nlmsg_lookup+0x265/0x4b0 [ 166.917524][ T7255] genl_rcv+0x28/0x40 [ 166.921517][ T7255] netlink_unicast+0x53c/0x7f0 [ 166.926298][ T7255] ? __pfx_netlink_unicast+0x10/0x10 [ 166.931609][ T7255] netlink_sendmsg+0x8b8/0xd70 [ 166.936391][ T7255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.941696][ T7255] ____sys_sendmsg+0xaaf/0xc90 [ 166.946480][ T7255] ? copy_msghdr_from_user+0x10b/0x160 [ 166.951954][ T7255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.957267][ T7255] ? __pfx___lock_acquire+0x10/0x10 [ 166.962483][ T7255] ___sys_sendmsg+0x135/0x1e0 [ 166.967176][ T7255] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.972405][ T7255] ? lock_acquire+0x2f/0xb0 [ 166.976925][ T7255] ? __fget_files+0x40/0x3f0 [ 166.981553][ T7255] ? fdget+0x176/0x210 [ 166.985641][ T7255] __sys_sendmsg+0x117/0x1f0 [ 166.990249][ T7255] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.995376][ T7255] ? __fget_files+0x244/0x3f0 [ 167.000102][ T7255] do_syscall_64+0xcd/0x250 [ 167.004612][ T7255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.010504][ T7255] RIP: 0033:0x7f662617e719 [ 167.014907][ T7255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.034507][ T7255] RSP: 002b:00007f6627031038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.042918][ T7255] RAX: ffffffffffffffda RBX: 00007f6626335f80 RCX: 00007f662617e719 [ 167.050198][ T5873] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 167.050881][ T7255] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 167.064798][ T5828] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00 [ 167.066263][ T7255] RBP: 00007f6627031090 R08: 0000000000000000 R09: 0000000000000000 [ 167.076540][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.083214][ T7255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.083230][ T7255] R13: 0000000000000000 R14: 00007f6626335f80 R15: 00007ffec4ce10d8 [ 167.083257][ T7255] [ 167.083293][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.121886][ T5828] usb 2-1: Product: syz [ 167.150097][ T5828] usb 2-1: Manufacturer: syz [ 167.154741][ T5828] usb 2-1: SerialNumber: syz [ 167.174278][ T5828] usb 2-1: config 0 descriptor?? [ 167.182099][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 167.190614][ T5828] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 167.199140][ T5828] usb 2-1: Detected FT232HP [ 167.205161][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 167.215368][ T5873] usb 4-1: New USB device found, idVendor=0421, idProduct=9a40, bcdDevice=65.5d [ 167.224535][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.232650][ T5873] usb 4-1: Product: syz [ 167.237071][ T5873] usb 4-1: Manufacturer: syz [ 167.242137][ T5873] usb 4-1: SerialNumber: syz [ 167.251828][ T5873] usb 4-1: config 0 descriptor?? [ 167.265702][ T5873] cdc_phonet 4-1:0.0: probe with driver cdc_phonet failed with error -22 [ 167.363332][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.710612][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.716257][ T5874] usb 4-1: USB disconnect, device number 9 [ 167.725191][ T9] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 167.742857][ T7248] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 167.750113][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.778572][ T9] usb 5-1: config 0 descriptor?? [ 168.106674][ T7273] kvm: kvm [7269]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xfa50 [ 168.116864][ T7273] kvm: kvm [7269]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0xfa51 [ 168.132090][ T7273] kvm: kvm [7269]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xff05 [ 168.155133][ T7273] kvm: kvm [7269]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0xff06 [ 168.243345][ T9] pantherlord 0003:0F30:0111.0003: item fetching failed at offset 6/7 [ 168.252234][ T9] pantherlord 0003:0F30:0111.0003: parse failed [ 168.259227][ T9] pantherlord 0003:0F30:0111.0003: probe with driver pantherlord failed with error -22 [ 168.388284][ T7278] netlink: 'syz.2.359': attribute type 4 has an invalid length. [ 168.396228][ T7278] netlink: 'syz.2.359': attribute type 4 has an invalid length. [ 168.404031][ T7278] netlink: 126012 bytes leftover after parsing attributes in process `syz.2.359'. [ 168.673791][ T7278] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 168.680434][ T7278] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 168.688418][ T7278] vhci_hcd vhci_hcd.0: Device attached [ 168.776472][ T7258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.806431][ T7258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.828602][ T9] usb 5-1: USB disconnect, device number 6 [ 168.838998][ T5828] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 168.847129][ T5828] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 168.871546][ T7279] vhci_hcd: connection closed [ 168.875370][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 168.875387][ T29] audit: type=1400 audit(1731291303.952:1011): avc: denied { connect } for pid=7282 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 168.883813][ T5828] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 168.886723][ T58] vhci_hcd: stop threads [ 168.915159][ T5828] usb 2-1: USB disconnect, device number 11 [ 168.931726][ T8] vhci_hcd: vhci_device speed not set [ 168.937453][ T58] vhci_hcd: release socket [ 168.949548][ T5828] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 168.951536][ T58] vhci_hcd: disconnect device [ 168.959463][ T5828] ftdi_sio 2-1:0.0: device disconnected [ 169.000095][ T8] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 169.202086][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'. [ 169.213259][ T7288] jfs: Unrecognized mount option "/dev/fb0" or missing value [ 169.220438][ T29] audit: type=1400 audit(1731291304.302:1012): avc: denied { nlmsg_write } for pid=7289 comm="syz.0.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 169.242587][ T29] audit: type=1400 audit(1731291304.322:1013): avc: denied { create } for pid=7289 comm="syz.0.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 169.262397][ T29] audit: type=1400 audit(1731291304.322:1014): avc: denied { bind } for pid=7289 comm="syz.0.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 169.281952][ T29] audit: type=1400 audit(1731291304.322:1015): avc: denied { name_bind } for pid=7289 comm="syz.0.363" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 169.303918][ T29] audit: type=1400 audit(1731291304.322:1016): avc: denied { node_bind } for pid=7289 comm="syz.0.363" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 169.419841][ T7299] FAULT_INJECTION: forcing a failure. [ 169.419841][ T7299] name failslab, interval 1, probability 0, space 0, times 0 [ 169.459358][ T7299] CPU: 0 UID: 0 PID: 7299 Comm: syz.0.365 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 169.469994][ T7299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 169.480058][ T7299] Call Trace: [ 169.483336][ T7299] [ 169.486259][ T7299] dump_stack_lvl+0x16c/0x1f0 [ 169.490936][ T7299] should_fail_ex+0x497/0x5b0 [ 169.495604][ T7299] ? fs_reclaim_acquire+0xae/0x150 [ 169.500707][ T7299] should_failslab+0xc2/0x120 [ 169.505379][ T7299] kmem_cache_alloc_node_noprof+0x71/0x310 [ 169.511188][ T7299] ? __alloc_skb+0x2b1/0x380 [ 169.515777][ T7299] __alloc_skb+0x2b1/0x380 [ 169.520188][ T7299] ? __pfx___alloc_skb+0x10/0x10 [ 169.525119][ T7299] ? __pfx___mutex_trylock_common+0x10/0x10 [ 169.531013][ T7299] team_nl_send_options_get+0x110/0xe60 [ 169.536559][ T7299] ? __pfx_team_nl_send_multicast+0x10/0x10 [ 169.542455][ T7299] ? __pfx___nla_validate_parse+0x10/0x10 [ 169.548173][ T7299] ? __pfx_lock_release+0x10/0x10 [ 169.553190][ T7299] ? __pfx_team_nl_send_options_get+0x10/0x10 [ 169.559256][ T7299] ? lock_acquire+0x2f/0xb0 [ 169.563750][ T7299] ? dev_get_by_index+0x37/0x380 [ 169.568685][ T7299] ? __nla_parse+0x40/0x60 [ 169.573102][ T7299] team_nl_options_set_doit+0x9f8/0xe20 [ 169.578656][ T7299] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 169.584736][ T7299] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 169.592118][ T7299] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 169.599495][ T7299] ? genl_family_rcv_msg_doit+0x202/0x2f0 [ 169.605204][ T7299] genl_family_rcv_msg_doit+0x202/0x2f0 [ 169.610747][ T7299] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 169.616817][ T7299] ? bpf_lsm_capable+0x9/0x10 [ 169.621494][ T7299] ? security_capable+0x7e/0x260 [ 169.626437][ T7299] genl_rcv_msg+0x565/0x800 [ 169.630935][ T7299] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.635959][ T7299] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 169.642036][ T7299] netlink_rcv_skb+0x16b/0x440 [ 169.646792][ T7299] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.651812][ T7299] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.657096][ T7299] ? down_read+0xc9/0x330 [ 169.661417][ T7299] ? __pfx_down_read+0x10/0x10 [ 169.666178][ T7299] ? netlink_deliver_tap+0x1ae/0xd90 [ 169.671466][ T7299] genl_rcv+0x28/0x40 [ 169.675439][ T7299] netlink_unicast+0x53c/0x7f0 [ 169.680197][ T7299] ? __pfx_netlink_unicast+0x10/0x10 [ 169.685479][ T7299] netlink_sendmsg+0x8b8/0xd70 [ 169.690238][ T7299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.695520][ T7299] ____sys_sendmsg+0xaaf/0xc90 [ 169.700283][ T7299] ? copy_msghdr_from_user+0x10b/0x160 [ 169.705733][ T7299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.711020][ T7299] ? __pfx___lock_acquire+0x10/0x10 [ 169.716213][ T7299] ___sys_sendmsg+0x135/0x1e0 [ 169.720889][ T7299] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.726095][ T7299] ? lock_acquire+0x2f/0xb0 [ 169.730588][ T7299] ? __fget_files+0x40/0x3f0 [ 169.735185][ T7299] ? fdget+0x176/0x210 [ 169.739254][ T7299] __sys_sendmsg+0x117/0x1f0 [ 169.743842][ T7299] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.748947][ T7299] ? __fget_files+0x244/0x3f0 [ 169.753728][ T7299] do_syscall_64+0xcd/0x250 [ 169.758227][ T7299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.764118][ T7299] RIP: 0033:0x7f7271b7e719 [ 169.768527][ T7299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.788219][ T7299] RSP: 002b:00007f72729c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.796624][ T7299] RAX: ffffffffffffffda RBX: 00007f7271d35f80 RCX: 00007f7271b7e719 [ 169.804587][ T7299] RDX: 0000000004040020 RSI: 0000000020000440 RDI: 0000000000000003 [ 169.812545][ T7299] RBP: 00007f72729c8090 R08: 0000000000000000 R09: 0000000000000000 [ 169.820509][ T7299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.828472][ T7299] R13: 0000000000000000 R14: 00007f7271d35f80 R15: 00007ffef247a6a8 [ 169.836451][ T7299] [ 169.844359][ T29] audit: type=1401 audit(1731291304.942:1017): op=fscreate invalid_context="}" [ 169.943265][ T7303] netlink: 40 bytes leftover after parsing attributes in process `syz.2.367'. [ 169.952352][ T7303] netlink: 40 bytes leftover after parsing attributes in process `syz.2.367'. [ 170.678121][ T29] audit: type=1400 audit(1731291305.772:1018): avc: denied { write } for pid=7302 comm="syz.2.367" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 170.719375][ T7303] input: syz0 as /devices/virtual/input/input13 [ 170.769920][ T29] audit: type=1400 audit(1731291305.812:1019): avc: denied { ioctl } for pid=7302 comm="syz.2.367" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 170.817452][ T29] audit: type=1400 audit(1731291305.912:1020): avc: denied { setopt } for pid=7311 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.477409][ T7326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.491010][ T7326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.652026][ T7328] FAULT_INJECTION: forcing a failure. [ 171.652026][ T7328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.669500][ T7328] CPU: 0 UID: 0 PID: 7328 Comm: syz.1.376 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 171.680115][ T7328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 171.690178][ T7328] Call Trace: [ 171.693459][ T7328] [ 171.696389][ T7328] dump_stack_lvl+0x16c/0x1f0 [ 171.700132][ T6329] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 171.701060][ T7328] should_fail_ex+0x497/0x5b0 [ 171.710455][ T7326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.713255][ T7328] _copy_to_user+0x32/0xd0 [ 171.725995][ T7328] simple_read_from_buffer+0xd0/0x160 [ 171.731380][ T7328] proc_fail_nth_read+0x198/0x270 [ 171.736406][ T7328] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.741951][ T7328] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.747487][ T7328] vfs_read+0x1df/0xbe0 [ 171.751643][ T7328] ? __fget_files+0x23a/0x3f0 [ 171.756320][ T7328] ? fdget_pos+0x24c/0x360 [ 171.760726][ T7328] ? __pfx_lock_release+0x10/0x10 [ 171.765740][ T7328] ? trace_lock_acquire+0x14a/0x1d0 [ 171.770942][ T7328] ? __pfx_vfs_read+0x10/0x10 [ 171.775633][ T7328] ? __pfx___mutex_lock+0x10/0x10 [ 171.780658][ T7328] ? __fget_files+0x244/0x3f0 [ 171.785345][ T7328] ksys_read+0x12f/0x260 [ 171.789583][ T7328] ? __pfx_ksys_read+0x10/0x10 [ 171.794356][ T7328] do_syscall_64+0xcd/0x250 [ 171.798852][ T7328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.804751][ T7328] RIP: 0033:0x7f76fe17d15c [ 171.809156][ T7328] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 171.828756][ T7328] RSP: 002b:00007f76fefa8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.837160][ T7328] RAX: ffffffffffffffda RBX: 00007f76fe335f80 RCX: 00007f76fe17d15c [ 171.845120][ T7328] RDX: 000000000000000f RSI: 00007f76fefa80a0 RDI: 0000000000000005 [ 171.853081][ T7328] RBP: 00007f76fefa8090 R08: 0000000000000000 R09: 0000000000000000 [ 171.861038][ T7328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.869001][ T7328] R13: 0000000000000000 R14: 00007f76fe335f80 R15: 00007ffcdeaf6968 [ 171.876976][ T7328] [ 171.880085][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.891009][ T7330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.910630][ T7330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.919169][ T7326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.929284][ T7319] FAULT_INJECTION: forcing a failure. [ 171.929284][ T7319] name failslab, interval 1, probability 0, space 0, times 0 [ 171.944334][ T7319] CPU: 1 UID: 0 PID: 7319 Comm: syz.4.373 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 171.954947][ T7319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 171.965027][ T7319] Call Trace: [ 171.968317][ T7319] [ 171.971255][ T7319] dump_stack_lvl+0x16c/0x1f0 [ 171.975950][ T7319] should_fail_ex+0x497/0x5b0 [ 171.980647][ T7319] ? fs_reclaim_acquire+0xae/0x150 [ 171.985777][ T7319] should_failslab+0xc2/0x120 [ 171.990471][ T7319] __kmalloc_noprof+0xcb/0x400 [ 171.995251][ T7319] ? d_absolute_path+0x137/0x1b0 [ 172.000197][ T7319] tomoyo_encode2+0x100/0x3e0 [ 172.004866][ T7319] tomoyo_encode+0x29/0x50 [ 172.009263][ T7319] tomoyo_realpath_from_path+0x19d/0x720 [ 172.014880][ T7319] tomoyo_path_perm+0x273/0x450 [ 172.019710][ T7319] ? tomoyo_path_perm+0x25f/0x450 [ 172.024716][ T7319] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 172.030069][ T7319] ? lock_acquire.part.0+0x11b/0x380 [ 172.035340][ T7319] ? do_raw_spin_lock+0x12d/0x2c0 [ 172.040377][ T7319] ? simple_lookup+0xd6/0x110 [ 172.045058][ T7319] ? lookup_one_qstr_excl+0x39/0x190 [ 172.050332][ T7319] tomoyo_path_symlink+0x98/0xe0 [ 172.055254][ T7319] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 172.060878][ T7319] ? get_current_fs_domain+0x188/0x1f0 [ 172.066341][ T7319] security_path_symlink+0x152/0x2e0 [ 172.071624][ T7319] do_symlinkat+0x10e/0x310 [ 172.076111][ T7319] ? __pfx_do_symlinkat+0x10/0x10 [ 172.081117][ T7319] ? getname_flags.part.0+0x1c5/0x550 [ 172.086476][ T7319] __x64_sys_symlinkat+0x93/0xc0 [ 172.091495][ T7319] do_syscall_64+0xcd/0x250 [ 172.096002][ T7319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.101882][ T7319] RIP: 0033:0x7f621c37e719 [ 172.106279][ T7319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.125866][ T7319] RSP: 002b:00007f621d15c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 172.134259][ T7319] RAX: ffffffffffffffda RBX: 00007f621c535f80 RCX: 00007f621c37e719 [ 172.142208][ T7319] RDX: 0000000020000000 RSI: ffffffffffffff9c RDI: 0000000020000040 [ 172.150157][ T7319] RBP: 00007f621d15c090 R08: 0000000000000000 R09: 0000000000000000 [ 172.158105][ T7319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.166053][ T7319] R13: 0000000000000000 R14: 00007f621c535f80 R15: 00007ffe5914cf28 [ 172.174013][ T7319] [ 172.215983][ T7319] ERROR: Out of memory at tomoyo_realpath_from_path. [ 172.240343][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 172.282827][ T6329] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.295109][ T6329] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 172.330057][ T6329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.360827][ T6329] usb 4-1: config 0 descriptor?? [ 172.461641][ T9] usb 2-1: device descriptor read/64, error -71 [ 172.463872][ T6329] pwc: Askey VC010 type 2 USB webcam detected. [ 172.527115][ T7343] FAULT_INJECTION: forcing a failure. [ 172.527115][ T7343] name failslab, interval 1, probability 0, space 0, times 0 [ 172.527299][ T7341] jfs: Unrecognized mount option "" or missing value [ 172.542244][ T7343] CPU: 0 UID: 0 PID: 7343 Comm: syz.2.380 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 172.557469][ T7343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 172.567521][ T7343] Call Trace: [ 172.570806][ T7343] [ 172.573741][ T7343] dump_stack_lvl+0x16c/0x1f0 [ 172.578431][ T7343] should_fail_ex+0x497/0x5b0 [ 172.583113][ T7343] ? fs_reclaim_acquire+0xae/0x150 [ 172.588224][ T7343] should_failslab+0xc2/0x120 [ 172.592897][ T7343] __kmalloc_node_track_caller_noprof+0xcf/0x430 [ 172.599222][ T7343] ? key_alloc+0x441/0x13a0 [ 172.603723][ T7343] kmemdup_noprof+0x29/0x60 [ 172.608226][ T7343] key_alloc+0x441/0x13a0 [ 172.612577][ T7343] ? __pfx_key_alloc+0x10/0x10 [ 172.617335][ T7343] ? bpf_lsm_key_permission+0x9/0x10 [ 172.622619][ T7343] request_key_and_link+0x75f/0x1360 [ 172.627906][ T7343] ? __pfx_request_key_and_link+0x10/0x10 [ 172.633624][ T7343] ? __pfx_dns_resolver_cmp+0x10/0x10 [ 172.638995][ T7343] ? __pfx_keyring_search_iterator+0x10/0x10 [ 172.644976][ T7343] ? rcu_is_watching+0x12/0xc0 [ 172.649736][ T7343] request_key_tag+0x56/0xc0 [ 172.654323][ T7343] dns_query+0x311/0x850 [ 172.658568][ T7343] afs_try_auto_mntpt+0x362/0x620 [ 172.663595][ T7343] ? __pfx_afs_try_auto_mntpt+0x10/0x10 [ 172.669138][ T7343] ? lockdep_init_map_type+0x16d/0x7d0 [ 172.674593][ T7343] ? lockdep_init_map_type+0x16d/0x7d0 [ 172.680045][ T7343] afs_dynroot_lookup+0x131/0x4e0 [ 172.685072][ T7343] __lookup_slow+0x24f/0x460 [ 172.689659][ T7343] ? __pfx___lookup_slow+0x10/0x10 [ 172.694774][ T7343] ? walk_component+0x342/0x5b0 [ 172.699637][ T7343] ? lookup_fast+0x155/0x540 [ 172.704231][ T7343] walk_component+0x350/0x5b0 [ 172.708905][ T7343] path_lookupat+0x17f/0x770 [ 172.713500][ T7343] filename_lookup+0x1e5/0x5b0 [ 172.718263][ T7343] ? __pfx_mark_lock+0x10/0x10 [ 172.723026][ T7343] ? __pfx_filename_lookup+0x10/0x10 [ 172.728339][ T7343] vfs_statx+0x11e/0x1e0 [ 172.732586][ T7343] ? __pfx_vfs_statx+0x10/0x10 [ 172.737344][ T7343] ? find_held_lock+0x2d/0x110 [ 172.742110][ T7343] do_statx+0xf7/0x180 [ 172.746173][ T7343] ? __pfx_do_statx+0x10/0x10 [ 172.750864][ T7343] ? getname_flags.part.0+0x1c5/0x550 [ 172.756240][ T7343] ? ksys_write+0x1ad/0x260 [ 172.760748][ T7343] __x64_sys_statx+0x184/0x290 [ 172.765514][ T7343] do_syscall_64+0xcd/0x250 [ 172.770012][ T7343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.775907][ T7343] RIP: 0033:0x7f662617e719 [ 172.780311][ T7343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.799908][ T7343] RSP: 002b:00007f6627031038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 172.808317][ T7343] RAX: ffffffffffffffda RBX: 00007f6626335f80 RCX: 00007f662617e719 [ 172.816278][ T7343] RDX: 0000000000001000 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 172.824241][ T7343] RBP: 00007f6627031090 R08: 0000000000000000 R09: 0000000000000000 [ 172.832210][ T7343] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 172.840521][ T7343] R13: 0000000000000000 R14: 00007f6626335f80 R15: 00007ffec4ce10d8 [ 172.848502][ T7343] [ 172.851599][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.871565][ T6329] pwc: send_video_command error -71 [ 172.879302][ T6329] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 172.891426][ T6329] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 172.910653][ T6329] usb 4-1: USB disconnect, device number 10 [ 172.952421][ T7345] Illegal XDP return value 1317627867 on prog (id 93) dev N/A, expect packet loss! [ 172.990408][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 173.140212][ T9] usb 2-1: device descriptor read/64, error -71 [ 173.252091][ T9] usb usb2-port1: attempt power cycle [ 173.777477][ T7355] netlink: 'syz.4.384': attribute type 9 has an invalid length. [ 173.915076][ T6329] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 174.090063][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 174.095723][ T6329] usb 3-1: Using ep0 maxpacket: 32 [ 174.119569][ T9] usb 2-1: device descriptor read/8, error -71 [ 174.170134][ T8] vhci_hcd: vhci_device speed not set [ 174.360612][ T7364] FAULT_INJECTION: forcing a failure. [ 174.360612][ T7364] name failslab, interval 1, probability 0, space 0, times 0 [ 174.381585][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 174.389529][ T7364] CPU: 1 UID: 0 PID: 7364 Comm: syz.0.388 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 174.400136][ T7364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 174.410193][ T7364] Call Trace: [ 174.413472][ T7364] [ 174.416405][ T7364] dump_stack_lvl+0x16c/0x1f0 [ 174.421093][ T7364] should_fail_ex+0x497/0x5b0 [ 174.425785][ T7364] ? fs_reclaim_acquire+0xae/0x150 [ 174.430909][ T7364] should_failslab+0xc2/0x120 [ 174.435604][ T7364] kmem_cache_alloc_node_noprof+0x71/0x310 [ 174.441445][ T7364] ? __alloc_skb+0x2b1/0x380 [ 174.446056][ T7364] __alloc_skb+0x2b1/0x380 [ 174.450487][ T7364] ? __pfx___alloc_skb+0x10/0x10 [ 174.455434][ T7364] ? genl_rcv_msg+0x470/0x800 [ 174.460121][ T7364] ? genl_rcv_msg+0x4bd/0x800 [ 174.464818][ T7364] netlink_ack+0x164/0xb90 [ 174.469251][ T7364] netlink_rcv_skb+0x348/0x440 [ 174.474022][ T7364] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.479059][ T7364] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.484366][ T7364] ? down_read+0xc9/0x330 [ 174.488707][ T7364] ? __pfx_down_read+0x10/0x10 [ 174.492588][ T9] usb 2-1: device descriptor read/8, error -71 [ 174.493464][ T7364] ? netlink_deliver_tap+0x1ae/0xd90 [ 174.504886][ T7364] genl_rcv+0x28/0x40 [ 174.508873][ T7364] netlink_unicast+0x53c/0x7f0 [ 174.513646][ T7364] ? __pfx_netlink_unicast+0x10/0x10 [ 174.518945][ T7364] netlink_sendmsg+0x8b8/0xd70 [ 174.523719][ T7364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.529023][ T7364] ____sys_sendmsg+0xaaf/0xc90 [ 174.533805][ T7364] ? copy_msghdr_from_user+0x10b/0x160 [ 174.539271][ T7364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.544575][ T7364] ? __pfx___lock_acquire+0x10/0x10 [ 174.549785][ T7364] ___sys_sendmsg+0x135/0x1e0 [ 174.554479][ T7364] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.559698][ T7364] ? lock_acquire+0x2f/0xb0 [ 174.564215][ T7364] ? __fget_files+0x40/0x3f0 [ 174.568831][ T7364] ? fdget+0x176/0x210 [ 174.572917][ T7364] __sys_sendmsg+0x117/0x1f0 [ 174.573203][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 174.573215][ T29] audit: type=1400 audit(1731291309.642:1027): avc: denied { append } for pid=7368 comm="syz.3.390" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 174.577497][ T7364] ? __pfx___sys_sendmsg+0x10/0x10 [ 174.611191][ T7364] ? __fget_files+0x244/0x3f0 [ 174.615909][ T7364] do_syscall_64+0xcd/0x250 [ 174.620423][ T7364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.626330][ T7364] RIP: 0033:0x7f7271b7e719 [ 174.630756][ T7364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.640638][ T9] usb usb2-port1: unable to enumerate USB device [ 174.650352][ T7364] RSP: 002b:00007f72729c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.650381][ T7364] RAX: ffffffffffffffda RBX: 00007f7271d35f80 RCX: 00007f7271b7e719 [ 174.650395][ T7364] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 174.650408][ T7364] RBP: 00007f72729c8090 R08: 0000000000000000 R09: 0000000000000000 [ 174.650420][ T7364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.650431][ T7364] R13: 0000000000000000 R14: 00007f7271d35f80 R15: 00007ffef247a6a8 [ 174.650459][ T7364] [ 174.653015][ T6329] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 174.722584][ T6329] usb 3-1: config 0 has no interface number 0 [ 174.733142][ T6329] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 174.761849][ T6329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.780916][ T6329] usb 3-1: Product: syz [ 174.785108][ T6329] usb 3-1: Manufacturer: syz [ 174.789710][ T6329] usb 3-1: SerialNumber: syz [ 174.796684][ T6329] usb 3-1: config 0 descriptor?? [ 174.808868][ T6329] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 174.900536][ T7373] netlink: 'syz.0.391': attribute type 10 has an invalid length. [ 175.177548][ T6329] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 175.331787][ T6329] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 175.470854][ T7354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.527351][ T7354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.735031][ T7383] netlink: 'syz.0.394': attribute type 10 has an invalid length. [ 175.744769][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 175.759441][ T5873] usb 3-1: USB disconnect, device number 12 [ 175.880512][ T5873] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 176.510141][ T29] audit: type=1400 audit(1731291313.479:1028): avc: denied { ioctl } for pid=7376 comm="syz.4.389" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 176.550482][ T5873] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 176.562198][ T5873] quatech2 3-1:0.51: device disconnected [ 177.480510][ T29] audit: type=1400 audit(1731291314.469:1029): avc: denied { create } for pid=7402 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 177.662319][ T29] audit: type=1400 audit(1731291314.479:1030): avc: denied { connect } for pid=7402 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 177.663661][ T7400] netlink: 'syz.1.401': attribute type 10 has an invalid length. [ 177.681938][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.687241][ T29] audit: type=1400 audit(1731291314.489:1031): avc: denied { ioctl } for pid=7402 comm="syz.4.402" path="socket:[14282]" dev="sockfs" ino=14282 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 177.720695][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.740207][ T5873] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 178.202166][ T5873] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 178.214778][ T5873] usb 5-1: config 0 has no interface number 0 [ 178.232538][ T5873] usb 5-1: config 0 interface 29 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 178.250557][ T5873] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=60.74 [ 178.259727][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=234 [ 178.300156][ T5873] usb 5-1: Product: syz [ 178.306531][ T5873] usb 5-1: Manufacturer: syz [ 178.314553][ T5873] usb 5-1: SerialNumber: syz [ 178.328316][ T5873] usb 5-1: config 0 descriptor?? [ 178.533500][ T7405] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 178.843646][ T29] audit: type=1400 audit(1731291316.630:1032): avc: denied { mount } for pid=7414 comm="syz.1.405" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 178.872999][ T29] audit: type=1400 audit(1731291316.630:1033): avc: denied { mounton } for pid=7414 comm="syz.1.405" path="/82/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 178.895614][ T29] audit: type=1400 audit(1731291316.640:1034): avc: denied { read } for pid=7414 comm="syz.1.405" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 178.917246][ T29] audit: type=1400 audit(1731291316.640:1035): avc: denied { open } for pid=7414 comm="syz.1.405" path="/82/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 178.949526][ T5873] as10x_usb: device has been detected [ 178.959392][ T5873] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 178.973541][ T29] audit: type=1400 audit(1731291317.070:1036): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 179.400149][ T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 179.431987][ T5873] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 179.477433][ T5873] as10x_usb: error during firmware upload part1 [ 179.503296][ T5873] Registered device PCTV Systems picoStick (74e) [ 179.505657][ T5873] usb 5-1: USB disconnect, device number 7 [ 179.579327][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 179.579343][ T29] audit: type=1400 audit(1731291317.670:1038): avc: denied { ioctl } for pid=7429 comm="syz.1.410" path="socket:[14628]" dev="sockfs" ino=14628 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.614808][ T9] usb 3-1: config 3 has too many interfaces: 234, using maximum allowed: 32 [ 179.630156][ T29] audit: type=1400 audit(1731291317.710:1039): avc: denied { connect } for pid=7429 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.631157][ T9] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 234 [ 179.649533][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.668540][ T5873] Unregistered device PCTV Systems picoStick (74e) [ 179.695282][ T5873] as10x_usb: device has been disconnected [ 179.731556][ T9] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 179.742791][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.756347][ T9] usb 3-1: Product: syz [ 179.760776][ T9] usb 3-1: Manufacturer: syz [ 179.799643][ T9] usb 3-1: SerialNumber: syz [ 179.809741][ T9] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 180.191409][ T29] audit: type=1400 audit(1731291318.280:1040): avc: denied { read } for pid=7434 comm="syz.4.411" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 180.218577][ T29] audit: type=1400 audit(1731291318.280:1041): avc: denied { open } for pid=7434 comm="syz.4.411" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 180.246375][ T29] audit: type=1400 audit(1731291318.280:1042): avc: denied { ioctl } for pid=7434 comm="syz.4.411" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 180.271704][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.305206][ T7437] team0: entered promiscuous mode [ 180.315456][ T7437] team_slave_0: entered promiscuous mode [ 180.321576][ T7437] team_slave_1: entered promiscuous mode [ 180.344179][ T7437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65521 sclass=netlink_route_socket pid=7437 comm=syz.1.413 [ 180.346776][ T7441] lo speed is unknown, defaulting to 1000 [ 180.415637][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 180.428265][ T9] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 180.590270][ T7450] netlink: 'syz.4.414': attribute type 10 has an invalid length. [ 180.868436][ T29] audit: type=1400 audit(1731291319.962:1043): avc: denied { write } for pid=7438 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.964542][ T6329] usb 3-1: USB disconnect, device number 13 [ 180.997373][ T29] audit: type=1400 audit(1731291320.092:1044): avc: denied { prog_load } for pid=7455 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 181.017139][ T29] audit: type=1400 audit(1731291320.092:1045): avc: denied { bpf } for pid=7455 comm="syz.4.415" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 181.040111][ T29] audit: type=1400 audit(1731291320.142:1046): avc: denied { execmem } for pid=7419 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 181.054471][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 181.059433][ T29] audit: type=1400 audit(1731291320.142:1047): avc: denied { append } for pid=5182 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 181.066338][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 181.066387][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 181.070003][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 181.765702][ T7439] [ 181.768064][ T7439] ============================================ [ 181.774206][ T7439] WARNING: possible recursive locking detected [ 181.780360][ T7439] 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 Not tainted [ 181.787465][ T7439] -------------------------------------------- [ 181.793611][ T7439] syz.0.412/7439 is trying to acquire lock: [ 181.799501][ T7439] ffff88802acd0078 (&hdev->lock){+.+.}-{3:3}, at: mgmt_set_connectable_complete+0x143/0x330 [ 181.809630][ T7439] [ 181.809630][ T7439] but task is already holding lock: [ 181.816992][ T7439] ffff88802acd0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x3ab/0x11b0 [ 181.826247][ T7439] [ 181.826247][ T7439] other info that might help us debug this: [ 181.834305][ T7439] Possible unsafe locking scenario: [ 181.834305][ T7439] [ 181.841754][ T7439] CPU0 [ 181.845029][ T7439] ---- [ 181.848308][ T7439] lock(&hdev->lock); [ 181.852383][ T7439] lock(&hdev->lock); [ 181.856454][ T7439] [ 181.856454][ T7439] *** DEADLOCK *** [ 181.856454][ T7439] [ 181.864595][ T7439] May be due to missing lock nesting notation [ 181.864595][ T7439] [ 181.872907][ T7439] 3 locks held by syz.0.412/7439: [ 181.877921][ T7439] #0: ffff88802acd0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x26/0x90 [ 181.887520][ T7439] #1: ffff88802acd0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x3ab/0x11b0 [ 181.897205][ T7439] #2: ffff88802acd0690 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_dequeue+0x50/0x1f0 [ 181.908105][ T7439] [ 181.908105][ T7439] stack backtrace: [ 181.913993][ T7439] CPU: 0 UID: 0 PID: 7439 Comm: syz.0.412 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 181.924579][ T7439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 181.934634][ T7439] Call Trace: [ 181.937908][ T7439] [ 181.940839][ T7439] dump_stack_lvl+0x116/0x1f0 [ 181.945521][ T7439] print_deadlock_bug+0x2e3/0x410 [ 181.950560][ T7439] __lock_acquire+0x2185/0x3ce0 [ 181.955415][ T7439] ? __pfx___lock_acquire+0x10/0x10 [ 181.960618][ T7439] ? __schedule+0x3b3f/0x5740 [ 181.965304][ T7439] ? lockdep_hardirqs_on+0x7c/0x110 [ 181.970514][ T7439] ? __schedule+0x3b3f/0x5740 [ 181.975204][ T7439] lock_acquire.part.0+0x11b/0x380 [ 181.980322][ T7439] ? mgmt_set_connectable_complete+0x143/0x330 [ 181.986496][ T7439] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 181.992137][ T7439] ? rcu_is_watching+0x12/0xc0 [ 181.997000][ T7439] ? trace_lock_acquire+0x14a/0x1d0 [ 182.002209][ T7439] ? mgmt_set_connectable_complete+0x143/0x330 [ 182.008380][ T7439] ? lock_acquire+0x2f/0xb0 [ 182.012881][ T7439] ? mgmt_set_connectable_complete+0x143/0x330 [ 182.019045][ T7439] __mutex_lock+0x175/0x9c0 [ 182.023554][ T7439] ? mgmt_set_connectable_complete+0x143/0x330 [ 182.029725][ T7439] ? preempt_schedule_thunk+0x1a/0x30 [ 182.035096][ T7439] ? mgmt_set_connectable_complete+0x143/0x330 [ 182.041251][ T7439] ? __pfx___mutex_lock+0x10/0x10 [ 182.046280][ T7439] ? preempt_schedule_thunk+0x1a/0x30 [ 182.051691][ T7439] ? __mutex_lock+0x2cc/0x9c0 [ 182.056368][ T7439] ? mgmt_set_connectable_complete+0x143/0x330 [ 182.062508][ T7439] mgmt_set_connectable_complete+0x143/0x330 [ 182.068475][ T7439] ? __pfx_mgmt_set_connectable_complete+0x10/0x10 [ 182.074968][ T7439] ? lock_acquire.part.0+0x11b/0x380 [ 182.080247][ T7439] ? __pfx_mgmt_set_connectable_complete+0x10/0x10 [ 182.086755][ T7439] _hci_cmd_sync_cancel_entry.constprop.0+0x6c/0x1d0 [ 182.093422][ T7439] hci_cmd_sync_dequeue+0x178/0x1f0 [ 182.098623][ T7439] cmd_complete_rsp+0x46/0x1e0 [ 182.103370][ T7439] mgmt_pending_foreach+0xdf/0x140 [ 182.108464][ T7439] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 182.113829][ T7439] __mgmt_power_off+0x12a/0x2c0 [ 182.118660][ T7439] ? __pfx___mgmt_power_off+0x10/0x10 [ 182.124013][ T7439] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 182.129979][ T7439] ? lockdep_hardirqs_on+0x7c/0x110 [ 182.135178][ T7439] ? 0xffffffff81000000 [ 182.139310][ T7439] hci_dev_close_sync+0xcbb/0x11b0 [ 182.144407][ T7439] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 182.149935][ T7439] hci_dev_do_close+0x2e/0x90 [ 182.154600][ T7439] hci_dev_close+0x183/0x1e0 [ 182.159173][ T7439] hci_sock_ioctl+0x28c/0x880 [ 182.163841][ T7439] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 182.169023][ T7439] sock_do_ioctl+0x116/0x280 [ 182.173596][ T7439] ? __pfx_sock_do_ioctl+0x10/0x10 [ 182.178690][ T7439] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 182.185170][ T7439] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 182.191670][ T7439] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 182.198523][ T7439] sock_ioctl+0x228/0x6c0 [ 182.202843][ T7439] ? __pfx_sock_ioctl+0x10/0x10 [ 182.207687][ T7439] ? selinux_file_ioctl+0x180/0x270 [ 182.212872][ T7439] ? selinux_file_ioctl+0xb4/0x270 [ 182.217966][ T7439] ? __pfx_sock_ioctl+0x10/0x10 [ 182.222811][ T7439] __x64_sys_ioctl+0x18f/0x220 [ 182.227571][ T7439] do_syscall_64+0xcd/0x250 [ 182.232064][ T7439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.237956][ T7439] RIP: 0033:0x7f7271b7e719 [ 182.242347][ T7439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.261965][ T7439] RSP: 002b:00007f72729c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.270365][ T7439] RAX: ffffffffffffffda RBX: 00007f7271d35f80 RCX: 00007f7271b7e719 [ 182.278329][ T7439] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000005 [ 182.286282][ T7439] RBP: 00007f7271bf139e R08: 0000000000000000 R09: 0000000000000000 [ 182.294232][ T7439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.302182][ T7439] R13: 0000000000000000 R14: 00007f7271d35f80 R15: 00007ffef247a6a8 [ 182.310151][ T7439] [ 182.313250][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.407430][ T7436] team0: left promiscuous mode [ 182.416124][ T7436] team_slave_0: left promiscuous mode [ 182.421920][ T7436] team_slave_1: left promiscuous mode