last executing test programs: 9.633543719s ago: executing program 3 (id=1632): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000080)) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010100, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x12, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x4, 0x0, 0x4) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x36) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 7.100458244s ago: executing program 3 (id=1637): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x2, &(0x7f0000001840)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_ifreq(r1, 0x8937, 0x0) modify_ldt$write2(0x11, &(0x7f0000000540)={0x1, 0x1000, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0x1, &(0x7f0000000340)="f892b99b25780795cf40ee08e96e726618ea85daba18bdb32243aac33584e5adfe3a7ce613a406ffbc162e5721e1f3f92d49452bcff2967d80475807eb5073e3e24fa07c4d95e59a8018e6039415f5e71128aae7aefd00360e04f27603a194e98be34baa483e672c6c387a18dacb26623687c86a70c760554ff66c8010032576aab882", &(0x7f0000000080)=""/36}, 0x20) r2 = timerfd_create(0x9, 0x800) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) timerfd_gettime(r2, &(0x7f0000000000)) 6.416628591s ago: executing program 0 (id=1642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="28042793dbfcd4983560e0a008c1aa2d5cb84304e6141a775c9384f26315570b209350fd048111a8224c72acaf9d9330fdd6c08422acd832ce9f37493338fb8936799eb2e57270f77be000654cd5c2d6e6a569530209eef8e2cc26e19b0eafc5eedae9e8df211ef69fc5302a5880c9779a9c2205d273ca6447", @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf250c00000008000300", @ANYRES32=r3, @ANYBLOB="0c0050800800070001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4480}, 0x4800) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044802) 5.883883266s ago: executing program 3 (id=1644): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xfff2}}}, 0x24}}, 0x80c7) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x1, 0x1}}}}]}, 0x44}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f000000af80)=[{0x0}, {&(0x7f0000000280)=""/207, 0xcf}], 0x2}}], 0x1, 0x40000040, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000040)={0x3, r8, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 5.750581119s ago: executing program 0 (id=1645): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101000144000101000000090400001202060000050000000000000000000905810340000000000905820260000000000931e07c1a1f32d2998e72021d95e105030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100f}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) dup2(r1, r2) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062011800000000000e00000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0xc, 0x2, &(0x7f00000001c0)="8752", 0x9, 0x1, 0x10cf, 0x5505, 0x8b, 0x0, 0x4, 'syz0\x00'}) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x92) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x100) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="03020c"], 0xa, 0x0) 5.244759176s ago: executing program 2 (id=1646): r0 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f00000004c0)='./file0\x00', 0x900009a5) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x60000100) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x63}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000f80)={{0x12, 0x1, 0x110, 0x9f, 0xe5, 0x63, 0x20, 0x41e, 0x4064, 0x9763, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x1, 0x7, 0x40, 0xc9, [{{0x9, 0x4, 0x6f, 0x0, 0x0, 0x43, 0x49, 0x7a, 0x3}}, {{0x9, 0x4, 0x3e, 0xff, 0x0, 0x86, 0x42, 0x12, 0x8}}]}}]}}, 0x0) write$nbd(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000000000000000020"], 0x40) 5.204068052s ago: executing program 4 (id=1647): mq_open(0x0, 0x42, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet(0xa, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000300)={0xc, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r4, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000380)=ANY=[@ANYBLOB="f7067a652f431077b2b400b68f2593d35ad98261a9c7860d6ec83ddff0ccb1374fb8af781fc14284778d368bd25523c35d91cda0d02997dbf88262b7a75ec714269bf757aa201fa160aa2b94bb24a7e9016777a31f1f9bb1de39030150be4ee897e6b8058fddd119af34c6bb963aaf6c4eaf8f542a7ce684df0800000000000000c2f9251aeefc881edb2aad9ae44ca9505ad161eb85253dc53622a1a356b96488d05c7b1d579a940aab2adcd90d30e2c093b64b"]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000004000000000000000000000300000000000000000100000000000001000000000000000d00000000020000000100000f020000000400000000000000040000003923000000000000000f02000000921c0000610077f92917a02ab2c38e8be071c2577818b905d9357241f5fa246434a05d38768af2ee758ad3c782bc9b11ae741c195d9c01a0d17b7122a9fd1539638af23277fe"], &(0x7f00000006c0)=""/196, 0x68, 0xc4, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r6, r6, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 4.861495721s ago: executing program 3 (id=1649): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x3ff}, @ib={0x1b, 0xffff, 0x0, {"0000000000000000001393000000dd00"}, 0x0, 0x0, 0x7fff}}}, 0x118) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r2, 0x5}}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x200000c1}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) sendmsg$nl_route(r3, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003ec0)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x1, 0x0, 0x5}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4) 4.844692228s ago: executing program 4 (id=1650): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000080)=""/10, 0x200000, 0x1000, 0x3e000000}, 0x20) 4.538128534s ago: executing program 4 (id=1651): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='sched_switch\x00', r7, 0x0, 0x400000214}, 0x18) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r8, 0x4420}], 0x1, 0x0, &(0x7f0000000280)={[0x9b9]}, 0x8) rt_sigtimedwait(&(0x7f00000003c0)={[0x7]}, &(0x7f0000000540), &(0x7f0000000400)={0x77359400}, 0x8) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x8, 0xfa04, 0xd8, 0x6c02, 0x1b0, 0x194, 0x194, 0x1b0, 0x194, 0x3, 0x0, {[{{@ip={@multicast2, @empty, 0xff000000, 0xffffffff, 'veth1\x00', '\x00', {}, {0xff}, 0x84, 0x3, 0x28}, 0x0, 0x98, 0xd8, 0x0, {0x0, 0x74020000}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xbe, 0xa, "5a8c73a32c48bfb78a401d9e7a68d6a6870b331b9ae7ae9dfa2ca9bfa853"}}}, {{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x62}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x8, 0x1, 0x9d3d, 'pptp\x00', 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x2a8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}]}}}]}, 0x40}}, 0x0) 4.404328714s ago: executing program 1 (id=1652): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x4002021, 0x0, 0xfffc}}, 0x50) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, 0x0, 0x0) 3.502993514s ago: executing program 4 (id=1653): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x67fd, 0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x88400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x20, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x13) sched_setaffinity(0x0, 0x63, &(0x7f0000000080)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/95, 0x5f}], 0x1, 0x12001, 0x7) r3 = openat$cgroup_procs(r2, &(0x7f0000002a40)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000400)=""/86, 0x56, 0x3) 3.411709528s ago: executing program 1 (id=1654): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000080)={0xfffffff8, 0x6, 0x3186, 0x6, 0x1, 0x8}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) getsockopt(r2, 0x2, 0x8, &(0x7f0000000340)=""/103, &(0x7f0000000140)=0x67) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) r5 = socket(0x1e, 0x805, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x480, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0/file0\x00', 0x82000, 0x2) fspick(r6, &(0x7f0000000100)='./file0/file0\x00', 0x1) add_key$user(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x2}, &(0x7f00000009c0)="17", 0x1, 0xffffffffffffffff) request_key(&(0x7f0000004e00)='user\x00', &(0x7f0000004e40)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 3.4108388s ago: executing program 3 (id=1655): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x2, &(0x7f0000001840)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_ifreq(r2, 0x8937, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) modify_ldt$write2(0x11, &(0x7f0000000540)={0x1, 0x1000, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mount$pvfs2(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2f6465762f736e642f636f6e74726f6c4323002c723d30303030303030303030303030ae3e30303036342c6673636f6e746578743d726f6f742c0000000000000000"]) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0x1, &(0x7f0000000340)="f892b99b25780795cf40ee08e96e726618ea85daba18bdb32243aac33584e5adfe3a7ce613a406ffbc162e5721e1f3f92d49452bcff2967d80475807eb5073e3e24fa07c4d95e59a8018e6039415f5e71128aae7aefd00360e04f27603a194e98be34baa483e672c6c387a18dacb26623687c86a70c760554ff66c8010032576aab882", &(0x7f0000000080)=""/36}, 0x20) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x6aad64) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x586abc7b6f5091ec, 0xfa00, {0x0, 0x0, 0x13f}}, 0xfdbc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) timerfd_create(0x9, 0x800) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x5}, 0x8) recvmmsg(r2, &(0x7f00000016c0)=[{{&(0x7f0000000580)=@l2, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/204, 0xcc}, {&(0x7f0000000600)=""/69, 0x45}, {&(0x7f0000000680)=""/49, 0x31}], 0x3, &(0x7f0000000840)=""/49, 0x31}}, {{&(0x7f0000000880)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/183, 0xb7}, {&(0x7f00000009c0)=""/74, 0x4a}, {&(0x7f0000000a40)=""/39, 0x27}, {&(0x7f0000000a80)=""/247, 0xf7}, {&(0x7f0000000b80)=""/1, 0x1}, {&(0x7f0000000bc0)=""/221, 0xdd}], 0x6, &(0x7f0000000d40)=""/233, 0xe9}, 0xa}, {{&(0x7f0000000e40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000ec0)=""/13, 0xd}, {&(0x7f0000000f00)=""/174, 0xae}, {&(0x7f0000000fc0)=""/105, 0x69}, {&(0x7f0000001040)=""/149, 0x95}, {&(0x7f0000001100)=""/202, 0xca}, {&(0x7f0000001200)=""/41, 0x29}, {&(0x7f0000001240)=""/36, 0x24}], 0x7, &(0x7f0000001300)=""/28, 0x1c}, 0x8}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001340)=""/163, 0xa3}, {&(0x7f0000001400)=""/220, 0xdc}, {&(0x7f0000001500)=""/132, 0x84}, {&(0x7f00000015c0)=""/149, 0x95}], 0x4}, 0x4}], 0x4, 0x40010000, &(0x7f0000001800)) 2.827170939s ago: executing program 4 (id=1656): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x10000, 0x2, 0x2ce}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') openat$random(0xffffff9c, &(0x7f0000000840), 0x82000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000ac0)={0x2020}, 0x2020) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x44) accept4(r0, 0x0, 0x0, 0x0) 2.588342101s ago: executing program 2 (id=1657): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x794c2, 0x4) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0xf, 0x1, 0x8, 0x6, @any, 0xb, 0x1fa, 0x7ff, 0x7, 0x7ff, 0x3, 0x8000}}}, 0x1d) acct(0x0) (async) write(r0, &(0x7f0000000080)="0b0001", 0x3) 2.544316775s ago: executing program 1 (id=1658): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='(/\x00') 2.53172077s ago: executing program 1 (id=1659): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x1c) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = getpid() syz_pidfd_open(r5, 0x0) syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x60801, 0x0) mount$afs(0x0, 0x0, &(0x7f0000000000), 0x200000, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0x8000000000000000, 0x8000f, 0xffffffffffffffff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x2, 0x5}, 0x0, 0x0) r6 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000080)) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @local}}) sync() setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) 2.521562858s ago: executing program 2 (id=1660): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, 0x0, &(0x7f00000000c0)) r2 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4000000000000007910900000000000670000000000000095ae000000000000f40fe6ff552b6657d7a19d8e773765a651c1c09f43e38dda6334c9fdda0e1cd1db4e84e5b6f12a13148aa5e8e332ba9b14d7835110607f815214231b9c03f0e5bdcf3d490baff657aac5b5fa188107d99a7b333b16574ee43c6826f25aca7b2f786aaa5f7b9908e17fd62a4849f44caf0e09e84f96f2b3c48877f61f4fe1fce88701c26a7ab04ddf4588d0e5f6711370cae80ba4264e26f705557dd4f4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00'}) r4 = landlock_create_ruleset(&(0x7f0000000940)={0x2014}, 0x18, 0x0) fcntl$setflags(r4, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) add_key(&(0x7f0000000200)='pkcs7_test\x00', 0x0, &(0x7f0000000180)="100c060826d775bb1aeca7ca3792", 0xe, 0xfffffffffffffffc) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x40345410, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$afs(0x0, 0x0, 0x0, 0x200000, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2.416183788s ago: executing program 0 (id=1661): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x40000004}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x80000000}) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xdb) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r1}) 1.357004001s ago: executing program 0 (id=1662): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x67fd, 0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x88400, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x20, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) write$binfmt_misc(r1, &(0x7f00000002c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x13) sched_setaffinity(0x0, 0x63, &(0x7f0000000080)=0x6) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/95, 0x5f}], 0x1, 0x12001, 0x7) r4 = openat$cgroup_procs(r3, &(0x7f0000002a40)='cgroup.procs\x00', 0x2, 0x0) pread64(r4, &(0x7f0000000400)=""/86, 0x56, 0x3) 1.307615666s ago: executing program 1 (id=1663): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000280)={'security\x00', 0x0, [0x8, 0xf, 0x4, 0xfffffffb, 0xc]}, &(0x7f0000000240)=0x54) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @remote, 'batadv_slave_1\x00'}}, 0x1e) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) 1.036357468s ago: executing program 3 (id=1664): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000180)={0x9, 0x20000000, 0x3000}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0xd) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x40, 0x3, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) write(r4, &(0x7f00000002c0)="8e", 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 982.581312ms ago: executing program 4 (id=1665): syz_emit_ethernet(0x35, &(0x7f0000000340)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0xe000, 0x0, 0x11, 0x0, @multicast2, @empty}, {0x0, 0x0, 0x13, 0x0, @opaque="44b4791b4908cc94210139"}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='mm_collapse_huge_page\x00', r0, 0x0, 0x9}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_emit_ethernet(0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000040)=ANY=[], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@void, @void, @ipv6=@generic={0x5, 0x6, "2b807f", 0x1bf, 0x1f5, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @empty}, {[@srh={0x29, 0xa, 0x4, 0x5, 0x7, 0x10, 0x5, [@ipv4={'\x00', '\xff\xff', @broadcast}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3c}, @private0, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x2e, 0x7, '\x00', [@pad1, @generic={0x0, 0x24, "b8c87d301fffb661fe1da5eb09887dad3b8d749b7153f1746cd2ad94761156c2d3fa5407"}, @hao={0xc9, 0x10, @local}]}, @routing={0x29, 0xa, 0x1, 0x62, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @mcast2]}], "309f9139bc292c530d95d60da7e70d4b11214fa237b12c3594a977cf4c3adb6aad75c4c1010a49ebf2a5479fb37dbdd440c6765c005fcbbb2dcf926305f90f0eb0662272545fea7ebb9aa9d84fb8079946978416ae67af1c5f62031c3646370328b6307c38316b3cf4662c3d0ce8b7498cede64262deddd0474afbff9e37575a9d8fd59d03e40833bcee7d8aa47b41ae4a82ffb2bb6ac436d26790468d333fabc84ddf1f59446d4f8dbdbc924ec47fb567a9c90194bffd8b304670ef74b4eea67b0710291c124e"}}}, 0x1e7) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000500)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) bind$ax25(r3, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r3, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @default]}, 0x48) accept$ax25(r3, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x4, 0x7}, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000002500)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0xa4c5c000) 980.118102ms ago: executing program 2 (id=1666): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}, 0x3}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0}, 0x0) 940.860562ms ago: executing program 0 (id=1667): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000002010040"]) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x4000000000000000, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f044, 0x8}) ppoll(&(0x7f0000000040)=[{r3, 0x4040}], 0x1, 0x0, 0x0, 0x0) 819.782152ms ago: executing program 2 (id=1668): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) read$FUSE(r1, &(0x7f0000000c00)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000ac0)=@newlinkprop={0x20, 0x6c, 0x101, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1dc08, 0x3050}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc4) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 803.93307ms ago: executing program 2 (id=1669): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfb, 0x323, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdir(&(0x7f0000005040)='./file0\x00', 0x108) chroot(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x4000000) 766.535921ms ago: executing program 0 (id=1670): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = creat(&(0x7f0000000440)='./file0\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x3, 0x66e, 0x9, 0x4, 0x7}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0xac, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x1d, 0x2, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r4, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3}) 0s ago: executing program 1 (id=1671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = io_uring_setup(0x5ea3, &(0x7f0000000000)={0x0, 0x5325, 0x800, 0x2, 0x1a2, 0x0, r3}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000080)=r3, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r6, 0x407, 0x0) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x40000, 0x0, 0x0, 0x0, 0x4, 0xb}}, 0x50) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000180)={0x77359400}) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000080)='b:::\x00\xf9L\xa4\xf8G\xd4\xcc\xcc\x19\x0f\xc6\xaf\xb5n~\xb4\x0f\xa9\b\xa4\x1d\v\xdd\xc9\xc7\xef\x86s\xbc\xfcI\x89\xd1\xe8\xfa\x82_\xd1\xe4_\xac\xaf\xb9\xb2\xca\xae\xcf\x1dc\xa7o\x9dC\x87\xfd\xf8\x8a\x84\xf1\x1dY\xb3,~', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) vmsplice(r6, &(0x7f00000001c0), 0x0, 0xc) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) prlimit64(r1, 0xe, &(0x7f0000000140)={0xfffffffffffffffd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) kernel console output (not intermixed with test programs): enied { setopt } for pid=10026 comm="syz.3.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 292.392857][ T30] audit: type=1400 audit(1742918951.437:1872): avc: denied { write } for pid=10038 comm="syz.3.1145" name="rt_acct" dev="proc" ino=4026532861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 292.497076][ T30] audit: type=1400 audit(1742918951.437:1873): avc: denied { create } for pid=10038 comm="syz.3.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 293.015522][ T30] audit: type=1400 audit(1742918951.661:1874): avc: denied { create } for pid=10040 comm="syz.4.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 293.973390][T10055] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1149'. [ 293.982612][T10055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1149'. [ 294.198720][ T30] audit: type=1400 audit(1742918953.130:1875): avc: denied { read write } for pid=10056 comm="syz.3.1150" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 294.224509][T10057] fuse: Unknown parameter 'rootmodE' [ 294.720662][ T57] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 295.118082][ T57] usb 4-1: Using ep0 maxpacket: 8 [ 295.126988][ T57] usb 4-1: descriptor type invalid, skip [ 295.135946][ T57] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 32 [ 295.157974][ T57] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.230474][ T57] usb 4-1: config 1 interface 0 has no altsetting 0 [ 295.304901][ T57] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 295.315526][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.343799][ T57] usb 4-1: Product: syz [ 295.359053][ T57] usb 4-1: Manufacturer: syz [ 295.385340][ T57] usb 4-1: SerialNumber: syz [ 295.446110][T10057] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 295.824974][ T57] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 8 proto 1 vid 0x0525 pid 0xA4A8 [ 295.837414][ T57] usb 4-1: USB disconnect, device number 31 [ 295.845857][ T57] usblp0: removed [ 295.850857][T10069] fuse: Bad value for 'rootmode' [ 296.300165][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 296.300200][ T30] audit: type=1400 audit(1742918955.094:1890): avc: denied { read } for pid=10075 comm="syz.2.1156" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 296.348076][ T30] audit: type=1400 audit(1742918955.122:1891): avc: denied { open } for pid=10075 comm="syz.2.1156" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 296.358160][T10076] program syz.2.1156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.437711][ T30] audit: type=1400 audit(1742918955.225:1892): avc: denied { create } for pid=10078 comm="syz.1.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 296.658277][ T30] audit: type=1400 audit(1742918955.431:1893): avc: denied { setcurrent } for pid=10078 comm="syz.1.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 296.679094][ T30] audit: type=1400 audit(1742918955.449:1894): avc: denied { create } for pid=10078 comm="syz.1.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 296.901552][T10088] FAULT_INJECTION: forcing a failure. [ 296.901552][T10088] name failslab, interval 1, probability 0, space 0, times 0 [ 296.921661][ T30] audit: type=1400 audit(1742918955.655:1895): avc: denied { ioctl } for pid=10085 comm="syz.2.1159" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26590 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 297.123342][T10088] CPU: 1 UID: 0 PID: 10088 Comm: syz.2.1159 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 297.123369][T10088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 297.123379][T10088] Call Trace: [ 297.123386][T10088] [ 297.123392][T10088] dump_stack_lvl+0x16c/0x1f0 [ 297.123424][T10088] should_fail_ex+0x50a/0x650 [ 297.123444][T10088] ? tomoyo_realpath_from_path+0xb9/0x720 [ 297.123464][T10088] should_failslab+0xc2/0x120 [ 297.123490][T10088] __kmalloc_noprof+0xcb/0x510 [ 297.123517][T10088] tomoyo_realpath_from_path+0xb9/0x720 [ 297.123535][T10088] ? tomoyo_profile+0x47/0x60 [ 297.123555][T10088] tomoyo_path_number_perm+0x248/0x590 [ 297.123578][T10088] ? tomoyo_path_number_perm+0x235/0x590 [ 297.123603][T10088] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 297.123644][T10088] ? rcu_is_watching+0x12/0xc0 [ 297.123669][T10088] ? __rcu_read_unlock+0x2b4/0x580 [ 297.123690][T10088] ? __fget_files+0x20e/0x3b0 [ 297.123714][T10088] security_file_ioctl+0x9b/0x240 [ 297.123741][T10088] __x64_sys_ioctl+0xb7/0x200 [ 297.123762][T10088] do_syscall_64+0xcd/0x250 [ 297.123780][T10088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.123804][T10088] RIP: 0033:0x7f90b438d169 [ 297.123817][T10088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.123833][T10088] RSP: 002b:00007f90b51d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.123851][T10088] RAX: ffffffffffffffda RBX: 00007f90b45a6080 RCX: 00007f90b438d169 [ 297.123862][T10088] RDX: 0000200000000000 RSI: 00000000c020aa00 RDI: 0000000000000003 [ 297.123872][T10088] RBP: 00007f90b51d4090 R08: 0000000000000000 R09: 0000000000000000 [ 297.123883][T10088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.123893][T10088] R13: 0000000000000000 R14: 00007f90b45a6080 R15: 00007ffe8fd505a8 [ 297.123912][T10088] [ 297.317854][T10088] ERROR: Out of memory at tomoyo_realpath_from_path. [ 297.371384][ T30] audit: type=1400 audit(1742918956.095:1896): avc: denied { bind } for pid=10090 comm="syz.3.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 297.411366][ T30] audit: type=1400 audit(1742918956.095:1897): avc: denied { setopt } for pid=10090 comm="syz.3.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 297.476130][T10095] random: crng reseeded on system resumption [ 297.484701][ T30] audit: type=1400 audit(1742918956.095:1898): avc: denied { write } for pid=10090 comm="syz.3.1160" path="socket:[26605]" dev="sockfs" ino=26605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 297.596412][ T30] audit: type=1400 audit(1742918956.188:1899): avc: denied { write } for pid=10094 comm="syz.3.1162" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 299.005982][T10129] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1172'. [ 299.538498][ T57] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 300.067731][ T57] usb 5-1: config 0 has an invalid interface number: 183 but max is 0 [ 300.080492][ T57] usb 5-1: config 0 has no interface number 0 [ 300.089270][ T57] usb 5-1: config 0 interface 183 altsetting 0 endpoint 0x2 has invalid maxpacket 528, setting to 64 [ 300.116358][ T57] usb 5-1: config 0 interface 183 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 300.207488][ T57] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 300.266118][T10150] xt_TPROXY: Can be used only with -p tcp or -p udp [ 300.308832][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.546962][ T5943] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 300.814227][ T57] usb 5-1: Product: syz [ 300.818444][ T57] usb 5-1: Manufacturer: syz [ 300.823017][ T57] usb 5-1: SerialNumber: syz [ 300.836138][ T57] usb 5-1: config 0 descriptor?? [ 300.841832][T10117] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 300.857239][T10117] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 301.360632][T10117] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 301.404273][T10117] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 301.624529][ T57] net1080 5-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.4-1, NetChip TurboCONNECT, 82:49:7e:c0:17:47 [ 302.885728][ T5943] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 302.914962][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.932390][ T5897] usb 5-1: USB disconnect, device number 30 [ 302.932568][ T5943] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 302.948203][ T5943] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 302.948557][ T5897] net1080 5-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.4-1, NetChip TurboCONNECT [ 302.956348][ T5943] usb 4-1: Manufacturer: syz [ 302.972457][ T5943] usb 4-1: config 0 descriptor?? [ 302.977670][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 302.977685][ T30] audit: type=1400 audit(1742918961.333:1910): avc: denied { write } for pid=10156 comm="syz.0.1180" path="socket:[28838]" dev="sockfs" ino=28838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 303.168038][ T5943] rc_core: IR keymap rc-hauppauge not found [ 303.171545][T10161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.174269][ T5943] Registered IR keymap rc-empty [ 303.210957][ T5943] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 303.258895][ T5943] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 303.361212][T10149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.388580][T10149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.525003][ T30] audit: type=1400 audit(1742918961.848:1911): avc: denied { read } for pid=5179 comm="acpid" name="event4" dev="devtmpfs" ino=3008 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 303.550583][ T30] audit: type=1400 audit(1742918961.848:1912): avc: denied { open } for pid=5179 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3008 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 303.550810][T10146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1176'. [ 303.578347][ T30] audit: type=1400 audit(1742918961.848:1913): avc: denied { ioctl } for pid=5179 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3008 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 303.610645][T10146] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1176'. [ 304.140121][ T30] audit: type=1400 audit(1742918962.428:1914): avc: denied { ioctl } for pid=10145 comm="syz.3.1176" path="mnt:[4026532814]" dev="nsfs" ino=4026532814 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 304.167463][ T973] usb 4-1: USB disconnect, device number 32 [ 304.218721][T10176] netlink: 798 bytes leftover after parsing attributes in process `syz.4.1184'. [ 304.224090][ T30] audit: type=1400 audit(1742918962.502:1915): avc: denied { mount } for pid=10175 comm="syz.4.1184" name="/" dev="ramfs" ino=28111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 304.401020][ T30] audit: type=1400 audit(1742918962.671:1916): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 305.866196][ T57] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 305.967840][ T30] audit: type=1400 audit(1742918964.121:1917): avc: denied { create } for pid=10203 comm="syz.1.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 306.033636][T10207] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1194'. [ 306.106259][ T57] usb 3-1: Using ep0 maxpacket: 8 [ 306.122921][ T57] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 306.140639][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.155199][ T30] audit: type=1400 audit(1742918964.308:1918): avc: denied { append } for pid=10210 comm="syz.0.1195" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 306.178893][ T57] usb 3-1: Product: syz [ 306.184380][ T57] usb 3-1: Manufacturer: syz [ 306.189156][ T57] usb 3-1: SerialNumber: syz [ 306.207005][ T57] usb 3-1: config 0 descriptor?? [ 306.632231][ T30] audit: type=1400 audit(1742918964.401:1919): avc: denied { write } for pid=10202 comm="syz.3.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 307.013578][ T57] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 307.130785][T10218] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1196'. [ 309.109628][T10198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.118402][T10198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.137269][ T57] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 309.647294][ T57] usb 3-1: USB disconnect, device number 30 [ 310.188530][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 310.214956][T10251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1205'. [ 310.242389][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 310.261534][T10255] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1206'. [ 310.274731][T10254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1205'. [ 310.512618][ T5869] IPVS: starting estimator thread 0... [ 310.838764][T10262] IPVS: using max 62 ests per chain, 148800 per kthread [ 311.203409][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 311.203452][ T30] audit: type=1400 audit(1742918969.032:1929): avc: denied { create } for pid=10274 comm="syz.4.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 311.402574][T10278] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1212'. [ 311.412762][T10278] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1212'. [ 311.524618][T10279] FAULT_INJECTION: forcing a failure. [ 311.524618][T10279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.537977][T10279] CPU: 0 UID: 0 PID: 10279 Comm: syz.4.1211 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 311.538000][T10279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 311.538009][T10279] Call Trace: [ 311.538016][T10279] [ 311.538020][T10279] dump_stack_lvl+0x16c/0x1f0 [ 311.538047][T10279] should_fail_ex+0x50a/0x650 [ 311.538063][T10279] _copy_from_user+0x2e/0xd0 [ 311.538077][T10279] copy_msghdr_from_user+0x99/0x160 [ 311.538097][T10279] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 311.538115][T10279] ? __pfx___schedule+0x10/0x10 [ 311.538131][T10279] ___sys_recvmsg+0xdc/0x1a0 [ 311.538148][T10279] ? __pfx____sys_recvmsg+0x10/0x10 [ 311.538172][T10279] __sys_recvmsg+0x16b/0x220 [ 311.538182][T10279] ? __pfx___sys_recvmsg+0x10/0x10 [ 311.538195][T10279] ? rcu_is_watching+0x12/0xc0 [ 311.538214][T10279] do_syscall_64+0xcd/0x250 [ 311.538225][T10279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.538243][T10279] RIP: 0033:0x7f1e7498d169 [ 311.538251][T10279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.538261][T10279] RSP: 002b:00007f1e75711038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 311.538272][T10279] RAX: ffffffffffffffda RBX: 00007f1e74ba6160 RCX: 00007f1e7498d169 [ 311.538279][T10279] RDX: 0000000040010120 RSI: 0000200000000200 RDI: 0000000000000005 [ 311.538285][T10279] RBP: 00007f1e75711090 R08: 0000000000000000 R09: 0000000000000000 [ 311.538291][T10279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.538297][T10279] R13: 0000000000000001 R14: 00007f1e74ba6160 R15: 00007fff6e2a5b78 [ 311.538307][T10279] [ 311.879033][ T30] audit: type=1400 audit(1742918969.658:1930): avc: denied { create } for pid=10283 comm="syz.4.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 311.977531][ T30] audit: type=1400 audit(1742918969.668:1931): avc: denied { bind } for pid=10283 comm="syz.4.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 312.008820][ T30] audit: type=1400 audit(1742918969.668:1932): avc: denied { name_bind } for pid=10283 comm="syz.4.1214" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 312.040833][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1214'. [ 312.060050][ T30] audit: type=1400 audit(1742918969.668:1933): avc: denied { node_bind } for pid=10283 comm="syz.4.1214" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 312.925748][T10307] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1219'. [ 312.939908][ T30] audit: type=1400 audit(1742918970.659:1934): avc: denied { read } for pid=10305 comm="syz.4.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 313.407823][ T30] audit: type=1400 audit(1742918971.061:1935): avc: denied { mount } for pid=10317 comm="syz.1.1223" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 313.560914][ T30] audit: type=1400 audit(1742918971.061:1936): avc: denied { read write } for pid=10317 comm="syz.1.1223" name="loop9" dev="devtmpfs" ino=2985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 313.584654][ T30] audit: type=1400 audit(1742918971.061:1937): avc: denied { open } for pid=10317 comm="syz.1.1223" path="/dev/loop9" dev="devtmpfs" ino=2985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 313.643073][ T5897] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 313.707132][ T5869] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 313.754025][ T30] audit: type=1400 audit(1742918971.061:1938): avc: denied { ioctl } for pid=10317 comm="syz.1.1223" path="/dev/loop9" dev="devtmpfs" ino=2985 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 313.867609][ T5897] usb 3-1: device descriptor read/64, error -71 [ 313.880231][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.893124][ T5869] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 313.904121][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.923976][ T5869] usb 4-1: config 0 descriptor?? [ 313.945724][T10331] netlink: 'syz.4.1229': attribute type 15 has an invalid length. [ 313.956873][T10331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1229'. [ 314.099361][T10335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1230'. [ 314.113174][T10335] erspan0: entered promiscuous mode [ 314.135202][T10335] erspan0: left promiscuous mode [ 314.302183][ T5897] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 314.605951][ T5897] usb 3-1: device descriptor read/64, error -71 [ 314.758033][ T5897] usb usb3-port1: attempt power cycle [ 315.050774][ T5869] usbhid 4-1:0.0: can't add hid device: -71 [ 315.060516][ T5869] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 315.069884][ T5869] usb 4-1: USB disconnect, device number 33 [ 315.185608][T10349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1234'. [ 315.203970][ T5897] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 315.248536][ T5897] usb 3-1: device descriptor read/8, error -71 [ 315.595415][ T5897] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 315.637077][ T5897] usb 3-1: device descriptor read/8, error -71 [ 315.697723][T10359] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1236'. [ 315.769207][ T5897] usb usb3-port1: unable to enumerate USB device [ 315.794492][T10367] veth0_vlan: entered allmulticast mode [ 315.851781][T10367] veth0_vlan: left promiscuous mode [ 315.858470][T10367] veth0_vlan: entered promiscuous mode [ 315.935735][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1241'. [ 316.524396][T10386] autofs4:pid:10386:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.1), cmd(0xc0189374) [ 316.537773][T10386] autofs4:pid:10386:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 316.566805][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 316.566817][ T30] audit: type=1400 audit(1742918974.055:1962): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 316.612195][T10392] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1246'. [ 316.675812][ T30] audit: type=1400 audit(1742918974.148:1963): avc: denied { read } for pid=10396 comm="syz.0.1248" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 316.708502][ T30] audit: type=1400 audit(1742918974.148:1964): avc: denied { open } for pid=10396 comm="syz.0.1248" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 316.747893][ T30] audit: type=1400 audit(1742918974.176:1965): avc: denied { ioctl } for pid=10396 comm="syz.0.1248" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 316.781149][ T30] audit: type=1400 audit(1742918974.186:1966): avc: denied { read write } for pid=10396 comm="syz.0.1248" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 316.859810][ T30] audit: type=1400 audit(1742918974.186:1967): avc: denied { open } for pid=10396 comm="syz.0.1248" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 316.886156][ T30] audit: type=1400 audit(1742918974.186:1968): avc: denied { ioctl } for pid=10396 comm="syz.0.1248" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 316.912821][ T30] audit: type=1400 audit(1742918974.270:1969): avc: denied { setopt } for pid=10396 comm="syz.0.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.914623][T10400] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.933423][ T30] audit: type=1400 audit(1742918974.335:1970): avc: denied { bind } for pid=10398 comm="syz.3.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 316.966935][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 316.976121][ T30] audit: type=1400 audit(1742918974.335:1971): avc: denied { setopt } for pid=10398 comm="syz.3.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 317.010593][T10403] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 317.027983][T10403] 8021q: adding VLAN 0 to HW filter on device team1 [ 317.045774][ T5943] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 317.059748][T10400] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.127868][T10400] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.225506][T10400] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.582482][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.600986][ T5943] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 317.633594][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.645128][ T5943] usb 3-1: config 0 descriptor?? [ 317.686767][T10400] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.698905][T10400] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.711430][T10400] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.723085][T10400] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.506876][T10427] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1258'. [ 319.034122][ T5943] usbhid 3-1:0.0: can't add hid device: -71 [ 319.040215][ T5943] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 319.912043][ T5943] usb 3-1: USB disconnect, device number 35 [ 320.004095][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1262'. [ 320.068344][T10454] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1264'. [ 320.077459][T10454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1264'. [ 320.944693][ T57] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 321.372465][ T57] usb 3-1: Using ep0 maxpacket: 16 [ 321.385798][ T57] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 321.398461][ T57] usb 3-1: config 1 has an invalid interface number: 222 but max is 2 [ 322.099254][ T57] usb 3-1: config 1 has an invalid interface number: 244 but max is 2 [ 322.107620][ T57] usb 3-1: config 1 has an invalid descriptor of length 10, skipping remainder of the config [ 322.118080][ T57] usb 3-1: config 1 has 5 interfaces, different from the descriptor's value: 3 [ 322.127185][ T57] usb 3-1: config 1 has no interface number 3 [ 322.133386][ T57] usb 3-1: config 1 has no interface number 4 [ 322.139594][ T57] usb 3-1: config 1 interface 222 altsetting 0 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 322.150899][ T57] usb 3-1: config 1 interface 244 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 322.221172][ T57] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 322.303896][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 322.303913][ T30] audit: type=1400 audit(1742918979.424:1999): avc: denied { execute_no_trans } for pid=10478 comm="syz.0.1273" path="/234/file0" dev="tmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 322.387855][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.417690][ T57] usb 3-1: Product: syz [ 322.428443][ T57] usb 3-1: Manufacturer: syz [ 322.435598][ T57] usb 3-1: SerialNumber: syz [ 322.769844][ T30] audit: type=1400 audit(1742918979.854:2000): avc: denied { write } for pid=10464 comm="syz.2.1267" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 322.813627][T10491] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1277'. [ 322.822842][T10491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1277'. [ 323.135288][ T30] audit: type=1400 audit(1742918979.910:2001): avc: denied { ioctl } for pid=10464 comm="syz.2.1267" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 323.572237][ T30] audit: type=1400 audit(1742918980.528:2002): avc: denied { create } for pid=10501 comm="syz.0.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 323.592994][ T30] audit: type=1400 audit(1742918980.528:2003): avc: denied { connect } for pid=10501 comm="syz.0.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 323.613563][ T30] audit: type=1400 audit(1742918980.574:2004): avc: denied { setopt } for pid=10501 comm="syz.0.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 324.577368][ T30] audit: type=1400 audit(1742918980.743:2005): avc: denied { read } for pid=10505 comm="syz.1.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 324.615331][ T30] audit: type=1400 audit(1742918981.491:2006): avc: denied { bind } for pid=10501 comm="syz.0.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 324.707444][T10518] xt_TPROXY: Can be used only with -p tcp or -p udp [ 325.186686][T10517] 9pnet_fd: p9_fd_create_tcp (10517): problem connecting socket to 127.0.0.1 [ 325.323473][ T57] usb 3-1: invalid UAC_HEADER (v1) [ 325.362481][T10525] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1285'. [ 325.378716][ T57] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 325.822675][T10527] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1286'. [ 325.837733][ T57] usb 3-1: USB disconnect, device number 36 [ 326.389767][ T30] audit: type=1400 audit(1742918983.222:2007): avc: denied { ioctl } for pid=10545 comm="syz.0.1291" path="socket:[30926]" dev="sockfs" ino=30926 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 326.475955][T10548] sp0: Synchronizing with TNC [ 326.523015][ T30] audit: type=1400 audit(1742918983.334:2008): avc: denied { append } for pid=5176 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 326.671892][T10557] FAULT_INJECTION: forcing a failure. [ 326.671892][T10557] name failslab, interval 1, probability 0, space 0, times 0 [ 326.684950][T10557] CPU: 0 UID: 0 PID: 10557 Comm: syz.0.1295 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 326.684966][T10557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.684973][T10557] Call Trace: [ 326.684978][T10557] [ 326.684986][T10557] dump_stack_lvl+0x16c/0x1f0 [ 326.685022][T10557] should_fail_ex+0x50a/0x650 [ 326.685041][T10557] should_failslab+0xc2/0x120 [ 326.685059][T10557] kmem_cache_alloc_noprof+0x6e/0x3c0 [ 326.685082][T10557] ? skb_clone+0x190/0x3f0 [ 326.685100][T10557] skb_clone+0x190/0x3f0 [ 326.685117][T10557] netlink_deliver_tap+0xabd/0xd30 [ 326.685143][T10557] netlink_unicast+0x6b4/0x7f0 [ 326.685160][T10557] ? __pfx_netlink_unicast+0x10/0x10 [ 326.685175][T10557] ? genl_rcv_msg+0x4bd/0x800 [ 326.685188][T10557] netlink_ack+0x6ac/0xb80 [ 326.685206][T10557] netlink_rcv_skb+0x348/0x440 [ 326.685222][T10557] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.685233][T10557] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.685253][T10557] ? down_read+0xc9/0x330 [ 326.685264][T10557] ? __pfx_down_read+0x10/0x10 [ 326.685275][T10557] ? netlink_deliver_tap+0x1ae/0xd30 [ 326.685291][T10557] genl_rcv+0x28/0x40 [ 326.685299][T10557] netlink_unicast+0x53c/0x7f0 [ 326.685316][T10557] ? __pfx_netlink_unicast+0x10/0x10 [ 326.685338][T10557] netlink_sendmsg+0x8cb/0xd70 [ 326.685359][T10557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.685381][T10557] ? __import_iovec+0x1cd/0x660 [ 326.685406][T10557] ____sys_sendmsg+0xa87/0xc70 [ 326.685424][T10557] ? copy_msghdr_from_user+0x10b/0x160 [ 326.685441][T10557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.685458][T10557] ___sys_sendmsg+0x135/0x1e0 [ 326.685476][T10557] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.685491][T10557] ? __lock_acquire+0x5b6/0x1b80 [ 326.685512][T10557] ? __fget_files+0x20e/0x3b0 [ 326.685529][T10557] __sys_sendmsg+0x16e/0x220 [ 326.685539][T10557] ? __pfx___sys_sendmsg+0x10/0x10 [ 326.685552][T10557] ? rcu_is_watching+0x12/0xc0 [ 326.685570][T10557] do_syscall_64+0xcd/0x250 [ 326.685581][T10557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.685598][T10557] RIP: 0033:0x7fa8a998d169 [ 326.685607][T10557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.685617][T10557] RSP: 002b:00007fa8aa87d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.685628][T10557] RAX: ffffffffffffffda RBX: 00007fa8a9ba5fa0 RCX: 00007fa8a998d169 [ 326.685634][T10557] RDX: 00000000000400a0 RSI: 00002000000005c0 RDI: 0000000000000009 [ 326.685640][T10557] RBP: 00007fa8aa87d090 R08: 0000000000000000 R09: 0000000000000000 [ 326.685646][T10557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.685652][T10557] R13: 0000000000000000 R14: 00007fa8a9ba5fa0 R15: 00007ffc38407d38 [ 326.685663][T10557] [ 327.028223][ T5897] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 327.045357][ T57] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 327.353863][ T5897] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.368215][ T5897] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 327.391026][ T57] usb 4-1: Using ep0 maxpacket: 16 [ 327.398068][ T57] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.416931][ T5897] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 327.428700][ T57] usb 4-1: config 0 interface 0 has no altsetting 0 [ 327.438692][ T57] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 327.448390][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.448517][ T5897] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.466936][ T57] usb 4-1: Product: syz [ 327.471153][ T57] usb 4-1: Manufacturer: syz [ 327.475826][ T57] usb 4-1: SerialNumber: syz [ 327.480585][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.491525][ T57] usb 4-1: config 0 descriptor?? [ 327.496670][ T5897] usb 3-1: Product: syz [ 327.501958][ T57] hub 4-1:0.0: bad descriptor, ignoring hub [ 327.508264][ T5897] usb 3-1: Manufacturer: syz [ 327.513053][ T57] hub 4-1:0.0: probe with driver hub failed with error -5 [ 327.520807][ T5897] usb 3-1: SerialNumber: syz [ 327.530043][ T57] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 327.542598][ T67] usb 4-1: Failed to submit usb control message: -71 [ 327.553542][ T67] usb 4-1: unable to send the bmi data to the device: -71 [ 327.560744][ T67] usb 4-1: unable to get target info from device [ 327.570055][ T67] usb 4-1: could not get target info (-71) [ 327.578075][ T67] usb 4-1: could not probe fw (-71) [ 327.669084][ T5819] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 327.719920][T10547] [U] è [ 327.746060][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 327.746083][ T30] audit: type=1400 audit(1742918984.512:2042): avc: denied { setopt } for pid=10543 comm="syz.2.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 327.773034][T10555] netlink: 'syz.2.1292': attribute type 4 has an invalid length. [ 327.788813][T10555] netlink: 'syz.2.1292': attribute type 4 has an invalid length. [ 327.802928][ T30] audit: type=1400 audit(1742918984.559:2043): avc: denied { read } for pid=10543 comm="syz.2.1292" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 327.828050][ T30] audit: type=1400 audit(1742918984.559:2044): avc: denied { open } for pid=10543 comm="syz.2.1292" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 327.852822][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.859186][ T30] audit: type=1400 audit(1742918984.559:2045): avc: denied { ioctl } for pid=10543 comm="syz.2.1292" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 327.859581][ T5869] usb 4-1: USB disconnect, device number 34 [ 327.885521][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.925691][ T5819] usb 5-1: Using ep0 maxpacket: 8 [ 327.932505][ T5819] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.946381][ T5819] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 327.956217][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.966694][ T5819] usb 5-1: config 0 descriptor?? [ 327.975707][ T5819] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 328.362650][ T30] audit: type=1400 audit(1742918985.083:2046): avc: denied { name_bind } for pid=10577 comm="syz.3.1301" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 328.386754][ T30] audit: type=1400 audit(1742918985.083:2047): avc: denied { node_bind } for pid=10577 comm="syz.3.1301" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 328.434955][ T30] audit: type=1400 audit(1742918985.148:2048): avc: denied { mounton } for pid=10577 comm="syz.3.1301" path="/263/file0" dev="tmpfs" ino=1422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 328.459986][ T30] audit: type=1400 audit(1742918985.148:2049): avc: denied { create } for pid=10577 comm="syz.3.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 328.479938][ T30] audit: type=1400 audit(1742918985.148:2050): avc: denied { shutdown } for pid=10577 comm="syz.3.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 328.499979][ T30] audit: type=1400 audit(1742918985.148:2051): avc: denied { setopt } for pid=10577 comm="syz.3.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 329.037239][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1305'. [ 329.272330][ T5869] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 329.636322][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 329.678620][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 329.753537][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 329.848334][ T5869] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 329.910740][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.995110][ T5897] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 330.003739][ T5819] usb 5-1: USB disconnect, device number 31 [ 330.114916][ T5897] usb 3-1: USB disconnect, device number 37 [ 330.133336][ T5869] usb 4-1: Product: syz [ 330.147294][ T5869] usb 4-1: Manufacturer: syz [ 330.164377][ T5869] usb 4-1: SerialNumber: syz [ 330.179764][ T5869] usb 4-1: config 0 descriptor?? [ 330.202440][ T5869] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 330.282555][T10610] sp0: Synchronizing with TNC [ 330.424600][T10584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.434677][T10584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.514285][T10615] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 330.680449][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.687071][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.372206][ T3967] usb 4-1: Failed to submit usb control message: -110 [ 331.379881][ T3967] usb 4-1: unable to send the bmi data to the device: -110 [ 331.387365][ T3967] usb 4-1: unable to get target info from device [ 331.416974][ T3967] usb 4-1: could not get target info (-110) [ 331.424618][ T3967] usb 4-1: could not probe fw (-110) [ 331.931396][T10624] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.139856][T10624] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.250163][T10624] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.430223][T10624] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.044439][T10618] Set syz1 is full, maxelem 65536 reached [ 333.162019][ T5869] usb 4-1: USB disconnect, device number 35 [ 333.334241][T10624] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.371816][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 333.371833][ T30] audit: type=1400 audit(1742918989.769:2131): avc: denied { name_bind } for pid=10628 comm="syz.3.1316" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 333.417133][ T30] audit: type=1400 audit(1742918989.797:2132): avc: denied { node_bind } for pid=10628 comm="syz.3.1316" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 333.441419][ T30] audit: type=1400 audit(1742918989.807:2133): avc: denied { map_read map_write } for pid=10628 comm="syz.3.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 333.472216][T10614] [U] è [ 333.477163][ T30] audit: type=1400 audit(1742918989.863:2134): avc: denied { read write } for pid=10628 comm="syz.3.1316" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 333.505208][ T30] audit: type=1400 audit(1742918989.863:2135): avc: denied { open } for pid=10628 comm="syz.3.1316" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 333.596070][T10624] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.629173][ T30] audit: type=1400 audit(1742918990.013:2136): avc: denied { prog_run } for pid=10628 comm="syz.3.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 333.642831][T10624] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.657670][ T30] audit: type=1400 audit(1742918990.031:2137): avc: denied { ioctl } for pid=10628 comm="syz.3.1316" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 333.694656][T10624] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.715566][ T30] audit: type=1400 audit(1742918990.087:2138): avc: denied { append } for pid=10631 comm="syz.2.1315" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 333.742766][ T30] audit: type=1400 audit(1742918990.087:2139): avc: denied { name_bind } for pid=10631 comm="syz.2.1315" src=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 333.775429][ T30] audit: type=1400 audit(1742918990.087:2140): avc: denied { read } for pid=10631 comm="syz.2.1315" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 333.938372][ T5869] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 334.201043][ T5943] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 334.224720][ T5869] usb 4-1: config 0 has an invalid interface number: 116 but max is 0 [ 334.233227][ T5869] usb 4-1: config 0 has no interface number 0 [ 334.241403][ T5869] usb 4-1: New USB device found, idVendor=106c, idProduct=acfb, bcdDevice=7f.7b [ 334.250673][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.258861][ T5869] usb 4-1: Product: syz [ 334.263070][ T5869] usb 4-1: Manufacturer: syz [ 334.267817][ T5869] usb 4-1: SerialNumber: syz [ 334.274095][ T5869] usb 4-1: config 0 descriptor?? [ 334.280737][ T5869] qmi_wwan 4-1:0.116: bogus CDC Union: master=0, slave=0 [ 334.288124][ T5869] qmi_wwan 4-1:0.116: probe with driver qmi_wwan failed with error -22 [ 334.362971][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.374399][ T5943] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 334.383648][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.393054][ T5943] usb 3-1: config 0 descriptor?? [ 334.516367][ T57] usb 4-1: USB disconnect, device number 36 [ 334.858183][T10649] syz.0.1321 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 334.903799][ T5943] usbhid 3-1:0.0: can't add hid device: -71 [ 334.917689][ T5943] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 334.934323][ T5943] usb 3-1: USB disconnect, device number 38 [ 335.396333][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'. [ 335.591002][ T5943] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 335.621866][T10663] xt_TPROXY: Can be used only with -p tcp or -p udp [ 335.761861][ T5943] usb 5-1: Using ep0 maxpacket: 16 [ 335.771804][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.784387][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.796337][ T5943] usb 5-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00 [ 335.808893][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.829027][ T5943] usb 5-1: config 0 descriptor?? [ 336.020986][T10666] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1326'. [ 336.030876][T10666] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1326'. [ 336.287210][ T5943] ntrig 0003:1B96:0006.000A: item fetching failed at offset 4/5 [ 336.369741][ T5943] ntrig 0003:1B96:0006.000A: parse failed [ 336.419567][T10671] syz.3.1328 uses old SIOCAX25GETINFO [ 336.606679][ T5943] ntrig 0003:1B96:0006.000A: probe with driver ntrig failed with error -22 [ 336.744800][T10668] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1328'. [ 336.757059][ T5943] usb 5-1: USB disconnect, device number 32 [ 336.779567][T10668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1328'. [ 338.751279][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 338.830401][ T30] audit: type=1400 audit(1742918994.802:2204): avc: denied { read } for pid=10702 comm="syz.4.1334" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 339.282784][ T30] audit: type=1400 audit(1742918994.802:2205): avc: denied { open } for pid=10702 comm="syz.4.1334" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 339.313197][ T30] audit: type=1400 audit(1742918994.802:2206): avc: denied { ioctl } for pid=10702 comm="syz.4.1334" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 339.329536][T10714] netlink: 'syz.3.1337': attribute type 10 has an invalid length. [ 339.354143][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.522117][ T30] audit: type=1400 audit(1742918994.877:2207): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 339.664173][ T30] audit: type=1400 audit(1742918994.877:2208): avc: denied { search } for pid=5176 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.669429][T10719] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1338'. [ 339.688339][ T30] audit: type=1400 audit(1742918994.877:2209): avc: denied { append } for pid=5176 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.718813][T10719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1338'. [ 339.719005][ T30] audit: type=1400 audit(1742918994.877:2210): avc: denied { open } for pid=5176 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.845962][ T30] audit: type=1400 audit(1742918994.877:2211): avc: denied { getattr } for pid=5176 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.917550][T10714] team0: Port device hsr_slave_0 added [ 339.963345][ T30] audit: type=1400 audit(1742918995.167:2212): avc: denied { map_create } for pid=10709 comm="syz.0.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 339.984638][ T30] audit: type=1400 audit(1742918995.167:2213): avc: denied { ioctl } for pid=10711 comm="syz.3.1337" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 341.054949][ T57] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 341.256819][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 341.276211][ T57] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 341.285718][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.368630][ T57] usb 5-1: Product: syz [ 341.382740][ T57] usb 5-1: Manufacturer: syz [ 341.548063][ T57] usb 5-1: SerialNumber: syz [ 341.567553][ T5869] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 341.585445][ T57] usb 5-1: config 0 descriptor?? [ 341.663898][T10758] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1351'. [ 341.673061][T10758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1351'. [ 341.922298][ T5869] usb 3-1: config 0 has an invalid interface number: 254 but max is 0 [ 341.943311][ T5869] usb 3-1: config 0 has no interface number 0 [ 341.962426][ T5869] usb 3-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=f1.99 [ 341.971518][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.048821][ T5869] usb 3-1: config 0 descriptor?? [ 342.058724][ T57] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 342.625218][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 342.788952][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 342.798225][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.806311][ T9] usb 4-1: Product: syz [ 342.810732][ T9] usb 4-1: Manufacturer: syz [ 342.815355][ T9] usb 4-1: SerialNumber: syz [ 342.821716][ T9] usb 4-1: config 0 descriptor?? [ 343.265504][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'. [ 343.285859][ T9] usb 4-1: Firmware version (0.0) predates our first public release. [ 343.294263][ T9] usb 4-1: Please update to version 0.2 or newer [ 343.342991][ T9] usb 4-1: USB disconnect, device number 37 [ 343.581789][T10745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.590464][T10745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.603598][ T57] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 343.615048][ T57] usb 5-1: USB disconnect, device number 33 [ 343.654238][ T5869] usb 3-1: string descriptor 0 read error: -71 [ 343.677086][ T5869] mct_u232 3-1:0.254: MCT U232 converter detected [ 343.706400][ T5869] mct_u232 ttyUSB0: expected endpoint missing [ 343.716858][ T5869] usb 3-1: USB disconnect, device number 39 [ 343.724121][ T5869] mct_u232 3-1:0.254: device disconnected [ 343.798893][T10770] x_tables: duplicate underflow at hook 2 [ 343.808064][T10770] cifs: Bad value for 'port' [ 344.307140][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1357'. [ 345.160577][ T58] Bluetooth: hci5: Frame reassembly failed (-84) [ 345.165019][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 345.165035][ T30] audit: type=1400 audit(1742919000.798:2269): avc: denied { mount } for pid=10799 comm="syz.3.1364" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 345.177069][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1363'. [ 345.518166][T10798] geneve2: entered promiscuous mode [ 345.715433][ T30] audit: type=1400 audit(1742919001.069:2270): avc: denied { create } for pid=10797 comm="syz.2.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 345.739237][T10800] netlink: 'syz.3.1364': attribute type 2 has an invalid length. [ 345.748728][T10802] team0: No ports can be present during mode change [ 345.960724][ T30] audit: type=1400 audit(1742919001.219:2271): avc: denied { write } for pid=10799 comm="syz.3.1364" name="001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 345.987322][ T30] audit: type=1400 audit(1742919001.293:2272): avc: denied { map } for pid=10799 comm="syz.3.1364" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 346.060044][ T30] audit: type=1400 audit(1742919001.640:2273): avc: denied { getopt } for pid=10811 comm="syz.4.1365" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 346.172242][ T30] audit: type=1400 audit(1742919001.742:2274): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 346.623154][ T30] audit: type=1400 audit(1742919002.163:2275): avc: denied { create } for pid=10818 comm="syz.0.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 346.624673][T10819] FAULT_INJECTION: forcing a failure. [ 346.624673][T10819] name failslab, interval 1, probability 0, space 0, times 0 [ 346.656605][T10819] CPU: 1 UID: 0 PID: 10819 Comm: syz.0.1368 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 346.656628][T10819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 346.656638][T10819] Call Trace: [ 346.656643][T10819] [ 346.656649][T10819] dump_stack_lvl+0x16c/0x1f0 [ 346.656682][T10819] should_fail_ex+0x50a/0x650 [ 346.656700][T10819] ? kmem_cache_alloc_node_noprof+0x5f/0x3b0 [ 346.656729][T10819] should_failslab+0xc2/0x120 [ 346.656763][T10819] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 346.656785][T10819] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 346.656809][T10819] ? capable+0xd4/0x110 [ 346.656834][T10819] ? __alloc_skb+0x2b1/0x380 [ 346.656864][T10819] __alloc_skb+0x2b1/0x380 [ 346.656888][T10819] ? __pfx___alloc_skb+0x10/0x10 [ 346.656911][T10819] ? ip_select_ident_segs+0x480/0x480 [ 346.656934][T10819] ? skb_page_frag_refill+0x11b/0x350 [ 346.656957][T10819] ? sk_page_frag_refill+0x6c/0x300 [ 346.656981][T10819] __ip_append_data+0x3117/0x4200 [ 346.657008][T10819] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 346.657038][T10819] ? __pfx___ip_append_data+0x10/0x10 [ 346.657063][T10819] ? do_raw_spin_lock+0x12d/0x2c0 [ 346.657087][T10819] ip_append_data+0x10f/0x1a0 [ 346.657111][T10819] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 346.657136][T10819] udp_sendmsg+0x9f2/0x2a30 [ 346.657164][T10819] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 346.657189][T10819] ? avc_has_perm_noaudit+0x143/0x3a0 [ 346.657211][T10819] ? __pfx_udp_sendmsg+0x10/0x10 [ 346.657234][T10819] ? avc_has_perm+0x11b/0x1c0 [ 346.657254][T10819] ? __lock_acquire+0x5b6/0x1b80 [ 346.657275][T10819] ? sock_has_perm+0x25a/0x2f0 [ 346.657296][T10819] ? __pfx_sock_has_perm+0x10/0x10 [ 346.657324][T10819] ? __fget_files+0x20e/0x3b0 [ 346.657346][T10819] ? __pfx_udp_sendmsg+0x10/0x10 [ 346.657370][T10819] inet_sendmsg+0x105/0x140 [ 346.657387][T10819] __sys_sendto+0x42a/0x4f0 [ 346.657410][T10819] ? __pfx___sys_sendto+0x10/0x10 [ 346.657446][T10819] ? ksys_write+0x1ba/0x250 [ 346.657467][T10819] ? __pfx_ksys_write+0x10/0x10 [ 346.657488][T10819] __x64_sys_sendto+0xe0/0x1c0 [ 346.657509][T10819] ? do_syscall_64+0x91/0x250 [ 346.657525][T10819] ? lockdep_hardirqs_on+0x7c/0x110 [ 346.657551][T10819] do_syscall_64+0xcd/0x250 [ 346.657567][T10819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.657590][T10819] RIP: 0033:0x7fa8a998d169 [ 346.657604][T10819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.657620][T10819] RSP: 002b:00007fa8aa87d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 346.657637][T10819] RAX: ffffffffffffffda RBX: 00007fa8a9ba5fa0 RCX: 00007fa8a998d169 [ 346.657648][T10819] RDX: 000000000000fdbe RSI: 0000200000000100 RDI: 0000000000000005 [ 346.657658][T10819] RBP: 00007fa8aa87d090 R08: 0000000000000000 R09: 0000000011000a00 [ 346.657668][T10819] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000001 [ 346.657678][T10819] R13: 0000000000000000 R14: 00007fa8a9ba5fa0 R15: 00007ffc38407d38 [ 346.657697][T10819] [ 346.963488][ T5869] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 347.036740][ T30] audit: type=1400 audit(1742919002.547:2276): avc: denied { map } for pid=10822 comm="syz.0.1370" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 347.071790][ T30] audit: type=1400 audit(1742919002.547:2277): avc: denied { read write } for pid=10822 comm="syz.0.1370" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 347.100620][ T30] audit: type=1400 audit(1742919002.584:2278): avc: denied { read write } for pid=10820 comm="syz.1.1369" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 347.147387][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 347.193318][ T5869] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 347.251359][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.271999][ T5869] usb 4-1: Product: syz [ 347.279990][ T5869] usb 4-1: Manufacturer: syz [ 347.305754][ T5869] usb 4-1: SerialNumber: syz [ 347.324954][ T5869] usb 4-1: config 0 descriptor?? [ 347.350543][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 347.353068][ T5820] Bluetooth: hci5: command 0x1003 tx timeout [ 347.619963][ T5869] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 348.436724][T10844] ucma_write: process 969 (syz.4.1377) changed security contexts after opening file descriptor, this is not allowed. [ 348.553396][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1378'. [ 349.568009][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1381'. [ 349.954302][ T57] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 350.687756][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 350.687788][ T30] audit: type=1400 audit(1742919005.437:2289): avc: denied { write } for pid=10860 comm="syz.0.1383" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 350.719587][T10853] [U]  [ 350.769441][ T30] audit: type=1400 audit(1742919006.045:2290): avc: denied { create } for pid=10868 comm="syz.1.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 350.912729][ T57] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 350.923887][ T57] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.940498][ T30] audit: type=1400 audit(1742919006.204:2291): avc: denied { create } for pid=10868 comm="syz.1.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 350.969805][ T57] usb 5-1: config 0 interface 0 has no altsetting 0 [ 350.972656][T10817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.985515][T10817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.006917][ T5869] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 351.018622][ T5869] usb 4-1: USB disconnect, device number 38 [ 351.045714][ T57] usb 5-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00 [ 351.069045][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.082215][ T57] usb 5-1: config 0 descriptor?? [ 351.088011][T10855] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 351.233694][ T30] audit: type=1400 audit(1742919006.476:2292): avc: denied { connect } for pid=10873 comm="syz.0.1386" lport=250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 351.570931][ T57] wacom 0003:056A:0301.000B: Unknown device_type for 'HID 056a:0301'. Assuming pen. [ 351.605585][ T57] wacom 0003:056A:0301.000B: hidraw0: USB HID v1.01 Device [HID 056a:0301] on usb-dummy_hcd.4-1/input0 [ 351.635280][ T57] input: Wacom Bamboo One M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0301.000B/input/input16 [ 351.737062][ T30] audit: type=1400 audit(1742919006.943:2293): avc: denied { read } for pid=5179 comm="acpid" name="mouse1" dev="devtmpfs" ino=3034 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 351.863420][ T30] audit: type=1400 audit(1742919006.943:2294): avc: denied { open } for pid=5179 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3034 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 351.967260][ T30] audit: type=1400 audit(1742919007.037:2295): avc: denied { ioctl } for pid=5179 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3034 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 352.588863][ T30] audit: type=1400 audit(1742919007.738:2296): avc: denied { read write } for pid=10889 comm="syz.2.1390" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 352.731440][ T30] audit: type=1400 audit(1742919007.738:2297): avc: denied { ioctl open } for pid=10889 comm="syz.2.1390" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 352.871977][T10895] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1391'. [ 352.919851][ T30] audit: type=1400 audit(1742919008.010:2298): avc: denied { write } for pid=10891 comm="syz.0.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 354.054858][T10899] netlink: 'syz.3.1393': attribute type 1 has an invalid length. [ 354.083728][T10899] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.194580][ T973] usb 5-1: USB disconnect, device number 34 [ 354.291942][T10905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1393'. [ 355.675776][ T973] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 355.967101][ T973] usb 5-1: Using ep0 maxpacket: 8 [ 355.975674][ T973] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 355.991730][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.000447][ T973] usb 5-1: Product: syz [ 356.004880][ T973] usb 5-1: Manufacturer: syz [ 356.010351][ T973] usb 5-1: SerialNumber: syz [ 356.023235][ T973] usb 5-1: config 0 descriptor?? [ 356.466365][ T973] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 356.538453][T10913] team0: No ports can be present during mode change [ 356.981806][T10939] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1404'. [ 357.011573][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 357.011596][ T30] audit: type=1400 audit(1742919011.882:2312): avc: denied { read } for pid=10938 comm="syz.0.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 357.037919][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.369450][ T30] audit: type=1400 audit(1742919012.219:2313): avc: denied { create } for pid=10943 comm="syz.2.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 357.430524][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1406'. [ 357.485201][ T30] audit: type=1400 audit(1742919012.219:2314): avc: denied { write } for pid=10943 comm="syz.2.1405" path="socket:[32083]" dev="sockfs" ino=32083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 357.624111][ T30] audit: type=1400 audit(1742919012.219:2315): avc: denied { nlmsg_read } for pid=10943 comm="syz.2.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 357.666842][ T30] audit: type=1400 audit(1742919012.275:2316): avc: denied { create } for pid=10945 comm="syz.2.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 357.687771][ T30] audit: type=1400 audit(1742919012.275:2317): avc: denied { write } for pid=10945 comm="syz.2.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 357.708629][ T30] audit: type=1400 audit(1742919012.294:2318): avc: denied { read } for pid=10945 comm="syz.2.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 357.729053][ T30] audit: type=1400 audit(1742919012.294:2319): avc: denied { append } for pid=10945 comm="syz.2.1406" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 357.751912][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.866419][ T57] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 357.922141][ T30] audit: type=1400 audit(1742919012.733:2320): avc: denied { setopt } for pid=10953 comm="syz.1.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 357.950932][ T30] audit: type=1400 audit(1742919012.743:2321): avc: denied { getopt } for pid=10953 comm="syz.1.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 357.985041][T10915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.995033][T10915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.011955][ T973] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 358.023815][ T973] usb 5-1: USB disconnect, device number 35 [ 358.057041][ T57] usb 4-1: Using ep0 maxpacket: 16 [ 358.066960][ T57] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.077960][ T57] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 358.090417][ T57] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 358.101300][ T57] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 358.112474][ T57] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.224333][ T57] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 358.245507][ T57] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 358.255689][ T57] usb 4-1: Manufacturer: syz [ 358.268081][ T57] usb 4-1: config 0 descriptor?? [ 358.554240][ T57] rc_core: IR keymap rc-hauppauge not found [ 358.560496][ T57] Registered IR keymap rc-empty [ 358.565926][ T57] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 358.586635][ T57] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 358.608760][ T57] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 358.621234][ T57] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input19 [ 358.635119][ T57] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 358.661255][ T57] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 358.683369][ T57] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 358.714999][ T57] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 358.737103][ T57] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 358.780014][ T57] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.099510][ T57] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.134052][T10950] 9pnet_fd: Insufficient options for proto=fd [ 359.142277][ T57] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.143405][T10950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.162021][T10950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.174379][ T57] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.198956][ T57] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.228230][ T57] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.252397][ T57] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 90 [ 359.262543][ T57] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 359.471416][T10975] team0: No ports can be present during mode change [ 360.717828][T10993] sp0: Synchronizing with TNC [ 360.760630][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1421'. [ 360.776066][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'. [ 360.788051][T10993] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1421'. [ 360.806211][ T973] usb 4-1: USB disconnect, device number 39 [ 360.923295][ T5832] block nbd0: Receive control failed (result -32) [ 361.412803][ T973] IPVS: starting estimator thread 0... [ 361.515502][T11003] IPVS: using max 53 ests per chain, 127200 per kthread [ 361.729376][ T24] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 362.739878][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 362.739895][ T30] audit: type=1400 audit(1742919017.242:2338): avc: denied { setattr } for pid=11020 comm="syz.3.1428" name="SCTP" dev="sockfs" ino=32990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 362.843503][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 362.852335][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 362.861436][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.872539][ T24] usb 3-1: Product: syz [ 362.877126][ T24] usb 3-1: Manufacturer: syz [ 362.881942][ T24] usb 3-1: SerialNumber: syz [ 362.892027][ T24] usb 3-1: config 0 descriptor?? [ 363.063479][ T30] audit: type=1400 audit(1742919017.532:2339): avc: denied { create } for pid=11022 comm="syz.4.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 363.100234][ T30] audit: type=1400 audit(1742919017.541:2340): avc: denied { ioctl } for pid=11022 comm="syz.4.1429" path="socket:[32368]" dev="sockfs" ino=32368 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 363.335101][ T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 363.641023][ T30] audit: type=1400 audit(1742919018.084:2341): avc: denied { mount } for pid=11027 comm="syz.3.1430" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 363.953103][ T57] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 364.147943][ T57] usb 4-1: config 0 has an invalid interface number: 125 but max is 0 [ 364.159666][ T57] usb 4-1: config 0 has no interface number 0 [ 364.168227][ T57] usb 4-1: New USB device found, idVendor=0421, idProduct=007b, bcdDevice=ed.44 [ 364.180861][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.189466][ T57] usb 4-1: Product: syz [ 364.193961][ T57] usb 4-1: Manufacturer: syz [ 364.202706][ T57] usb 4-1: SerialNumber: syz [ 364.209371][ T57] usb 4-1: config 0 descriptor?? [ 364.216890][ T57] rndis_host 4-1:0.125: invalid descriptor buffer length [ 364.227722][ T57] usb 4-1: bad CDC descriptors [ 364.235037][ T57] cdc_acm 4-1:0.125: invalid descriptor buffer length [ 364.434313][ T5869] usb 4-1: USB disconnect, device number 40 [ 364.661441][T11005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.672071][T11005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.683971][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 364.697589][ T24] usb 3-1: USB disconnect, device number 40 [ 365.115262][ T30] audit: type=1400 audit(1742919019.459:2342): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 365.215522][T11046] xt_TPROXY: Can be used only with -p tcp or -p udp [ 365.496462][ T30] audit: type=1400 audit(1742919019.824:2343): avc: denied { write } for pid=11049 comm="syz.1.1439" name="event2" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 365.537361][ T30] audit: type=1400 audit(1742919019.852:2344): avc: denied { ioctl } for pid=11049 comm="syz.1.1439" path="/dev/input/event2" dev="devtmpfs" ino=928 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 365.964725][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 366.268000][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.287488][ T24] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 366.325214][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.454658][ T24] usb 4-1: config 0 descriptor?? [ 366.632479][T11070] xt_TPROXY: Can be used only with -p tcp or -p udp [ 367.299047][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 367.306683][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 367.325099][ T24] usb 4-1: USB disconnect, device number 41 [ 367.615890][ T30] audit: type=1400 audit(1742919021.797:2345): avc: denied { ioctl } for pid=11079 comm="syz.4.1448" path="socket:[33139]" dev="sockfs" ino=33139 ioctlcmd=0x5645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 367.643497][ T30] audit: type=1400 audit(1742919021.797:2346): avc: denied { getopt } for pid=11079 comm="syz.4.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 367.671874][ T30] audit: type=1400 audit(1742919021.854:2347): avc: denied { read } for pid=11079 comm="syz.4.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 367.979209][T11098] wireguard0: entered promiscuous mode [ 367.984857][T11098] wireguard0: entered allmulticast mode [ 368.220573][ T24] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 368.393877][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.409948][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 368.427560][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 368.446016][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 368.457288][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.465594][ T24] usb 4-1: Product: syz [ 368.469984][ T24] usb 4-1: Manufacturer: syz [ 368.474952][ T24] usb 4-1: SerialNumber: syz [ 368.704752][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 368.704787][ T30] audit: type=1400 audit(1742919022.817:2351): avc: denied { setopt } for pid=11090 comm="syz.3.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 368.730484][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.737614][T11096] netlink: 'syz.3.1452': attribute type 4 has an invalid length. [ 368.754021][T11096] netlink: 'syz.3.1452': attribute type 4 has an invalid length. [ 368.767806][ T30] audit: type=1400 audit(1742919022.882:2352): avc: denied { ioctl } for pid=11090 comm="syz.3.1452" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 369.916089][ T30] audit: type=1400 audit(1742919023.949:2353): avc: denied { map } for pid=11131 comm="syz.2.1463" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 369.986619][ T30] audit: type=1400 audit(1742919023.949:2354): avc: denied { execute } for pid=11131 comm="syz.2.1463" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 370.026947][T11136] team0: No ports can be present during mode change [ 370.033604][ T30] audit: type=1400 audit(1742919023.977:2355): avc: denied { setopt } for pid=11131 comm="syz.2.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 370.192069][ T30] audit: type=1400 audit(1742919024.211:2356): avc: denied { accept } for pid=11131 comm="syz.2.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 370.335060][T11145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1464'. [ 370.839589][T11153] xt_TPROXY: Can be used only with -p tcp or -p udp [ 371.076485][ T30] audit: type=1400 audit(1742919025.043:2357): avc: denied { write } for pid=11156 comm="syz.2.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 371.148729][ T24] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 371.200230][ T24] usb 4-1: USB disconnect, device number 42 [ 372.732616][ T30] audit: type=1400 audit(1742919026.147:2358): avc: denied { create } for pid=11167 comm="syz.4.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 372.854484][ T30] audit: type=1400 audit(1742919026.147:2359): avc: denied { listen } for pid=11167 comm="syz.4.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 373.111700][ T30] audit: type=1400 audit(1742919026.942:2360): avc: denied { ioctl } for pid=11172 comm="syz.2.1472" path="socket:[33351]" dev="sockfs" ino=33351 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 373.136480][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.156837][T11181] IPVS: fo: FWM 4 0x00000004 - no destination available [ 373.200806][T11183] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1475'. [ 373.277920][T11190] netlink: 'syz.1.1477': attribute type 4 has an invalid length. [ 373.505116][T11198] xt_TPROXY: Can be used only with -p tcp or -p udp [ 373.563954][ T973] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 373.829638][ T973] usb 4-1: Using ep0 maxpacket: 32 [ 374.090673][ T973] usb 4-1: config 8 has an invalid interface number: 164 but max is 0 [ 374.101204][ T973] usb 4-1: config 8 has no interface number 0 [ 374.107359][ T973] usb 4-1: config 8 interface 164 has no altsetting 0 [ 374.132091][ T973] usb 4-1: New USB device found, idVendor=03f0, idProduct=0b39, bcdDevice=1f.ec [ 374.149539][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.158740][ T973] usb 4-1: Product: syz [ 374.165751][ T973] usb 4-1: Manufacturer: syz [ 374.170429][ T973] usb 4-1: SerialNumber: syz [ 374.188831][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 374.188845][ T30] audit: type=1400 audit(1742919027.952:2364): avc: denied { write } for pid=11185 comm="syz.4.1476" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 374.251717][ T973] pl2303 4-1:8.164: required endpoints missing [ 374.729187][ T973] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 375.073772][ T30] audit: type=1400 audit(1742919028.747:2365): avc: denied { sqpoll } for pid=11191 comm="syz.3.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 375.109142][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.167471][ T973] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 375.175068][ T30] audit: type=1400 audit(1742919028.766:2366): avc: denied { bind } for pid=11191 comm="syz.3.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 375.202001][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.236275][ T973] usb 5-1: config 0 descriptor?? [ 375.918132][ T973] usbhid 5-1:0.0: can't add hid device: -71 [ 375.924436][ T973] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 375.939837][ T973] usb 5-1: USB disconnect, device number 36 [ 376.513291][ T5869] usb 4-1: USB disconnect, device number 43 [ 376.550311][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1489'. [ 376.629182][T11238] openvswitch: netlink: Duplicate key (type 32). [ 376.768924][ T30] audit: type=1400 audit(1742919030.366:2367): avc: denied { bind } for pid=11241 comm="syz.2.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 378.150376][ T5819] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 378.374588][ T5819] usb 3-1: device descriptor read/64, error -71 [ 379.448434][ T5819] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 379.882264][ T5819] usb 3-1: device descriptor read/64, error -71 [ 380.000593][ T5819] usb usb3-port1: attempt power cycle [ 380.218819][ T30] audit: type=1400 audit(1742919033.593:2368): avc: denied { setattr } for pid=11281 comm="syz.2.1504" name="net" dev="proc" ino=31435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=dir permissive=1 [ 380.241287][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.252433][ T30] audit: type=1400 audit(1742919033.621:2369): avc: denied { create } for pid=11281 comm="syz.2.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 380.276212][ T30] audit: type=1400 audit(1742919033.640:2370): avc: denied { bind } for pid=11281 comm="syz.2.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 380.303928][ T30] audit: type=1400 audit(1742919033.640:2371): avc: denied { connect } for pid=11281 comm="syz.2.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 380.342886][ T30] audit: type=1400 audit(1742919033.640:2372): avc: denied { write } for pid=11281 comm="syz.2.1504" path="socket:[33975]" dev="sockfs" ino=33975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 380.366862][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.940412][ T5869] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 381.109490][ T5869] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 381.111412][ T30] audit: type=1400 audit(1742919034.425:2373): avc: denied { read } for pid=11293 comm="syz.4.1508" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 381.121615][ T5869] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 381.147398][ T30] audit: type=1400 audit(1742919034.425:2374): avc: denied { open } for pid=11293 comm="syz.4.1508" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 381.201292][ T5869] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 381.216376][ T30] audit: type=1400 audit(1742919034.491:2375): avc: denied { ioctl } for pid=11293 comm="syz.4.1508" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 381.241543][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.247903][T11297] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 381.452264][ T5869] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 381.462069][ T5869] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 381.539265][ T5869] usb 4-1: Manufacturer: syz [ 381.548335][ T5869] usb 4-1: SerialNumber: syz [ 381.562967][T11292] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 382.644724][ T5869] yealink 4-1:36.0: invalid payload size 64, expected 16 [ 382.655772][ T5869] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input20 [ 382.678036][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 382.685300][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 382.692301][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 382.699337][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 382.706334][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 382.713281][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 382.720356][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 382.727344][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 382.734288][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 382.741038][ C0] yealink 4-1:36.0: unexpected response 0 [ 382.747089][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 382.754035][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 382.760829][ C0] yealink 4-1:36.0: unexpected response 0 [ 382.766905][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 382.778592][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 382.785442][ C0] yealink 4-1:36.0: unexpected response 0 [ 382.791377][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 382.798305][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 382.805390][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 382.812390][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 382.819431][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 382.826233][ C0] yealink 4-1:36.0: unexpected response 0 [ 382.832159][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 382.839123][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 382.845900][ C0] yealink 4-1:36.0: unexpected response 0 [ 382.851840][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 382.858808][ C0] yealink 4-1:36.0: urb_irq_callback - urb status -71 [ 382.865743][ C0] yealink 4-1:36.0: unexpected response 0 [ 382.871595][ T5869] usb 4-1: USB disconnect, device number 44 [ 382.871642][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 382.871654][ C0] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -19 [ 383.213837][ T9] IPVS: starting estimator thread 0... [ 383.356703][T11320] IPVS: using max 44 ests per chain, 105600 per kthread [ 383.471015][ T30] audit: type=1400 audit(1742919036.633:2376): avc: denied { read } for pid=11322 comm="syz.3.1516" name="/" dev="configfs" ino=1200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 383.509624][ T30] audit: type=1400 audit(1742919036.633:2377): avc: denied { open } for pid=11322 comm="syz.3.1516" path="/300/file0" dev="configfs" ino=1200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 386.045566][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1526'. [ 387.084841][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 387.084896][ T30] audit: type=1400 audit(1742919040.010:2384): avc: denied { read write } for pid=11368 comm="syz.2.1530" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 387.463695][ T30] audit: type=1400 audit(1742919040.084:2385): avc: denied { open } for pid=11368 comm="syz.2.1530" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 387.487779][ T30] audit: type=1400 audit(1742919040.272:2386): avc: denied { mount } for pid=11366 comm="syz.0.1529" name="/" dev="ramfs" ino=34960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 387.610805][ T30] audit: type=1400 audit(1742919040.440:2387): avc: denied { shutdown } for pid=11372 comm="syz.1.1531" lport=39165 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 387.681258][T11374] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1529'. [ 387.695545][ T30] audit: type=1400 audit(1742919040.440:2388): avc: denied { getopt } for pid=11372 comm="syz.1.1531" lport=39165 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 387.752431][ T30] audit: type=1400 audit(1742919040.449:2389): avc: denied { execute_no_trans } for pid=11368 comm="syz.2.1530" path="/298/file1" dev="tmpfs" ino=1613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 387.882787][ T30] audit: type=1400 audit(1742919040.758:2390): avc: denied { append } for pid=11387 comm="syz.1.1538" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 388.000646][ T30] audit: type=1400 audit(1742919040.870:2391): avc: denied { getopt } for pid=11387 comm="syz.1.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 388.156552][ T5819] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 388.489601][ T30] audit: type=1400 audit(1742919041.226:2392): avc: denied { setopt } for pid=11390 comm="syz.3.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 388.637708][ T30] audit: type=1400 audit(1742919041.263:2393): avc: denied { bind } for pid=11390 comm="syz.3.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 388.638984][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.668600][ T5819] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 388.773545][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.783137][ T5819] usb 3-1: config 0 descriptor?? [ 388.789731][ T5819] pwc: Askey VC010 type 2 USB webcam detected. [ 389.030333][T11404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1542'. [ 389.797873][ T5819] pwc: recv_control_msg error -32 req 02 val 2b00 [ 389.805540][ T5819] pwc: recv_control_msg error -32 req 02 val 2700 [ 389.812645][ T5819] pwc: recv_control_msg error -32 req 02 val 2c00 [ 389.846885][ T5819] pwc: recv_control_msg error -32 req 04 val 1000 [ 389.878235][ T5819] pwc: recv_control_msg error -32 req 04 val 1300 [ 389.922965][ T5819] pwc: recv_control_msg error -32 req 04 val 1400 [ 390.177651][ T5819] pwc: recv_control_msg error -32 req 02 val 2000 [ 390.251479][ T5819] pwc: recv_control_msg error -32 req 02 val 2100 [ 390.256193][T11419] FAULT_INJECTION: forcing a failure. [ 390.256193][T11419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.260111][ T5819] pwc: recv_control_msg error -32 req 04 val 1500 [ 390.271223][T11419] CPU: 0 UID: 0 PID: 11419 Comm: syz.1.1544 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 390.271245][T11419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 390.271253][T11419] Call Trace: [ 390.271258][T11419] [ 390.271263][T11419] dump_stack_lvl+0x16c/0x1f0 [ 390.271295][T11419] should_fail_ex+0x50a/0x650 [ 390.271315][T11419] _copy_to_iter+0x2a1/0x1560 [ 390.271334][T11419] ? chacha_block_generic+0x18a/0x270 [ 390.271348][T11419] ? find_held_lock+0x2b/0x80 [ 390.271369][T11419] ? __pfx__copy_to_iter+0x10/0x10 [ 390.271388][T11419] ? lockdep_hardirqs_on+0x7c/0x110 [ 390.271410][T11419] ? crng_make_state+0x48e/0x6d0 [ 390.271437][T11419] get_random_bytes_user+0x180/0x3c0 [ 390.271460][T11419] ? __pfx_get_random_bytes_user+0x10/0x10 [ 390.271485][T11419] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 390.271513][T11419] ? import_ubuf+0x1b6/0x220 [ 390.271530][T11419] __x64_sys_getrandom+0x184/0x290 [ 390.271545][T11419] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 390.271559][T11419] ? fput+0x70/0xf0 [ 390.271575][T11419] ? rcu_is_watching+0x12/0xc0 [ 390.271598][T11419] do_syscall_64+0xcd/0x250 [ 390.271613][T11419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.271634][T11419] RIP: 0033:0x7f07eb38d169 [ 390.271646][T11419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.271661][T11419] RSP: 002b:00007f07ec138038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 390.271676][T11419] RAX: ffffffffffffffda RBX: 00007f07eb5a6080 RCX: 00007f07eb38d169 [ 390.271686][T11419] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 390.271695][T11419] RBP: 00007f07ec138090 R08: 0000000000000000 R09: 0000000000000000 [ 390.271703][T11419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.271712][T11419] R13: 0000000000000000 R14: 00007f07eb5a6080 R15: 00007ffedcedf328 [ 390.271728][T11419] [ 390.743174][ T5819] pwc: recv_control_msg error -32 req 02 val 2500 [ 390.760700][ T5819] pwc: recv_control_msg error -32 req 02 val 2400 [ 390.915890][ T5819] pwc: recv_control_msg error -32 req 02 val 2600 [ 390.924377][ T5819] pwc: recv_control_msg error -32 req 02 val 2900 [ 391.480152][ T5819] pwc: recv_control_msg error -71 req 02 val 2800 [ 391.523867][ T5819] pwc: recv_control_msg error -71 req 04 val 1100 [ 391.545963][ T5819] pwc: recv_control_msg error -71 req 04 val 1200 [ 391.556377][ T5819] pwc: Registered as video103. [ 391.576782][ T5819] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 391.605604][ T5819] usb 3-1: USB disconnect, device number 44 [ 392.208639][ T5819] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 392.479614][ T5819] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 392.495508][ T5819] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 392.507167][ T5819] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 392.518882][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 392.527622][ T5819] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 392.537133][ T5819] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 392.549303][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 392.592303][ T5819] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 392.663841][ T5819] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 392.985742][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 392.985758][ T30] audit: type=1400 audit(1742919045.529:2400): avc: denied { read } for pid=11464 comm="syz.4.1559" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 393.033299][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 393.045665][ T30] audit: type=1400 audit(1742919045.529:2401): avc: denied { open } for pid=11464 comm="syz.4.1559" path="/344/file0/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 393.070076][ T5819] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.080811][ T30] audit: type=1400 audit(1742919045.622:2402): avc: denied { listen } for pid=11464 comm="syz.4.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 393.101057][ T5819] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.112498][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 393.121305][ T5819] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.130857][ T5819] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.154028][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 393.182571][ T5819] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.202589][ T5819] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.245461][ T30] audit: type=1400 audit(1742919045.772:2403): avc: denied { bind } for pid=11489 comm="syz.4.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 393.271313][ T30] audit: type=1400 audit(1742919045.800:2404): avc: denied { listen } for pid=11489 comm="syz.4.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 393.360110][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 393.394041][ T30] audit: type=1400 audit(1742919045.912:2405): avc: denied { bind } for pid=11494 comm="syz.1.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 393.527794][ T5819] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.647010][ T5819] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.683795][ T30] audit: type=1400 audit(1742919045.940:2406): avc: denied { ioctl } for pid=11494 comm="syz.1.1566" path="socket:[35131]" dev="sockfs" ino=35131 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 393.792635][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 393.814206][ T30] audit: type=1400 audit(1742919045.940:2407): avc: denied { read } for pid=11494 comm="syz.1.1566" path="socket:[35131]" dev="sockfs" ino=35131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 393.845036][ T5819] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.859373][ T5819] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 393.865319][ T973] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 393.883034][ T5819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 393.899157][ T5819] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 393.908652][ T5819] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 393.917358][T11490] IPVS: Scheduler module ip_vs_sip not found [ 393.924265][ T5819] usb 3-1: Product: syz [ 393.928632][ T5819] usb 3-1: Manufacturer: syz [ 393.933998][ T5819] usb 3-1: SerialNumber: syz [ 393.940383][ T5819] usb 3-1: config 0 descriptor?? [ 393.948284][ T5819] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 394.020055][T11503] mkiss: ax0: crc mode is auto. [ 394.047160][ T973] usb 4-1: Using ep0 maxpacket: 16 [ 394.058731][ T973] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 394.079094][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 394.101344][ T973] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 394.110442][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.121865][ T973] usb 4-1: Product: syz [ 394.126077][ T973] usb 4-1: Manufacturer: syz [ 394.137502][ T973] usb 4-1: SerialNumber: syz [ 394.193326][ T30] audit: type=1400 audit(1742919046.651:2408): avc: denied { mount } for pid=11446 comm="syz.2.1553" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 394.194054][T11447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.228358][ T973] usb 4-1: config 0 descriptor?? [ 394.238555][ T973] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 394.262446][T11447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.272188][T11505] input: syz0 as /devices/virtual/input/input22 [ 394.280181][ T973] usb 3-1: USB disconnect, device number 45 [ 394.287908][ T973] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 394.306610][T11508] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1570'. [ 394.322063][ T30] audit: type=1400 audit(1742919046.782:2409): avc: denied { name_bind } for pid=11507 comm="syz.4.1570" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 394.403110][T11513] FAULT_INJECTION: forcing a failure. [ 394.403110][T11513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.417085][T11513] CPU: 0 UID: 0 PID: 11513 Comm: syz.0.1572 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 394.417113][T11513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 394.417122][T11513] Call Trace: [ 394.417127][T11513] [ 394.417133][T11513] dump_stack_lvl+0x16c/0x1f0 [ 394.417166][T11513] should_fail_ex+0x50a/0x650 [ 394.417187][T11513] _copy_from_user+0x2e/0xd0 [ 394.417207][T11513] copy_msghdr_from_user+0x99/0x160 [ 394.417233][T11513] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 394.417267][T11513] ___sys_sendmsg+0xff/0x1e0 [ 394.417294][T11513] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.417319][T11513] ? __lock_acquire+0x5b6/0x1b80 [ 394.417352][T11513] ? __fget_files+0x20e/0x3b0 [ 394.417380][T11513] __sys_sendmsg+0x16e/0x220 [ 394.417396][T11513] ? __pfx___sys_sendmsg+0x10/0x10 [ 394.417417][T11513] ? rcu_is_watching+0x12/0xc0 [ 394.417443][T11513] do_syscall_64+0xcd/0x250 [ 394.417460][T11513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.417483][T11513] RIP: 0033:0x7fa8a998d169 [ 394.417496][T11513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.417512][T11513] RSP: 002b:00007fa8aa87d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.417529][T11513] RAX: ffffffffffffffda RBX: 00007fa8a9ba5fa0 RCX: 00007fa8a998d169 [ 394.417539][T11513] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 394.417549][T11513] RBP: 00007fa8aa87d090 R08: 0000000000000000 R09: 0000000000000000 [ 394.417558][T11513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.417567][T11513] R13: 0000000000000000 R14: 00007fa8a9ba5fa0 R15: 00007ffc38407d38 [ 394.417586][T11513] [ 394.773786][ T5819] usb 4-1: USB disconnect, device number 45 [ 395.680698][T11537] xt_TPROXY: Can be used only with -p tcp or -p udp [ 395.837618][ T973] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 395.913135][T11539] fuse: Unknown parameter '™’Q^í' [ 395.924387][T11539] overlayfs: overlapping lowerdir path [ 396.100990][ T973] usb 3-1: Using ep0 maxpacket: 16 [ 396.108752][ T973] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 396.117962][ T973] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 396.125702][ T973] usb 3-1: config 0 has no interface number 0 [ 396.134715][ T973] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 396.144786][ T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.153159][ T973] usb 3-1: Product: syz [ 396.157487][ T973] usb 3-1: Manufacturer: syz [ 396.162164][ T973] usb 3-1: SerialNumber: syz [ 396.183068][ T973] usb 3-1: config 0 descriptor?? [ 396.192369][ T973] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 396.199080][ T973] usb 3-1: No valid video chain found. [ 396.252094][T11550] libceph: resolve '0' (ret=-3): failed [ 396.358940][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.365620][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.410036][ T9] usb 3-1: USB disconnect, device number 46 [ 396.527649][ T5819] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 396.591495][ T973] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 396.720310][ T5819] usb 5-1: Using ep0 maxpacket: 8 [ 396.739194][ T5819] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.772992][ T5819] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 396.824759][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.835402][ T5819] usb 5-1: config 0 descriptor?? [ 396.842603][ T5819] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 396.848011][ T973] usb 4-1: device descriptor read/64, error -71 [ 397.334809][ T973] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 397.393843][ T5819] gspca_vc032x: reg_r err -110 [ 397.409187][ T5819] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 397.799551][ T973] usb 4-1: device descriptor read/64, error -71 [ 397.958436][ T973] usb usb4-port1: attempt power cycle [ 399.007630][ T973] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 399.194673][ T973] usb 4-1: device descriptor read/8, error -71 [ 399.465958][ T973] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 399.532519][ T24] usb 5-1: USB disconnect, device number 37 [ 399.610356][ T973] usb 4-1: device descriptor read/8, error -71 [ 399.665772][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 399.665791][ T30] audit: type=1400 audit(1742919051.777:2420): avc: denied { create } for pid=11590 comm="syz.4.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 399.728574][ T30] audit: type=1400 audit(1742919051.833:2421): avc: denied { setopt } for pid=11590 comm="syz.4.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 399.761372][ T973] usb usb4-port1: unable to enumerate USB device [ 399.790717][ T30] audit: type=1400 audit(1742919051.842:2422): avc: denied { write } for pid=11590 comm="syz.4.1595" path="socket:[34522]" dev="sockfs" ino=34522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 399.956724][T11598] tmpfs: Bad value for 'mpol' [ 400.181788][T11604] netlink: 'syz.4.1600': attribute type 1 has an invalid length. [ 400.191137][T11604] netlink: 'syz.4.1600': attribute type 10 has an invalid length. [ 400.199611][T11604] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1600'. [ 400.215781][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1597'. [ 401.260745][T11617] xt_TPROXY: Can be used only with -p tcp or -p udp [ 401.926083][ T30] audit: type=1400 audit(1742919053.854:2423): avc: denied { mounton } for pid=11619 comm="syz.1.1605" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 401.950030][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.993656][T11624] nfs: Unknown parameter '/dev/nullb0' [ 402.293306][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1607'. [ 402.306190][ T30] audit: type=1400 audit(1742919053.872:2424): avc: denied { bind } for pid=11619 comm="syz.1.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 402.559416][ T30] audit: type=1400 audit(1742919053.872:2425): avc: denied { name_bind } for pid=11619 comm="syz.1.1605" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 402.833462][ T30] audit: type=1400 audit(1742919053.872:2426): avc: denied { node_bind } for pid=11619 comm="syz.1.1605" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 402.854379][ C1] vkms_vblank_simulate: vblank timer overrun [ 403.059609][T11638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1607'. [ 404.618223][T11640] team0: No ports can be present during mode change [ 404.748341][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 404.958180][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.147175][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 405.162722][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.175438][ T9] usb 5-1: config 0 descriptor?? [ 405.219989][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 405.272454][ T30] audit: type=1400 audit(1742919057.034:2427): avc: denied { ioctl } for pid=11660 comm="syz.3.1618" path="socket:[34648]" dev="sockfs" ino=34648 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 405.689468][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 405.850131][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 405.871123][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 405.884392][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 405.903380][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 405.913865][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 405.924124][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 405.935894][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 405.943583][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 405.950742][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 405.957848][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 406.313835][T11682] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 406.320803][T11682] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 406.329599][T11682] vhci_hcd vhci_hcd.0: Device attached [ 406.355390][T11682] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(17) [ 406.362125][T11682] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 406.369918][T11682] vhci_hcd vhci_hcd.0: Device attached [ 406.405029][T11652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.418388][T11682] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(19) [ 406.425037][T11682] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 406.432842][T11682] vhci_hcd vhci_hcd.0: Device attached [ 406.462526][T11679] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(21) [ 406.462589][T11652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.469169][T11679] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 406.485462][T11679] vhci_hcd vhci_hcd.0: Device attached [ 406.527521][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 406.534792][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 406.548949][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 406.556280][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 406.567091][ T9] pwc: Registered as video103. [ 406.572748][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 406.588727][ T10] vhci_hcd: vhci_device speed not set [ 406.595385][ T9] usb 5-1: USB disconnect, device number 38 [ 406.655691][ T10] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 406.707597][T11695] FAULT_INJECTION: forcing a failure. [ 406.707597][T11695] name failslab, interval 1, probability 0, space 0, times 0 [ 406.721404][T11695] CPU: 0 UID: 0 PID: 11695 Comm: syz.0.1624 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 406.721420][T11695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 406.721428][T11695] Call Trace: [ 406.721433][T11695] [ 406.721439][T11695] dump_stack_lvl+0x16c/0x1f0 [ 406.721470][T11695] should_fail_ex+0x50a/0x650 [ 406.721482][T11695] ? __kmalloc_noprof+0xb8/0x510 [ 406.721501][T11695] ? lsm_blob_alloc+0x68/0x90 [ 406.721519][T11695] should_failslab+0xc2/0x120 [ 406.721543][T11695] __kmalloc_noprof+0xcb/0x510 [ 406.721564][T11695] ? __pfx_perf_event_init_task+0x10/0x10 [ 406.721581][T11695] ? audit_alloc+0xa3/0x7b0 [ 406.721598][T11695] lsm_blob_alloc+0x68/0x90 [ 406.721610][T11695] security_task_alloc+0x2d/0x260 [ 406.721621][T11695] copy_process+0x24cc/0x8cb0 [ 406.721631][T11695] ? kasan_save_stack+0x33/0x60 [ 406.721644][T11695] ? kasan_save_track+0x14/0x30 [ 406.721657][T11695] ? __kasan_kmalloc+0xaa/0xb0 [ 406.721675][T11695] ? vhost_task_create+0xe6/0x2e0 [ 406.721688][T11695] ? kvm_mmu_post_init_vm+0x1b7/0x370 [ 406.721703][T11695] ? kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 406.721716][T11695] ? kvm_vcpu_ioctl+0x5ea/0x1680 [ 406.721728][T11695] ? __x64_sys_ioctl+0x190/0x200 [ 406.721739][T11695] ? do_syscall_64+0xcd/0x250 [ 406.721749][T11695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.721769][T11695] ? __pfx_copy_process+0x10/0x10 [ 406.721784][T11695] ? lockdep_init_map_type+0x67/0x290 [ 406.721798][T11695] ? lockdep_init_map_type+0x67/0x290 [ 406.721809][T11695] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 406.721825][T11695] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 406.721837][T11695] vhost_task_create+0x1d3/0x2e0 [ 406.721851][T11695] ? __pfx_vhost_task_create+0x10/0x10 [ 406.721864][T11695] ? kvm_mmu_post_init_vm+0xb4/0x370 [ 406.721879][T11695] ? __pfx_vhost_task_fn+0x10/0x10 [ 406.721894][T11695] ? lockdep_hardirqs_on+0x7c/0x110 [ 406.721912][T11695] kvm_mmu_post_init_vm+0x1b7/0x370 [ 406.721928][T11695] kvm_arch_vcpu_ioctl_run+0x66/0x17f0 [ 406.721943][T11695] kvm_vcpu_ioctl+0x5ea/0x1680 [ 406.721955][T11695] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 406.721970][T11695] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 406.721982][T11695] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 406.721999][T11695] ? selinux_file_ioctl+0x180/0x270 [ 406.722009][T11695] ? selinux_file_ioctl+0xb4/0x270 [ 406.722020][T11695] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 406.722032][T11695] __x64_sys_ioctl+0x190/0x200 [ 406.722044][T11695] do_syscall_64+0xcd/0x250 [ 406.722054][T11695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.722068][T11695] RIP: 0033:0x7fa8a998d169 [ 406.722078][T11695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.722088][T11695] RSP: 002b:00007fa8aa87d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.722099][T11695] RAX: ffffffffffffffda RBX: 00007fa8a9ba5fa0 RCX: 00007fa8a998d169 [ 406.722106][T11695] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 406.722112][T11695] RBP: 00007fa8aa87d090 R08: 0000000000000000 R09: 0000000000000000 [ 406.722118][T11695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.722124][T11695] R13: 0000000000000000 R14: 00007fa8a9ba5fa0 R15: 00007ffc38407d38 [ 406.722135][T11695] [ 407.076873][T11687] vhci_hcd: connection closed [ 407.078906][T11685] vhci_hcd: connection closed [ 407.079838][T11683] vhci_hcd: connection reset by peer [ 407.084759][T11689] vhci_hcd: connection closed [ 407.093843][ T67] vhci_hcd: stop threads [ 407.105028][ T67] vhci_hcd: release socket [ 407.110764][ T67] vhci_hcd: disconnect device [ 407.118887][ T67] vhci_hcd: stop threads [ 407.123585][ T67] vhci_hcd: release socket [ 407.128176][ T67] vhci_hcd: disconnect device [ 407.136281][ T67] vhci_hcd: stop threads [ 407.140610][ T67] vhci_hcd: release socket [ 407.146711][ T67] vhci_hcd: disconnect device [ 407.151921][ T67] vhci_hcd: stop threads [ 407.156845][ T67] vhci_hcd: release socket [ 407.161411][ T67] vhci_hcd: disconnect device [ 407.418445][T11702] team0: No ports can be present during mode change [ 407.443399][T11702] program syz.4.1626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.827415][ T57] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 408.273124][ T30] audit: type=1400 audit(1742919059.719:2428): avc: denied { ioctl } for pid=11705 comm="syz.2.1627" path="socket:[35541]" dev="sockfs" ino=35541 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 408.396981][ T57] usb 5-1: Using ep0 maxpacket: 16 [ 408.404201][ T57] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 408.418600][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.429552][ T57] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 408.449078][ T57] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 408.460173][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.469660][ T57] usb 5-1: config 0 descriptor?? [ 409.136650][ T30] audit: type=1400 audit(1742919060.645:2429): avc: denied { write } for pid=11727 comm="syz.2.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 409.229452][ T30] audit: type=1400 audit(1742919060.719:2430): avc: denied { read } for pid=11727 comm="syz.2.1633" path="socket:[35573]" dev="sockfs" ino=35573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 410.669751][ T5819] usb 5-1: USB disconnect, device number 39 [ 412.208276][T11761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3584 sclass=netlink_route_socket pid=11761 comm=syz.1.1639 [ 412.311582][ T10] vhci_hcd: vhci_device speed not set [ 412.648733][ T30] audit: type=1400 audit(1742919063.722:2431): avc: denied { write } for pid=11760 comm="syz.2.1640" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 412.691362][T11761] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.016495][T11761] bridge_slave_0 (unregistering): left allmulticast mode [ 413.076422][T11761] bridge_slave_0 (unregistering): left promiscuous mode [ 413.124533][T11761] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.521629][ T30] audit: type=1400 audit(1742919064.742:2432): avc: denied { watch watch_reads } for pid=11782 comm="syz.2.1646" path="/322/file0" dev="tmpfs" ino=1741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 413.612139][T11786] xt_TPROXY: Can be used only with -p tcp or -p udp [ 413.782169][ T5869] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 413.893450][T11790] trusted_key: syz.3.1649 sent an empty control message without MSG_MORE. [ 414.125873][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 414.193682][ T5869] usb 3-1: config 1 has an invalid interface number: 111 but max is 1 [ 414.234640][ T5869] usb 3-1: config 1 has an invalid interface number: 62 but max is 1 [ 414.243720][ T5869] usb 3-1: config 1 has no interface number 0 [ 414.249815][ T5869] usb 3-1: config 1 has no interface number 1 [ 414.258213][ T5869] usb 3-1: config 1 interface 62 has no altsetting 0 [ 414.322795][ T5869] usb 3-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice=97.63 [ 414.338047][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.346248][ T5869] usb 3-1: Product: syz [ 414.351483][ T5869] usb 3-1: Manufacturer: syz [ 414.356121][ T5869] usb 3-1: SerialNumber: syz [ 414.445140][ T30] audit: type=1400 audit(1742919065.602:2433): avc: denied { read } for pid=11798 comm="syz.1.1652" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 414.468196][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.873138][ T30] audit: type=1400 audit(1742919065.602:2434): avc: denied { open } for pid=11798 comm="syz.1.1652" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 415.244499][ T5869] usb 3-1: USB disconnect, device number 47 [ 415.252685][ T30] audit: type=1400 audit(1742919066.341:2435): avc: denied { setopt } for pid=11798 comm="syz.1.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 415.915680][ T30] audit: type=1400 audit(1742919066.977:2436): avc: denied { getopt } for pid=11808 comm="syz.1.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 416.241153][ T30] audit: type=1400 audit(1742919067.277:2437): avc: denied { read } for pid=11829 comm="syz.1.1659" laddr=::ffff:172.20.20.187 lport=51368 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 416.267050][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.328606][ T30] audit: type=1400 audit(1742919067.538:2438): avc: denied { setopt } for pid=11829 comm="syz.1.1659" laddr=::ffff:172.20.20.187 lport=51368 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 417.376941][T11832] PKCS7: Unknown OID: [4] 0.38.11253.7578(bad) [ 417.384687][T11832] PKCS7: Only support pkcs7_signedData type [ 417.408425][ T30] audit: type=1400 audit(1742919068.343:2439): avc: denied { getopt } for pid=11831 comm="syz.2.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 417.764248][T11844] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1663'. [ 417.805385][ T30] audit: type=1400 audit(1742919068.754:2440): avc: denied { bind } for pid=11845 comm="syz.2.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 418.133177][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 418.541969][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 418.573975][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 418.596316][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 418.607321][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.626141][T11850] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 418.658731][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 418.796386][ T30] audit: type=1400 audit(1742919069.671:2441): avc: denied { bind } for pid=11847 comm="syz.4.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 531.143304][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 531.150289][ C1] rcu: 0-...!: (1 GPs behind) idle=35fc/0/0x1 softirq=41950/41951 fqs=0 [ 531.159611][ C1] rcu: (detected by 1, t=10505 jiffies, g=38861, q=35 ncpus=2) [ 531.167241][ C1] Sending NMI from CPU 1 to CPUs 0: [ 531.167267][ C0] NMI backtrace for cpu 0 [ 531.167280][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 531.167296][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 531.167308][ C0] RIP: 0010:lock_release+0x126/0x300 [ 531.167329][ C0] Code: 00 00 66 83 78 22 1f 76 0c 66 83 68 22 20 66 83 78 22 1f 77 3c 8b 54 24 0c 41 89 96 e8 0a 00 00 48 8b 00 49 89 86 e0 0a 00 00 <41> 8d 47 ff 39 d0 74 1f 83 c2 01 44 89 fe 4c 89 f7 48 8d 4c 24 08 [ 531.167341][ C0] RSP: 0018:ffffc90000007c98 EFLAGS: 00000097 [ 531.167354][ C0] RAX: d57e1d102ea6ccdd RBX: ffffffff9aa8ac60 RCX: ffffc90000007ca4 [ 531.167362][ C0] RDX: 0000000000000001 RSI: ffffffff9aa8ac60 RDI: ffffffff8de98258 [ 531.167371][ C0] RBP: 0000000000039acc R08: 0000000000000001 R09: fffff52000000f8e [ 531.167379][ C0] R10: 0000000000000002 R11: 0000000000000001 R12: ffffffff84ca80d6 [ 531.167387][ C0] R13: 0000000000000006 R14: ffffffff8de97740 R15: 0000000000000002 [ 531.167395][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 531.167408][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 531.167417][ C0] CR2: 000000110c390077 CR3: 0000000060fcc000 CR4: 00000000003526f0 [ 531.167425][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 531.167432][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 531.167440][ C0] Call Trace: [ 531.167446][ C0] [ 531.167454][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 531.167473][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 531.167492][ C0] ? nmi_handle+0x1ac/0x5d0 [ 531.167511][ C0] ? lock_release+0x126/0x300 [ 531.167524][ C0] ? default_do_nmi+0x6a/0x160 [ 531.167541][ C0] ? exc_nmi+0x170/0x1e0 [ 531.167555][ C0] ? end_repeat_nmi+0xf/0x53 [ 531.167574][ C0] ? debug_object_activate+0x2e6/0x4a0 [ 531.167594][ C0] ? lock_release+0x126/0x300 [ 531.167607][ C0] ? lock_release+0x126/0x300 [ 531.167621][ C0] ? lock_release+0x126/0x300 [ 531.167634][ C0] [ 531.167638][ C0] [ 531.167643][ C0] _raw_spin_unlock_irqrestore+0x1a/0x80 [ 531.167663][ C0] debug_object_activate+0x2e6/0x4a0 [ 531.167680][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 531.167698][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 531.167714][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 531.167730][ C0] ? __pfx_advance_sched+0x10/0x10 [ 531.167745][ C0] enqueue_hrtimer+0x25/0x3c0 [ 531.167762][ C0] __hrtimer_run_queues+0x903/0xae0 [ 531.167781][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 531.167797][ C0] ? read_tsc+0x9/0x20 [ 531.167813][ C0] hrtimer_interrupt+0x392/0x8e0 [ 531.167833][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 531.167853][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 531.167871][ C0] [ 531.167875][ C0] [ 531.167880][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 531.167898][ C0] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 531.167913][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 f8 f7 aa 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 68 20 86 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 531.167925][ C0] RSP: 0018:ffffffff8de07d70 EFLAGS: 00000246 [ 531.167935][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b588639 [ 531.167943][ C0] RDX: 0000000000000001 RSI: ffff8880212f0800 RDI: ffff8880212f0864 [ 531.167952][ C0] RBP: ffff8880212f0864 R08: 0000000000000001 R09: ffffed10170c67b5 [ 531.167960][ C0] R10: ffff8880b8633dab R11: 0000000000000000 R12: ffff888141bc9800 [ 531.167968][ C0] R13: ffffffff8ee2dc60 R14: 0000000000000000 R15: 0000000000000000 [ 531.167978][ C0] ? ct_kernel_exit+0x139/0x190 [ 531.167992][ C0] acpi_idle_enter+0xc5/0x160 [ 531.168006][ C0] cpuidle_enter_state+0xaa/0x4f0 [ 531.168019][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 531.168037][ C0] cpuidle_enter+0x4e/0xa0 [ 531.168055][ C0] do_idle+0x310/0x3f0 [ 531.168074][ C0] ? __pfx_do_idle+0x10/0x10 [ 531.168092][ C0] cpu_startup_entry+0x4f/0x60 [ 531.168110][ C0] rest_init+0x16b/0x2b0 [ 531.168123][ C0] ? acpi_subsystem_init+0x133/0x180 [ 531.168138][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 531.168159][ C0] start_kernel+0x3e9/0x4d0 [ 531.168179][ C0] x86_64_start_reservations+0x18/0x30 [ 531.168198][ C0] x86_64_start_kernel+0xb2/0xc0 [ 531.168215][ C0] common_startup_64+0x13e/0x148 [ 531.168239][ C0] [ 531.168262][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g38861 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 531.610833][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 531.620811][ C1] rcu: RCU grace-period kthread stack dump: [ 531.626685][ C1] task:rcu_preempt state:R running task stack:28208 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 531.640184][ C1] Call Trace: [ 531.643454][ C1] [ 531.646380][ C1] __schedule+0x112e/0x5b80 [ 531.650901][ C1] ? __pfx___schedule+0x10/0x10 [ 531.655752][ C1] ? schedule+0x2d7/0x3a0 [ 531.660084][ C1] schedule+0xe7/0x3a0 [ 531.664151][ C1] schedule_timeout+0x124/0x280 [ 531.669013][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 531.674380][ C1] ? __pfx_process_timeout+0x10/0x10 [ 531.679668][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 531.685469][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 531.690924][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 531.695682][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 531.700959][ C1] ? rcu_gp_init+0xc63/0x1580 [ 531.705627][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 531.710826][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 531.716630][ C1] rcu_gp_kthread+0x271/0x380 [ 531.721301][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 531.726494][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 531.731693][ C1] ? __kthread_parkme+0x148/0x220 [ 531.736708][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 531.741902][ C1] kthread+0x3af/0x750 [ 531.745968][ C1] ? __pfx_kthread+0x10/0x10 [ 531.750558][ C1] ? rcu_is_watching+0x12/0xc0 [ 531.755318][ C1] ? __pfx_kthread+0x10/0x10 [ 531.759902][ C1] ret_from_fork+0x45/0x80 [ 531.764332][ C1] ? __pfx_kthread+0x10/0x10 [ 531.768918][ C1] ret_from_fork_asm+0x1a/0x30 [ 531.773684][ C1] [ 531.776711][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 531.783024][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) [ 531.794644][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 531.804689][ C1] Workqueue: events_unbound toggle_allocation_gate [ 531.811192][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x3b/0x70 [ 531.817411][ C1] Code: 49 7e a9 00 01 ff 00 48 8b 34 24 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 34 16 00 00 85 c0 74 2b <8b> 82 10 16 00 00 83 f8 02 75 20 48 8b 8a 18 16 00 00 8b 92 14 16 [ 531.837023][ C1] RSP: 0018:ffffc90000117920 EFLAGS: 00000246 [ 531.843100][ C1] RAX: 0000000000000001 RBX: ffff8880b86424e0 RCX: ffffffff81ae69aa [ 531.851061][ C1] RDX: ffff88801d2bc880 RSI: ffffffff81ae6984 RDI: 0000000000000005 [ 531.859046][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 531.867011][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c849d [ 531.874972][ C1] R13: 0000000000000001 R14: ffff8880b873c000 R15: ffff8880b86424e8 [ 531.882934][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 531.891856][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 531.898451][ C1] CR2: 0000555569f10808 CR3: 000000000df82000 CR4: 00000000003526f0 [ 531.906439][ C1] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 531.914408][ C1] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 531.922372][ C1] Call Trace: [ 531.925642][ C1] [ 531.928479][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 531.934827][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 531.940038][ C1] ? rcu_sched_clock_irq+0x2472/0x3300 [ 531.945504][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 531.951132][ C1] ? find_held_lock+0x2b/0x80 [ 531.955811][ C1] ? timekeeping_advance+0x72e/0xa90 [ 531.961103][ C1] ? rcu_is_watching+0x12/0xc0 [ 531.965885][ C1] ? update_process_times+0x178/0x2d0 [ 531.971257][ C1] ? __pfx_update_process_times+0x10/0x10 [ 531.976970][ C1] ? update_wall_time+0x1c/0x40 [ 531.981814][ C1] ? tick_nohz_handler+0x376/0x530 [ 531.986925][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 531.992379][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 531.997751][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 532.003467][ C1] ? read_tsc+0x9/0x20 [ 532.007533][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 532.012652][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 532.018807][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 532.024612][ C1] [ 532.027530][ C1] [ 532.030451][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.036606][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 532.042668][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 532.048728][ C1] ? __sanitizer_cov_trace_pc+0x3b/0x70 [ 532.054270][ C1] smp_call_function_many_cond+0x4c4/0x12c0 [ 532.060167][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 532.065184][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 532.070292][ C1] text_poke_bp_batch+0x22b/0x760 [ 532.075312][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 532.080328][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 532.085865][ C1] ? text_poke_queue+0xef/0x180 [ 532.090709][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 532.096949][ C1] text_poke_finish+0x30/0x40 [ 532.101619][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 532.107590][ C1] jump_label_update+0x1d7/0x400 [ 532.112528][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 532.118410][ C1] static_key_enable+0x1a/0x20 [ 532.123164][ C1] toggle_allocation_gate+0xfc/0x280 [ 532.128450][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 532.134342][ C1] ? rcu_is_watching+0x12/0xc0 [ 532.139106][ C1] process_one_work+0x9c5/0x1ba0 [ 532.144053][ C1] ? __pfx_process_one_work+0x10/0x10 [ 532.149426][ C1] ? assign_work+0x1a0/0x250 [ 532.154035][ C1] worker_thread+0x6c8/0xf00 [ 532.158628][ C1] ? __pfx_worker_thread+0x10/0x10 [ 532.163737][ C1] kthread+0x3af/0x750 [ 532.167799][ C1] ? __pfx_kthread+0x10/0x10 [ 532.172384][ C1] ? rcu_is_watching+0x12/0xc0 [ 532.177149][ C1] ? __pfx_kthread+0x10/0x10 [ 532.181735][ C1] ret_from_fork+0x45/0x80 [ 532.186153][ C1] ? __pfx_kthread+0x10/0x10 [ 532.190738][ C1] ret_from_fork_asm+0x1a/0x30 [ 532.195501][ C1]