last executing test programs: 14.317608303s ago: executing program 3 (id=700): fanotify_init(0x200, 0x0) r0 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x2) r1 = dup(r0) write$vhost_msg(r1, &(0x7f0000000200)={0x1, {&(0x7f0000000000)=""/30, 0x1e, &(0x7f0000000080)=""/16, 0x1, 0x4}}, 0x48) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) lseek(r8, 0xfffffffffffffffb, 0x1) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000a40)={0x8, {{0x2, 0x4e24, @private=0xa010102}}, 0x1, 0x2, [{{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @multicast2}}]}, 0x190) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast}}}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000001c0)={r7, 0x29, "e2053fd8c6f4b749ca00ad48dce19e7fe978732a76b69ca3e3a91bfb8b0c445e621493f6b68ea23a3e"}, &(0x7f0000000280)=0x31) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) write$binfmt_script(r1, &(0x7f0000000d40)={'#! ', './file0', [{0x20, '}\xe2'}, {0x20, '\x81t\xb7\x06\x93B\rKV,;q\xe0\xa5\x14\xbd3\x01\xd1o0\xc4\x83\x8b\xb7x9\x98\x94i\xe8\x9a\x01s\x18\xd2R\xbbt\xed\xa2\xf9\x95\xe7n\xf4P\xcb\xf2\x83.\tM\xe8\xde\t\xe5\x9c\xacfh\x04\x83\x17Hh~\'@\xd7\x8f:\xaf<\xb1\xf5f\x1b\xd7\xa8(J*\xb6\xee\x8c\a9y.H\x02^\xb7<\xe4\b\xca\x15\x84Fh\xd6\xd8v\xf6\fN\xdf\xc4\x14\xd0\xbe\x03\xb2[X\xef\xe8\xaa\b\'Q\\\x84Q\x1d&\xe0F\xef\xf6\xcdGh*\"}__eQKu\xd5\xc4S\xda\x1a\x8a\xf7'}, {0x20, '\x00'}, {0x20, '.'}, {0x20, '#! '}, {0x20, '-\\]'}, {0x20, '#\x14 '}, {0x20, '(:'}, {0x20, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec'}, {0x20, '#\x14 '}]}, 0x147) 13.143877761s ago: executing program 3 (id=703): r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2064) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0884123, &(0x7f0000000000)=0xa8f) 12.897248991s ago: executing program 3 (id=706): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000500000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = getpgid(r1) ptrace$ARCH_SET_GS(0x1e, r5, &(0x7f0000000240), 0x1001) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x4b4d, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 12.896888991s ago: executing program 4 (id=707): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000040)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @broadcast}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) syz_open_procfs(r2, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) r7 = fanotify_init(0x0, 0x0) fanotify_mark(r7, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f0000000300)={0xd0001}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="0fae1dbaf80c66b850c34f8c66efbafc0c66edba2100ed64f30fc7724e0f23750fad6cbb660f38800b2e64a9ce6c0faaba2000ec", 0x34}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 10.181234416s ago: executing program 4 (id=712): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x3, 0xff, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3ff, 0x9, 0x555, 0x1f, 0xb7, 0x9, 0x36b, 0x9, 0xb, 0x7ff, 0x1a, 0x4, 0x7, 0xa, 0xa, 0x3}}, @TCA_GRED_STAB={0xdb, 0x2, "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"}]}}]}, 0x170}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) times(&(0x7f0000000140)) lsm_get_self_attr(0x67, 0x0, 0x0, 0x1) 7.788517183s ago: executing program 1 (id=719): r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000500)=""/13, &(0x7f0000000540)=0xd) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x4ef2, 0xd, @private2, 0x71}}}, 0xe6) 7.636326838s ago: executing program 2 (id=720): r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000500)=""/13, &(0x7f0000000540)=0xd) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/167, 0xa7}], 0x1) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x4ef2, 0xd, @private2, 0x71}}}, 0xe6) 7.597056864s ago: executing program 0 (id=721): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x4, 0x80000001, 0x8, @mcast1, @empty, 0x8000, 0x1, 0x5, 0xc}}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_setup(0x6908, 0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r4, 0x29, 0x7, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000700)="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", 0x1d5}], 0x2}) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r8 = dup(r7) connect$inet(r8, &(0x7f0000000040)={0x27, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x60) landlock_create_ruleset(&(0x7f0000000100)={0x2, 0x1, 0x4}, 0x18, 0x0) 7.5008269s ago: executing program 1 (id=722): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2d5, 0x0, @void, @value}, 0x28) r0 = syz_io_uring_setup(0x1114, &(0x7f0000000300)={0x0, 0xffffffff}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$CEC_DQEVENT(r3, 0xc0506107, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x200000000000000, 0x100}, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(0x0, 0x800) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000180)=0x90000) 7.268341503s ago: executing program 2 (id=723): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x7) writev(r4, &(0x7f0000000300), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/253], 0x119) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}], 0x1) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c84", 0xc9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6b", 0x2a}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f4958fb4cc5144775062cc7225", 0x45}, {&(0x7f0000001bc0)="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", 0x1de}], 0x2}}], 0x3, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = dup(r5) ioctl$PTP_EXTTS_REQUEST2(r6, 0xc0603d06, &(0x7f0000000300)) 6.596371704s ago: executing program 0 (id=724): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, 0x0, 0x0) bind$phonet(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r3, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f00000006c0)=0x1a) openat(r6, 0x0, 0x650100, 0x79) 6.429827286s ago: executing program 4 (id=725): socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) rt_sigaction(0x12, 0x0, 0x0, 0x8, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000000) r2 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x2, 0x4}]}) socket$pppoe(0x18, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket(0x840000000002, 0x3, 0x100) 5.743337608s ago: executing program 0 (id=726): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x5b800, 0x709042) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) write$char_usb(r1, &(0x7f0000000040)="655b89120a574bb2a87d0b31d659458d6c11c0178563e3911f52ddec60ffdee5dc4fe448eba0b8dec73c446be9e4cf0f39", 0x31) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r3, 0x8}}, 0x10) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000640)={{'\x00', 0x3}, {0x80000000}, 0x88, 0x0, 0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)="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", 0x14f, 0x0, &(0x7f00000003c0)={0x2, 0x140, {0x1, 0xc, 0x9a, "0c6fb6505c421d5e5cc2a3da8c504d152d2f463ad1768615cd28e382be0338aeb55131ba5b847936914aaac41f612dccd585d0fc3d799c8795b655a0b3fbe96c1c7b1f5b0a8038dd69d273a43ca34a141d7db142574a53303af7f11028c0c6d8e34f012c18e4b742c1e0324362498b7b1dba5c103bd2a015dfa452132c92cef5f4c9177d88d62e57e81390819760c9a5f7544bcf1770ad277868", 0x99, "e4bc5ade3f473b5893086d7ffdf3499e6a5f1a64e3c9ad2dee18e0af3e46f6adc5ce1a63b99ef502d61c1946ab3c2e7f0fc1075025c79247317146104413f037c141941e5ef5e5564d1744b794329caddf372ec93126bac5bb5a82fe6fc7b79195a40aef821dd271ac7a4d415858d3ff096226fc0f032096da1bc82c626512fc62daeaa18049e35ed0c10dfbcef0bd4a8bd56055770f3d3c2f"}, 0xfc, "6a0d3e826f3aa552efad63b645304dc234bb5d59a721973d4b76deeecf943669346898ae19a9ec18f99a57b8414e557c4b5b4efbed4bf405f9aa4fab98c85c5fd2dff698c22bd82da52f6974a5d606484c4408b0e09958d8fda88d75fe07aabebd06c9e9b140f891a6cb674ccbaf7a9de4501c4c354416c730aa25167cc3d3fde1611aa62f211f66e4993ad21a737ae47aaa05bfe1feaf910d21f1995f1f6deda77349426ff6d6ccfb9d16f926a474a1c3c32619e5565b16f274e779b364c2753c19f4bc1be86180d7025283dbff59d93c4b594644148202512c49b58153cf3b5bb8c0944053c332cab63726e91214ea2d59eb3c0e59e11927ae6e7b"}, 0x248}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x4000, 0x0) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000700)=0x7) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000780)='objagg_obj_create\x00', r5, 0x0, 0x94f9}, 0x18) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) recvmsg$can_bcm(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/120, 0x78}, {&(0x7f0000000900)=""/127, 0x7f}], 0x2, &(0x7f00000009c0)=""/40, 0x28}, 0x10002) gettid() ioctl(r4, 0x4, &(0x7f0000000a40)="ec73cca585d7386f22364ec4d5bb03cad9d0c07cc450e8e510") sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, 0x0, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x897}]}, 0x38}, 0x1, 0x0, 0x0, 0x9}, 0x4000000) ioctl$IOCTL_VMCI_VERSION(r5, 0x79f, &(0x7f0000000b80)=0xa0000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x1) recvfrom$phonet(r5, &(0x7f0000000cc0)=""/248, 0xf8, 0x40010162, &(0x7f0000000dc0)={0x23, 0x8, 0xdc, 0x5d}, 0x10) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000e00)={[0x9]}, 0x8, 0xc0000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f0000000f40)={&(0x7f0000000e40)=""/236, 0xec}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000fc0)={&(0x7f0000000f80)='mm_compaction_migratepages\x00', r5, 0x0, 0x7}, 0x18) vmsplice(r2, &(0x7f0000002380)=[{&(0x7f0000001000)="e7565b30795a66e074609647288b0ac4361c1e9233b18c715fb41edd", 0x1c}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="816acf08feacc915ad4cd778dec098a122fc86", 0x13}, {&(0x7f0000002080)="8558ec77506e395ae32207647c5d8defdcdd509ec0a671233af348062227659367c33e3fe9d4763ffb87e78d6af6bbf788ba9f341ab565a09086b105fc982d1c73a18f69d767773b2ca23e5cffbd109863a5472792a3a75af7fcc73b77dc94ba1606e1ae3fa555e9", 0x68}, {&(0x7f0000002100)="9c31de0b521ae66d7ba7", 0xa}, {&(0x7f0000002140)="7f651de87e4ddd27fde1f5f3be6f0735be9c31e12f7a7b2ce768fb01f9427eed978c2d68ce1d614a89f706c542538950ac272a56f4e6fc37efbbbb891a2513968c177cb86bf7df5d07be57d5b1430a3227f0d5ada016b9460d94de5680bfe96ca7a7192c1a6c29cdcb6473866ad13f78b9aee41d6c074fbe6cefbed9d7bc74263e71156cbf14303e5ca1833d033cd7a31e8207d9fee47a79a61ec2c24d29d9174772c1ac42390dcbbf66eb061081e098b6b9f57d0f003ab052717b7c45376bf0dffdff536f2e85e12d1c4cd8efb2", 0xce}, {&(0x7f0000002240)="3d60464c0214dcf16e4695039c24412ec3e9a39cbefe20cb60989c77fff04116c3c2a7d0ef6cb2e117111aadc82e99e6fe15cf8665b7472eb9064e7f9f1bf12388859c1fc6747d58454cc96efc7159a61a88713370431747f73803453883233c3ed8c35bee103a9783359aff2537c8119df2119ff87f405784c89a416cf8d8096a977da67c4c6478dd1bf76d1a775da0282f18a083ecb5cdc2c4cadbd354d6b0568bebcef67e9866ac14d139a75eb9b7a5d911c6dbcaf562c10ef192885707e2eb7a380c7495c15f", 0xc8}, {&(0x7f0000002340)="856cb3b5cb3bc48362f4f5ee777570f0aab125dcafcc564f7f7c4f1c84283157", 0x20}], 0x8, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002400)={'batadv_slave_1\x00'}) r8 = dup(r4) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000002440)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000002500)={&(0x7f0000002480)=[0x0, 0x0], &(0x7f00000024c0)=[0x0, 0x0, 0x0], 0x2, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f00000028c0)={&(0x7f0000002880)=[r9, 0x0, 0x0], 0x3, 0x800}) 5.68765491s ago: executing program 2 (id=727): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x21, 0x1, 0x0, 0x0, &(0x7f00000000c0)) open(&(0x7f0000000080)='./bus\x00', 0x301800, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfd324000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000581f36cc506b8fba00000000000000006119840000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CAP_DISABLE_QUIRKS2(r6, 0x4068aea3, &(0x7f0000000280)={0xd5, 0x0, 0x10}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000540)=ANY=[]) syz_io_uring_setup(0xfb, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write(r8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.474928745s ago: executing program 3 (id=728): syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') socket$igmp(0x2, 0x3, 0x2) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x8}, 0x18) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000094) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet(r5, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)="a9", 0x1}], 0x1}}], 0x2, 0x4048010) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) 4.685590559s ago: executing program 2 (id=729): syz_open_dev$vim2m(&(0x7f0000000080), 0x20001, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10400, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000013c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) syz_emit_ethernet(0xa2, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@srh={0x0, 0x0, 0x3}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x8) nanosleep(&(0x7f0000000080)={0xfffffffffffffff7}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r4 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, &(0x7f0000000840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r4, &(0x7f00000006c0)={0x18, 0x0, r5, {0x9}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r6 = socket(0xa, 0x2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x22812, r6, 0x0) r7 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000140)='asymmetric\x00', &(0x7f00000004c0)='\x00\xb2v\xe4~[R;3\x00\x00\x00\x00\xb8\x9bH\x10}\xb0]\xc0\x95\xd9\xa9\xad\xa7V\xac\x95\xb0\xe2b\x98l\xfb\xd5S\xab5\x86,\xb3\x82\xeepW\xca\xd0\xea\xb0\x8d\v\n}\x12;\x00\x00\x00\xad\xb4T\x8f\x95\\\xc7\x13X.;\xb5\xc4]\x9f\x9a\x0f3M\xce\x11\xb4\x97e\xecz=\xa8\x97\xf0\xc5\x9a\x9f8\xa8_v\x9f\nx\xc4\x9f\x84\xa9\aI5\xa2p\x80\xb4}\xae\xc3\fkE\xee\x9e\x1e(\xee-\xd8o\xbd\x16\b~\x83\xf9\xb3@\xc6M\xbej\x90\x12\x9a\x04\xd5\x0292\xa4\xbcC\xf0\xb7\xb9\xd5F\x82#\xb9\x15h\xf9Q\xe5E\xdb\x13\xaa\xa5df\x99\xafwZr&\x9d\xf8\x943q\xac\xff\xb5\x9a\xb3jE\xa5\xfe_\x03\x99\xc6\x86h\xb5w\x18\xad\xcf\x12\t\xd2\xa2\xccS&\xcbu\xc3\xe8\x8fe\x01\xaa\xb7\xe2\xac\xcb|\xff]\xcf\xb2\x8fO\xa6\xe6\xb1\x10\xb8') r8 = socket(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x36, &(0x7f0000001d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x328, 0x208, 0x328, 0x0, 0x0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'macvtap0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00', [], [], 'nicvf0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x20d8, &(0x7f00000001c0)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000240)={0x0, 0x0, 0x8}, 0x18) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.548005903s ago: executing program 0 (id=730): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_targets\x00') preadv(r1, &(0x7f0000003400)=[{&(0x7f0000001f00)=""/83, 0x53}], 0x1, 0x37, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x4e0, 0x2f0, 0xb, 0x148, 0x2f0, 0x148, 0x448, 0x240, 0x240, 0x448, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00'}, 0x0, 0x2c8, 0x2f0, 0x0, {0xff0f000000000000}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}, 0xe}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x2, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@private1, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x13c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$tipc(r7, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 4.446727036s ago: executing program 2 (id=731): ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x4) (async) write$binfmt_elf64(r0, 0x0, 0xfebe) (async) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) (async) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) setitimer(0x1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) fchown(r5, 0x0, 0x0) 4.379158731s ago: executing program 1 (id=732): r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x4ef2, 0xd, @private2, 0x71}}}, 0xe6) 3.273449656s ago: executing program 0 (id=733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='./file0\x00', 0xd02) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x28}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) 3.242482633s ago: executing program 1 (id=734): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x4, 0x80000001, 0x8, @mcast1, @empty, 0x8000, 0x1, 0x5, 0xc}}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_setup(0x6908, 0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r4, 0x29, 0x7, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000700)="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", 0x1d5}], 0x2}) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r8 = dup(r7) connect$inet(r8, &(0x7f0000000040)={0x27, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x60) landlock_create_ruleset(&(0x7f0000000100)={0x2, 0x1, 0x4}, 0x18, 0x0) 2.933829318s ago: executing program 2 (id=735): socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigaction(0x12, 0x0, 0x0, 0x8, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000000) r2 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x2, 0x4}]}) socket$pppoe(0x18, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket(0x840000000002, 0x3, 0x100) 2.933278993s ago: executing program 3 (id=736): r0 = creat(&(0x7f0000000440)='.\x00', 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x15) ioctl$TCFLSH(r3, 0x40384708, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f00000001c0)={0x28, 0xbd60d0f9e61d6d6d, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.517148786s ago: executing program 3 (id=737): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="7f30a2278162d9b75172", 0xa}], 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000000)={r3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) dup3(r2, r0, 0x0) sched_setaffinity(r3, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 1.076242191s ago: executing program 1 (id=738): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0xfffffffffffffffd, 0x3, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/375]}, 0x1ef) fallocate(r0, 0x0, 0x0, 0x1000f4) r5 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) sendmmsg$inet6(r6, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x60, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRESHEX=r3, @ANYBLOB="0000000014000000000000002b"], 0x40}}], 0x1, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x2, 0x2415c653c789127a) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc2604110, &(0x7f0000000500)={0xffffffff, [[0x7f, 0xab2a72c, 0xf4a, 0x7, 0x7f, 0x7, 0x1000, 0xf8a5], [0x6a9, 0x4, 0x1, 0x5, 0x5, 0x3, 0x5, 0xfffffffd], [0x7, 0x9, 0x4558, 0xf4b7, 0x3, 0x7fffffff, 0x1, 0x2]], '\x00', [{0x1a4a, 0x9, 0x1, 0x1, 0x1, 0x1}, {0xfffffffa, 0x8000, 0x1, 0x1}, {0x7, 0xb1c0, 0x0, 0x1, 0x1}, {0xc4, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x8, 0x4, 0x1, 0x1, 0x1}, {0x80000001, 0x371, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x7, 0x0, 0x1, 0x1}, {0xfffffff7, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x40000000, 0x0, 0x1, 0x0, 0x1}, {0x7f, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x76c, 0x6, 0x1, 0x0, 0x1}, {0x4, 0xff, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x1}) setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f0000000240)=0x2, 0x4) 712.062338ms ago: executing program 0 (id=739): syz_clone3(&(0x7f0000000040)={0x200126000, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2040, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r3, 0x401) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) ustat(0xfffffffeffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003700)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffe23, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x40}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800d71400000200000024000000240000000200000000000008000000030000000002000063316e74f888991f00000000000000000500000000"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x20000000}) write$sndseq(r10, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 415.412144ms ago: executing program 1 (id=740): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4172, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x60, r5, 0x2000c7b9a5584e11, 0x4, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @assoc_resp={{{}, {0x3}, @device_b, @device_a, @initial, {0x0, 0xc}}, 0x0, 0x0, @random=0x8, @val, @val={0x2d, 0x1a, {0x2000, 0x0, 0x0, 0x0, {0xa}, 0x1}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x60}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xaef1, 0x74}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x54}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r9 = socket(0x1e, 0x1, 0x0) connect$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r9, &(0x7f0000000080), 0x2000011a) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcc5a}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 224.562961ms ago: executing program 4 (id=741): syz_open_dev$vim2m(&(0x7f0000000080), 0x20001, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10400, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000013c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) syz_emit_ethernet(0xa2, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@srh={0x0, 0x0, 0x3}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x8) nanosleep(&(0x7f0000000080)={0xfffffffffffffff7}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r4 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, &(0x7f0000000840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r4, &(0x7f00000006c0)={0x18, 0x0, r5, {0x9}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r6 = socket(0xa, 0x2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x22812, r6, 0x0) r7 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000140)='asymmetric\x00', &(0x7f00000004c0)='\x00\xb2v\xe4~[R;3\x00\x00\x00\x00\xb8\x9bH\x10}\xb0]\xc0\x95\xd9\xa9\xad\xa7V\xac\x95\xb0\xe2b\x98l\xfb\xd5S\xab5\x86,\xb3\x82\xeepW\xca\xd0\xea\xb0\x8d\v\n}\x12;\x00\x00\x00\xad\xb4T\x8f\x95\\\xc7\x13X.;\xb5\xc4]\x9f\x9a\x0f3M\xce\x11\xb4\x97e\xecz=\xa8\x97\xf0\xc5\x9a\x9f8\xa8_v\x9f\nx\xc4\x9f\x84\xa9\aI5\xa2p\x80\xb4}\xae\xc3\fkE\xee\x9e\x1e(\xee-\xd8o\xbd\x16\b~\x83\xf9\xb3@\xc6M\xbej\x90\x12\x9a\x04\xd5\x0292\xa4\xbcC\xf0\xb7\xb9\xd5F\x82#\xb9\x15h\xf9Q\xe5E\xdb\x13\xaa\xa5df\x99\xafwZr&\x9d\xf8\x943q\xac\xff\xb5\x9a\xb3jE\xa5\xfe_\x03\x99\xc6\x86h\xb5w\x18\xad\xcf\x12\t\xd2\xa2\xccS&\xcbu\xc3\xe8\x8fe\x01\xaa\xb7\xe2\xac\xcb|\xff]\xcf\xb2\x8fO\xa6\xe6\xb1\x10\xb8') r8 = socket(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x36, &(0x7f0000001d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x328, 0x208, 0x328, 0x0, 0x0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'macvtap0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00', [], [], 'nicvf0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x20d8, &(0x7f00000001c0)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000240)={0x0, 0x0, 0x8}, 0x18) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 121.775488ms ago: executing program 4 (id=742): socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x141042, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) pselect6(0x40, &(0x7f0000000180)={0xfc, 0x7, 0x800000000000000, 0x3, 0x0, 0x0, 0x1, 0x6}, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=743): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000680)={0x2, @sdr={0x4f565559, 0x8cba}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) kernel console output (not intermixed with test programs): d length. [ 103.871912][ T6496] netlink: 'syz.3.130': attribute type 6 has an invalid length. [ 103.879584][ T6496] netlink: 132 bytes leftover after parsing attributes in process `syz.3.130'. [ 103.933407][ T5906] usb 1-1: USB disconnect, device number 3 [ 104.291641][ T29] audit: type=1400 audit(1733097788.416:316): avc: denied { append } for pid=6506 comm="syz.4.133" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.671802][ T5865] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.933042][ T6519] syz.3.134 uses old SIOCAX25GETINFO [ 105.536673][ T29] audit: type=1400 audit(1733097789.066:317): avc: denied { write } for pid=6514 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 105.556743][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.630328][ T29] audit: type=1400 audit(1733097789.086:318): avc: denied { ioctl } for pid=6514 comm="syz.3.134" path="socket:[9849]" dev="sockfs" ino=9849 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 105.706945][ T5865] usb 3-1: Using ep0 maxpacket: 32 [ 105.725960][ T29] audit: type=1400 audit(1733097789.096:319): avc: denied { watch watch_reads } for pid=6514 comm="syz.3.134" path="/proc/122/net/udplite6" dev="proc" ino=4026532893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 105.726166][ T5865] usb 3-1: config 0 has an invalid interface number: 37 but max is 0 [ 105.940247][ T5865] usb 3-1: config 0 has no interface number 0 [ 105.948652][ T5865] usb 3-1: New USB device found, idVendor=110a, idProduct=1618, bcdDevice=ff.3d [ 105.957774][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.965842][ T5865] usb 3-1: Product: syz [ 105.974998][ T5865] usb 3-1: Manufacturer: syz [ 105.979693][ T5865] usb 3-1: SerialNumber: syz [ 106.047316][ T6525] xt_TPROXY: Can be used only with -p tcp or -p udp [ 106.072230][ T5865] usb 3-1: config 0 descriptor?? [ 107.615170][ T5865] mxuport 3-1:0.37: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 107.656118][ T6538] FAULT_INJECTION: forcing a failure. [ 107.656118][ T6538] name failslab, interval 1, probability 0, space 0, times 0 [ 107.669266][ T6538] CPU: 1 UID: 0 PID: 6538 Comm: syz.1.141 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 107.679527][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.689606][ T6538] Call Trace: [ 107.692899][ T6538] [ 107.695846][ T6538] dump_stack_lvl+0x16c/0x1f0 [ 107.700545][ T6538] should_fail_ex+0x497/0x5b0 [ 107.705248][ T6538] ? rcu_is_watching+0x12/0xc0 [ 107.710027][ T6538] should_failslab+0xc2/0x120 [ 107.714712][ T6538] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 107.720101][ T6538] ? lock_acquire+0x2f/0xb0 [ 107.724624][ T6538] ? __inet_hash_connect+0x69f/0x1900 [ 107.729996][ T6538] ? __inet_hash_connect+0x918/0x1900 [ 107.735361][ T6538] __inet_hash_connect+0x918/0x1900 [ 107.740556][ T6538] ? __pfx___inet_check_established+0x10/0x10 [ 107.746616][ T6538] ? __pfx___inet_hash_connect+0x10/0x10 [ 107.752246][ T6538] tcp_v4_connect+0xddc/0x1b80 [ 107.757017][ T6538] ? __pfx_tcp_v4_connect+0x10/0x10 [ 107.762220][ T6538] ? __local_bh_enable_ip+0xa4/0x120 [ 107.767506][ T6538] mptcp_connect+0x66b/0xee0 [ 107.772094][ T6538] __inet_stream_connect+0x3c7/0x1020 [ 107.777463][ T6538] ? find_held_lock+0x2d/0x110 [ 107.782237][ T6538] ? __pfx___inet_stream_connect+0x10/0x10 [ 107.788039][ T6538] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 107.793403][ T6538] ? __pfx_inet_stream_connect+0x10/0x10 [ 107.799030][ T6538] ? mark_held_locks+0x9f/0xe0 [ 107.803788][ T6538] ? __local_bh_enable_ip+0xa4/0x120 [ 107.809068][ T6538] ? __pfx_inet_stream_connect+0x10/0x10 [ 107.814695][ T6538] inet_stream_connect+0x57/0xa0 [ 107.819631][ T6538] __sys_connect_file+0x13e/0x1a0 [ 107.824652][ T6538] __sys_connect+0x14f/0x170 [ 107.829236][ T6538] ? __pfx___sys_connect+0x10/0x10 [ 107.834348][ T6538] ? __pfx_ksys_write+0x10/0x10 [ 107.839192][ T6538] __x64_sys_connect+0x72/0xb0 [ 107.843978][ T6538] ? lockdep_hardirqs_on+0x7c/0x110 [ 107.849172][ T6538] do_syscall_64+0xcd/0x250 [ 107.853674][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.859560][ T6538] RIP: 0033:0x7f898b180849 [ 107.863965][ T6538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.883568][ T6538] RSP: 002b:00007f898bf63058 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 107.891972][ T6538] RAX: ffffffffffffffda RBX: 00007f898b345fa0 RCX: 00007f898b180849 [ 107.899930][ T6538] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004 [ 107.907889][ T6538] RBP: 00007f898bf630a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.915848][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.923824][ T6538] R13: 0000000000000000 R14: 00007f898b345fa0 R15: 00007fffae147148 [ 107.931792][ T6538] [ 107.946046][ T5865] mxuport 3-1:0.37: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 107.955059][ T5865] mxuport 3-1:0.37: probe with driver mxuport failed with error -71 [ 107.992702][ T29] audit: type=1400 audit(1733097792.096:320): avc: denied { write } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.999461][ T5865] usb 3-1: USB disconnect, device number 3 [ 108.035759][ T29] audit: type=1400 audit(1733097792.096:321): avc: denied { remove_name } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.058296][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.066101][ T29] audit: type=1400 audit(1733097792.096:322): avc: denied { rename } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.088360][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.914839][ T6563] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 109.205917][ T6563] overlayfs: failed to resolve './file0': -2 [ 110.617135][ T867] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.976206][ T867] usb 3-1: Using ep0 maxpacket: 32 [ 110.995907][ T6589] warning: `syz.0.154' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.015140][ T867] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 111.023096][ T867] usb 3-1: can't read configurations, error -61 [ 111.096973][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 111.096990][ T29] audit: type=1400 audit(1733097795.246:330): avc: denied { read } for pid=6590 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.311492][ T867] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 111.471558][ T867] usb 3-1: Using ep0 maxpacket: 32 [ 111.482133][ T867] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 111.489941][ T867] usb 3-1: can't read configurations, error -61 [ 111.510708][ T867] usb usb3-port1: attempt power cycle [ 111.521104][ T29] audit: type=1400 audit(1733097795.666:331): avc: denied { write } for pid=6606 comm="syz.1.159" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 111.612987][ T6609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 111.768894][ T29] audit: type=1400 audit(1733097795.916:332): avc: denied { mounton } for pid=6606 comm="syz.1.159" path="/proc/111/task" dev="proc" ino=10142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 111.902753][ T867] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.993818][ T867] usb 3-1: Using ep0 maxpacket: 32 [ 112.049092][ T867] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 112.075117][ T867] usb 3-1: can't read configurations, error -61 [ 112.220450][ T29] audit: type=1326 audit(1733097796.366:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898b180849 code=0x7fc00000 [ 112.248546][ T29] audit: type=1326 audit(1733097796.386:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.1.159" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f898b180849 code=0x0 [ 112.275700][ T867] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.285429][ T29] audit: type=1400 audit(1733097796.436:335): avc: denied { bind } for pid=6606 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.305547][ T29] audit: type=1400 audit(1733097796.456:336): avc: denied { accept } for pid=6606 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.312996][ T867] usb 3-1: Using ep0 maxpacket: 32 [ 112.362985][ T867] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 112.369429][ T29] audit: type=1400 audit(1733097796.456:337): avc: denied { listen } for pid=6606 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.397729][ T867] usb 3-1: can't read configurations, error -61 [ 112.415143][ T29] audit: type=1326 audit(1733097796.556:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f898b180849 code=0x7fc00000 [ 112.429555][ T867] usb usb3-port1: unable to enumerate USB device [ 112.453234][ T29] audit: type=1326 audit(1733097796.556:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.1.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898b180849 code=0x7fc00000 [ 112.688517][ T6618] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 112.721025][ T6618] ALSA: mixer_oss: invalid OSS volume 'SYNT' [ 113.171146][ T5833] Bluetooth: hci4: link tx timeout [ 113.176978][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.662473][ T6629] xt_TPROXY: Can be used only with -p tcp or -p udp [ 114.720996][ T6636] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.740891][ T6636] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 115.027550][ T6645] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (14) [ 115.303627][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 115.568979][ T6636] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 115.610961][ T6636] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 115.617680][ T6636] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.696313][ T6636] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.704412][ T5865] IPVS: starting estimator thread 0... [ 115.712085][ T6648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.169'. [ 115.757727][ T6636] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 115.784542][ T6636] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.790956][ T6649] IPVS: using max 46 ests per chain, 110400 per kthread [ 115.835518][ T6636] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.855491][ T6636] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 115.866740][ T6636] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.883553][ T6636] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.904687][ T6636] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 115.921197][ T6636] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 116.210877][ T5865] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.362256][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.373241][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.384991][ T6661] futex_wake_op: syz.3.171 tries to shift op by 144; fix this program [ 116.536285][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 116.536300][ T29] audit: type=1400 audit(1733097800.686:410): avc: denied { read write } for pid=6655 comm="syz.3.171" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 116.678286][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.841015][ T29] audit: type=1400 audit(1733097800.686:411): avc: denied { open } for pid=6655 comm="syz.3.171" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.114137][ T5865] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 117.123304][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.156876][ T29] audit: type=1400 audit(1733097801.286:412): avc: denied { ioctl } for pid=6655 comm="syz.3.171" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.248867][ T5865] usb 2-1: config 0 descriptor?? [ 117.484994][ T6683] FAULT_INJECTION: forcing a failure. [ 117.484994][ T6683] name failslab, interval 1, probability 0, space 0, times 0 [ 117.538412][ T6683] CPU: 0 UID: 0 PID: 6683 Comm: syz.0.176 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 117.548671][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.558713][ T6683] Call Trace: [ 117.561988][ T6683] [ 117.564936][ T6683] dump_stack_lvl+0x16c/0x1f0 [ 117.569626][ T6683] should_fail_ex+0x497/0x5b0 [ 117.574308][ T6683] ? fs_reclaim_acquire+0xae/0x150 [ 117.579423][ T6683] should_failslab+0xc2/0x120 [ 117.584101][ T6683] __kmalloc_noprof+0xcb/0x510 [ 117.588854][ T6683] ? find_held_lock+0x2d/0x110 [ 117.593617][ T6683] bpf_test_init.isra.0+0xa5/0x150 [ 117.598730][ T6683] bpf_prog_test_run_skb+0x246/0x2270 [ 117.604105][ T6683] ? lock_acquire+0x2f/0xb0 [ 117.608603][ T6683] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 117.614473][ T6683] ? fput+0x67/0x440 [ 117.618395][ T6683] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 117.624228][ T6683] __sys_bpf+0xfc6/0x49c0 [ 117.628571][ T6683] ? __pfx_lock_release+0x10/0x10 [ 117.633688][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 117.638483][ T6683] ? vfs_write+0x306/0x1150 [ 117.642997][ T6683] ? __mutex_unlock_slowpath+0x164/0x690 [ 117.648670][ T6683] ? fput+0x67/0x440 [ 117.652569][ T6683] ? ksys_write+0x1ba/0x250 [ 117.657073][ T6683] ? __pfx_ksys_write+0x10/0x10 [ 117.661925][ T6683] __x64_sys_bpf+0x78/0xc0 [ 117.666343][ T6683] ? lockdep_hardirqs_on+0x7c/0x110 [ 117.671539][ T6683] do_syscall_64+0xcd/0x250 [ 117.676053][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.681959][ T6683] RIP: 0033:0x7f016f580849 [ 117.686372][ T6683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.705989][ T6683] RSP: 002b:00007f01703e9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 117.714416][ T6683] RAX: ffffffffffffffda RBX: 00007f016f745fa0 RCX: 00007f016f580849 [ 117.722382][ T6683] RDX: 0000000000000050 RSI: 0000000020000000 RDI: 000000000000000a [ 117.730363][ T6683] RBP: 00007f01703e90a0 R08: 0000000000000000 R09: 0000000000000000 [ 117.738337][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.746318][ T6683] R13: 0000000000000000 R14: 00007f016f745fa0 R15: 00007ffe7b838ba8 [ 117.754367][ T6683] [ 117.774921][ T5865] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 117.784790][ T5865] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 117.792385][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.798429][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.885733][ T5865] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0002/input/input7 [ 117.935901][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 117.942115][ T5817] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.987442][ T29] audit: type=1400 audit(1733097802.136:413): avc: denied { sqpoll } for pid=6690 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 118.043454][ T5865] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 118.081912][ T29] audit: type=1326 audit(1733097802.186:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6651 comm="syz.1.170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f898b180849 code=0x0 [ 118.104841][ T29] audit: type=1400 audit(1733097802.236:415): avc: denied { setopt } for pid=6690 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.124273][ T29] audit: type=1400 audit(1733097802.236:416): avc: denied { bind } for pid=6690 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 118.144153][ T29] audit: type=1400 audit(1733097802.296:417): avc: denied { bind } for pid=6696 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.170809][ T29] audit: type=1400 audit(1733097802.296:418): avc: denied { node_bind } for pid=6696 comm="syz.4.181" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 118.297769][ T29] audit: type=1400 audit(1733097802.406:419): avc: denied { write } for pid=6696 comm="syz.4.181" dev="sockfs" ino=11157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.335448][ T6706] syz.2.180 uses obsolete (PF_INET,SOCK_PACKET) [ 118.649699][ T5819] usb 2-1: USB disconnect, device number 5 [ 118.731945][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.010579][ T6720] netlink: 'syz.0.185': attribute type 1 has an invalid length. [ 119.046945][ T6720] bond1: entered promiscuous mode [ 119.052513][ T6720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.851085][ T5817] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.858209][ T5817] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.939105][ T6729] Illegal XDP return value 4294967294 on prog (id 72) dev N/A, expect packet loss! [ 119.966343][ T6729] netlink: 40 bytes leftover after parsing attributes in process `syz.4.187'. [ 120.012786][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.018843][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 120.742485][ T5906] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 121.334562][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.497602][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 121.523550][ T5906] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 121.529333][ C1] Unknown status report in ack skb [ 121.552918][ T5906] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.604455][ T5906] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 121.689394][ T5906] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.709228][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.766650][ T5906] usbtmc 3-1:16.0: bulk endpoints not found [ 121.981811][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.981828][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.090808][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 122.095898][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.209399][ T6781] FAULT_INJECTION: forcing a failure. [ 122.209399][ T6781] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 122.230960][ T6781] CPU: 0 UID: 0 PID: 6781 Comm: syz.1.196 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 122.241229][ T6781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 122.251294][ T6781] Call Trace: [ 122.254575][ T6781] [ 122.257512][ T6781] dump_stack_lvl+0x16c/0x1f0 [ 122.262210][ T6781] should_fail_ex+0x497/0x5b0 [ 122.266926][ T6781] _copy_from_user+0x2e/0xd0 [ 122.271530][ T6781] copy_from_sockptr_offset.constprop.0+0x159/0x190 [ 122.278141][ T6781] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 122.285276][ T6781] ? __local_bh_enable_ip+0xa4/0x120 [ 122.290585][ T6781] ? lockdep_hardirqs_on+0x7c/0x110 [ 122.295810][ T6781] do_ipv6_setsockopt+0x2c81/0x45f0 [ 122.301033][ T6781] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 122.306603][ T6781] ? lock_acquire+0x2f/0xb0 [ 122.311094][ T6781] ? avc_has_perm_noaudit+0x61/0x3a0 [ 122.316384][ T6781] ? avc_has_perm_noaudit+0x143/0x3a0 [ 122.321763][ T6781] ? avc_has_perm+0x11b/0x1c0 [ 122.326442][ T6781] ? __pfx_avc_has_perm+0x10/0x10 [ 122.331477][ T6781] ? hlock_class+0x4e/0x130 [ 122.335974][ T6781] ? sock_has_perm+0x25a/0x2f0 [ 122.340723][ T6781] ? __pfx_sock_has_perm+0x10/0x10 [ 122.345830][ T6781] ? selinux_netlbl_socket_setsockopt+0x184/0x470 [ 122.352238][ T6781] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 122.358991][ T6781] ? ipv6_setsockopt+0xcb/0x170 [ 122.363825][ T6781] ipv6_setsockopt+0xcb/0x170 [ 122.368487][ T6781] tcp_setsockopt+0xa4/0x100 [ 122.373071][ T6781] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 122.378957][ T6781] do_sock_setsockopt+0x222/0x480 [ 122.383976][ T6781] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 122.389531][ T6781] ? lock_acquire+0x2f/0xb0 [ 122.394031][ T6781] __sys_setsockopt+0x1a0/0x230 [ 122.398888][ T6781] __x64_sys_setsockopt+0xbd/0x160 [ 122.403987][ T6781] ? do_syscall_64+0x91/0x250 [ 122.408675][ T6781] ? lockdep_hardirqs_on+0x7c/0x110 [ 122.413895][ T6781] do_syscall_64+0xcd/0x250 [ 122.418404][ T6781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.424285][ T6781] RIP: 0033:0x7f898b180849 [ 122.428696][ T6781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.448297][ T6781] RSP: 002b:00007f898bf63058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 122.456694][ T6781] RAX: ffffffffffffffda RBX: 00007f898b345fa0 RCX: 00007f898b180849 [ 122.464647][ T6781] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003 [ 122.472598][ T6781] RBP: 00007f898bf630a0 R08: 0000000000000020 R09: 0000000000000000 [ 122.480552][ T6781] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 122.488511][ T6781] R13: 0000000000000000 R14: 00007f898b345fa0 R15: 00007fffae147148 [ 122.496481][ T6781] [ 123.640359][ T5819] usb 3-1: USB disconnect, device number 8 [ 123.681556][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 123.681567][ T29] audit: type=1400 audit(1733097807.826:426): avc: denied { mount } for pid=6801 comm="syz.1.201" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.772240][ T6802] overlayfs: conflicting lowerdir path [ 123.850327][ T6811] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6811 comm=syz.4.202 [ 123.986437][ T29] audit: type=1400 audit(1733097807.996:427): avc: denied { write } for pid=6805 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 124.569506][ T29] audit: type=1400 audit(1733097808.016:428): avc: denied { read } for pid=6805 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 125.186733][ T6816] netlink: 'syz.2.203': attribute type 21 has an invalid length. [ 125.195537][ T6816] netlink: 'syz.2.203': attribute type 6 has an invalid length. [ 125.203746][ T6816] netlink: 132 bytes leftover after parsing attributes in process `syz.2.203'. [ 125.455916][ T6820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.204'. [ 125.523351][ T29] audit: type=1400 audit(1733097809.676:429): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 125.711664][ T6829] overlayfs: conflicting lowerdir path [ 126.846859][ T6846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 127.120950][ T6858] futex_wake_op: syz.3.214 tries to shift op by 144; fix this program [ 129.322520][ T29] audit: type=1400 audit(1733097812.956:430): avc: denied { append } for pid=6879 comm="syz.2.219" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 129.734890][ T29] audit: type=1400 audit(1733097813.876:431): avc: denied { execute } for pid=6893 comm="syz.2.221" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 129.933311][ T29] audit: type=1400 audit(1733097814.086:432): avc: denied { getopt } for pid=6899 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 130.280483][ T29] audit: type=1400 audit(1733097814.086:433): avc: denied { map } for pid=6899 comm="syz.0.222" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 130.306441][ T6901] Zero length message leads to an empty skb [ 131.261458][ T6917] overlayfs: conflicting lowerdir path [ 131.425895][ T6915] tty tty25: ldisc open failed (-12), clearing slot 24 [ 131.561267][ T6928] binder: 6923:6928 ioctl c0306201 20000140 returned -14 [ 132.752079][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 132.812969][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.819630][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.944792][ T8] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 132.977454][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.545584][ T8] usb 1-1: Product: syz [ 133.549783][ T8] usb 1-1: Manufacturer: syz [ 133.554579][ T8] usb 1-1: SerialNumber: syz [ 133.591913][ T8] usb 1-1: config 0 descriptor?? [ 133.600559][ T8] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 004 [ 133.727907][ T29] audit: type=1400 audit(1733097817.846:434): avc: denied { ioctl } for pid=6949 comm="syz.2.232" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 134.483814][ T8] (null): failure reading functionality [ 134.518217][ T8] i2c i2c-1: failure reading functionality [ 134.527267][ T8] i2c i2c-1: connected i2c-tiny-usb device [ 134.693803][ T8] usb 1-1: USB disconnect, device number 4 [ 134.998820][ T6982] netlink: 40 bytes leftover after parsing attributes in process `syz.4.236'. [ 135.573476][ T6990] netlink: 'syz.0.239': attribute type 1 has an invalid length. [ 135.739039][ T6990] bond2: entered promiscuous mode [ 135.754363][ T6990] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.871016][ T5906] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 136.069273][ T5906] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 136.078497][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.086836][ T5906] usb 5-1: Product: syz [ 136.091652][ T5906] usb 5-1: Manufacturer: syz [ 136.096344][ T5906] usb 5-1: SerialNumber: syz [ 136.105459][ T5906] usb 5-1: config 0 descriptor?? [ 136.115345][ T5906] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 005 [ 136.170885][ T5868] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 136.354440][ T5868] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 136.364082][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.372860][ T5868] usb 2-1: Product: syz [ 136.403720][ T5868] usb 2-1: Manufacturer: syz [ 136.910899][ T5906] (null): failure reading functionality [ 136.916607][ T5868] usb 2-1: SerialNumber: syz [ 136.922662][ T5906] i2c i2c-1: failure reading functionality [ 136.938247][ T5868] usb 2-1: config 0 descriptor?? [ 136.945469][ T5906] i2c i2c-1: connected i2c-tiny-usb device [ 136.961329][ T5868] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 006 [ 136.971234][ T5906] usb 5-1: USB disconnect, device number 5 [ 137.466645][ T5868] (null): failure reading functionality [ 137.473143][ T5868] i2c i2c-1: failure reading functionality [ 137.482595][ T5868] i2c i2c-1: connected i2c-tiny-usb device [ 137.491377][ T5868] usb 2-1: USB disconnect, device number 6 [ 137.773415][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 138.316693][ T7029] ======================================================= [ 138.316693][ T7029] WARNING: The mand mount option has been deprecated and [ 138.316693][ T7029] and is ignored by this kernel. Remove the mand [ 138.316693][ T7029] option from the mount to silence this warning. [ 138.316693][ T7029] ======================================================= [ 138.500939][ T29] audit: type=1400 audit(1733097822.526:435): avc: denied { write } for pid=7025 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 138.520124][ T7029] syz.3.246: attempt to access beyond end of device [ 138.520124][ T7029] loop3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 138.567776][ T7029] hfs: can't find a HFS filesystem on dev loop3 [ 138.696657][ T7029] veth1_to_batadv: entered allmulticast mode [ 139.324777][ T7042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.670681][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'. [ 139.739805][ T7027] veth1_to_batadv: left allmulticast mode [ 139.901304][ T7047] futex_wake_op: syz.2.252 tries to shift op by 144; fix this program [ 139.913185][ T1146] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 141.940850][ T5827] Bluetooth: hci5: command 0x1003 tx timeout [ 141.947894][ T5833] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 142.190112][ T7078] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.243045][ T29] audit: type=1400 audit(1733097826.366:436): avc: denied { ioctl } for pid=7079 comm="syz.3.263" path="socket:[12009]" dev="sockfs" ino=12009 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 142.281688][ T7080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.345224][ T7080] bond0: (slave rose0): Enslaving as an active interface with an up link [ 143.626961][ T29] audit: type=1400 audit(1733097827.776:437): avc: denied { write } for pid=7106 comm="syz.3.267" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 143.876477][ T7121] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 144.603387][ T7141] sg_write: process 194 (syz.3.273) changed security contexts after opening file descriptor, this is not allowed. [ 144.993707][ T29] audit: type=1400 audit(1733097829.146:438): avc: denied { map } for pid=7140 comm="syz.3.273" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 145.045426][ T29] audit: type=1400 audit(1733097829.146:439): avc: denied { execute } for pid=7140 comm="syz.3.273" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 145.117533][ T7146] loop2: detected capacity change from 0 to 7 [ 145.135009][ T7146] Dev loop2: unable to read RDB block 7 [ 145.146680][ T7146] loop2: unable to read partition table [ 145.154494][ T7146] loop2: partition table beyond EOD, truncated [ 145.162031][ T7146] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 145.701524][ T7168] fuse: Bad value for 'fd' [ 146.345026][ T7171] netlink: 'syz.2.279': attribute type 21 has an invalid length. [ 146.423190][ T7171] netlink: 'syz.2.279': attribute type 6 has an invalid length. [ 146.434997][ T7171] netlink: 132 bytes leftover after parsing attributes in process `syz.2.279'. [ 146.470410][ T29] audit: type=1400 audit(1733097830.616:440): avc: denied { write } for pid=7175 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 146.510419][ T7171] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 146.516978][ T7171] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 146.541355][ T7171] vhci_hcd vhci_hcd.0: Device attached [ 146.720964][ T5864] vhci_hcd: vhci_device speed not set [ 146.930837][ T5864] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 147.203578][ T7177] vhci_hcd: connection reset by peer [ 147.750863][ T5902] vhci_hcd: stop threads [ 147.755153][ T5902] vhci_hcd: release socket [ 147.764540][ T5902] vhci_hcd: disconnect device [ 148.440856][ T7210] (unnamed net_device) (uninitialized): (slave veth1_macvtap): Device is not bonding slave [ 148.450989][ T7210] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1_macvtap) [ 148.569531][ T7212] overlayfs: conflicting lowerdir path [ 148.713781][ T7217] futex_wake_op: syz.4.289 tries to shift op by 144; fix this program [ 149.334594][ T29] audit: type=1400 audit(1733097833.486:441): avc: denied { wake_alarm } for pid=7224 comm="syz.4.292" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 149.708085][ T7229] IPVS: stopping master sync thread 7231 ... [ 149.724178][ T29] audit: type=1400 audit(1733097833.776:442): avc: denied { create } for pid=7226 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.452675][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 150.474835][ T29] audit: type=1400 audit(1733097833.776:443): avc: denied { bind } for pid=7226 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.590634][ T29] audit: type=1400 audit(1733097833.786:444): avc: denied { write } for pid=7226 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.699933][ T29] audit: type=1400 audit(1733097834.536:445): avc: denied { setrlimit } for pid=7230 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 151.838753][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 151.879266][ T29] audit: type=1400 audit(1733097836.026:446): avc: denied { getopt } for pid=7260 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.006210][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 152.102627][ T5864] vhci_hcd: vhci_device speed not set [ 152.661414][ T8] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 152.670567][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.678733][ T8] usb 4-1: Product: syz [ 152.684672][ T8] usb 4-1: Manufacturer: syz [ 152.690966][ T8] usb 4-1: SerialNumber: syz [ 152.699503][ T8] usb 4-1: config 0 descriptor?? [ 152.719906][ T8] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 152.742930][ T29] audit: type=1400 audit(1733097836.866:447): avc: denied { bind } for pid=7269 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 152.803943][ T8] usb 4-1: Detected FT-X [ 152.859228][ T29] audit: type=1400 audit(1733097836.866:448): avc: denied { listen } for pid=7269 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 152.984979][ T7275] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7275 comm=syz.2.308 [ 153.981814][ T867] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 154.320762][ T867] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.333705][ T7271] netlink: 'syz.4.305': attribute type 21 has an invalid length. [ 154.341736][ T867] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 154.355051][ T867] usb 1-1: config 1 has no interface number 1 [ 154.375667][ T867] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 154.410166][ T7271] netlink: 'syz.4.305': attribute type 6 has an invalid length. [ 154.418639][ T867] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 154.431716][ T7271] netlink: 132 bytes leftover after parsing attributes in process `syz.4.305'. [ 154.665060][ T867] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.681415][ T867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.713086][ T867] usb 1-1: Product: syz [ 154.732205][ T867] usb 1-1: Manufacturer: syz [ 154.740783][ T867] usb 1-1: SerialNumber: syz [ 154.779320][ T7270] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 155.025605][ T867] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 155.036546][ T867] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 155.148921][ T867] usb 1-1: USB disconnect, device number 5 [ 155.210419][ T29] audit: type=1400 audit(1733097839.356:449): avc: denied { getopt } for pid=7286 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.397427][ T8] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 155.417639][ T8] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 155.458293][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.488321][ T8] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 155.536740][ T8] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 155.568265][ T8] usb 4-1: USB disconnect, device number 2 [ 155.834384][ T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 155.848076][ T8] ftdi_sio 4-1:0.0: device disconnected [ 156.811647][ T7299] futex_wake_op: syz.3.312 tries to shift op by 144; fix this program [ 158.850961][ T5864] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 159.172056][ T7324] xt_TPROXY: Can be used only with -p tcp or -p udp [ 159.209200][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 159.289808][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.722007][ T5864] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 159.732306][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.750201][ T5864] usb 4-1: config 0 descriptor?? [ 160.331146][ T5864] em28xx 4-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 160.339996][ T5864] em28xx 4-1:0.0: Video interface 0 found: [ 160.420512][ T5864] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 160.502281][ T5864] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 160.544380][ T5864] em28xx 4-1:0.0: board has no eeprom [ 160.664520][ T5864] em28xx 4-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81) [ 160.798735][ T7350] netlink: 40 bytes leftover after parsing attributes in process `syz.4.324'. [ 160.858411][ T5864] em28xx 4-1:0.0: Currently, V4L2 is not supported on this model [ 160.927624][ T51] em28xx 4-1:0.0: Binding DVB extension [ 160.934785][ T51] em28xx 4-1:0.0: no endpoint for DVB mode and transfer type 0 [ 160.942669][ T51] em28xx 4-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 160.957776][ T51] em28xx 4-1:0.0: Registering input extension [ 161.215049][ T5864] usb 4-1: USB disconnect, device number 3 [ 161.224706][ T5864] em28xx 4-1:0.0: Disconnecting em28xx [ 161.231755][ T5864] em28xx 4-1:0.0: Closing input extension [ 161.404968][ T5864] em28xx 4-1:0.0: Freeing device [ 161.471017][ T29] audit: type=1400 audit(1733097845.616:450): avc: denied { read } for pid=7358 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 163.776253][ T29] audit: type=1400 audit(1733097847.926:451): avc: denied { getopt } for pid=7409 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 163.997723][ T7423] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 165.550713][ T7427] xt_TPROXY: Can be used only with -p tcp or -p udp [ 166.381992][ T29] audit: type=1400 audit(1733097850.526:452): avc: denied { mount } for pid=7442 comm="syz.4.341" name="/" dev="configfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 166.847441][ T29] audit: type=1400 audit(1733097850.536:453): avc: denied { search } for pid=7442 comm="syz.4.341" name="/" dev="configfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 167.698590][ T29] audit: type=1400 audit(1733097850.536:454): avc: denied { read } for pid=7442 comm="syz.4.341" name="/" dev="configfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 167.759347][ T29] audit: type=1400 audit(1733097850.556:455): avc: denied { open } for pid=7442 comm="syz.4.341" path="/73/file0" dev="configfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 167.781879][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.870834][ T29] audit: type=1326 audit(1733097850.996:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.4.341" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f822d980849 code=0x0 [ 168.028941][ T29] audit: type=1400 audit(1733097852.166:457): avc: denied { ioctl } for pid=7442 comm="syz.4.341" path="/73/file0" dev="configfs" ino=1120 ioctlcmd=0x720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.067860][ T57] Bluetooth: hci5: Frame reassembly failed (-84) [ 168.079907][ T29] audit: type=1400 audit(1733097852.166:458): avc: granted { setsecparam } for pid=7442 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 168.102079][ T29] audit: type=1400 audit(1733097852.176:459): avc: denied { write } for pid=7442 comm="syz.4.341" name="/" dev="configfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 168.911619][ T51] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 169.179525][ T51] usb 3-1: config 0 has an invalid interface number: 182 but max is 1 [ 169.187928][ T51] usb 3-1: config 0 has an invalid interface number: 9 but max is 1 [ 169.201001][ T51] usb 3-1: config 0 has no interface number 0 [ 169.207109][ T51] usb 3-1: config 0 has no interface number 1 [ 169.213317][ T51] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 169.222391][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.232196][ T51] usb 3-1: config 0 descriptor?? [ 169.241628][ T51] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 169.283640][ T51] snd-usb-audio 3-1:0.182: probe with driver snd-usb-audio failed with error -2 [ 169.295667][ T7476] QAT: Stopping all acceleration devices. [ 169.326659][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.182/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.488829][ T8] usb 3-1: USB disconnect, device number 9 [ 170.090824][ T5833] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 171.494834][ T29] audit: type=1400 audit(1733097855.626:460): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 171.690836][ T5864] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 172.014240][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 172.052231][ T5864] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 172.066568][ T5864] usb 3-1: config 0 has no interface number 0 [ 172.073890][ T5864] usb 3-1: config 0 interface 3 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 172.087618][ T5864] usb 3-1: config 0 interface 3 has no altsetting 0 [ 172.162648][ T7509] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 172.162648][ T7509] program syz.1.359 not setting count and/or reply_len properly [ 172.390005][ T5864] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 172.403445][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.414205][ T5864] usb 3-1: Product: syz [ 172.467530][ T5864] usb 3-1: Manufacturer: syz [ 172.738464][ T5864] usb 3-1: SerialNumber: syz [ 172.763780][ T5864] usb 3-1: config 0 descriptor?? [ 172.772350][ T5864] hub 3-1:0.3: bad descriptor, ignoring hub [ 172.786692][ T5864] hub 3-1:0.3: probe with driver hub failed with error -5 [ 172.955735][ T7514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.360'. [ 173.081729][ T5906] usb 3-1: USB disconnect, device number 10 [ 174.700899][ T7529] usb usb4: usbfs: process 7529 (syz.2.364) did not claim interface 0 before use [ 175.307911][ T29] audit: type=1400 audit(1733097859.456:461): avc: denied { create } for pid=7533 comm="syz.4.365" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 175.510827][ T5906] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 175.590849][ T5864] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 175.674562][ T5906] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 175.704601][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.773733][ T5864] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 175.789394][ T29] audit: type=1400 audit(1733097859.926:462): avc: denied { unlink } for pid=5811 comm="syz-executor" name="file0" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 175.791010][ T5906] usb 2-1: Product: syz [ 175.811921][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.830023][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.911158][ T5864] usb 4-1: Product: syz [ 175.932391][ T5864] usb 4-1: Manufacturer: syz [ 175.942725][ T29] audit: type=1326 audit(1733097860.036:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7540 comm="syz.0.368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f016f580849 code=0x0 [ 175.946516][ T5906] usb 2-1: Manufacturer: syz [ 175.965667][ T5864] usb 4-1: SerialNumber: syz [ 175.982175][ T5906] usb 2-1: SerialNumber: syz [ 175.984146][ T5864] usb 4-1: config 0 descriptor?? [ 175.988876][ T5906] usb 2-1: config 0 descriptor?? [ 175.994228][ T5864] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 004 [ 176.052274][ T5906] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 007 [ 176.404351][ T5864] (null): failure reading functionality [ 176.448268][ T5864] i2c i2c-1: failure reading functionality [ 176.464190][ T5864] i2c i2c-1: connected i2c-tiny-usb device [ 176.464944][ T5906] (null): failure reading functionality [ 176.552972][ T5864] usb 4-1: USB disconnect, device number 4 [ 176.573399][ T5906] i2c i2c-2: failure reading functionality [ 176.613769][ T5906] i2c i2c-2: connected i2c-tiny-usb device [ 176.642826][ T5906] usb 2-1: USB disconnect, device number 7 [ 176.745173][ T29] audit: type=1400 audit(1733097860.896:464): avc: denied { setopt } for pid=7553 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 177.010865][ T5819] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 177.195120][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.206917][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.217378][ T5819] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 177.226537][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.483012][ T5819] usb 1-1: config 0 descriptor?? [ 177.612900][ T7562] netlink: 'syz.3.375': attribute type 21 has an invalid length. [ 177.621211][ T7562] netlink: 'syz.3.375': attribute type 6 has an invalid length. [ 177.629271][ T7562] netlink: 132 bytes leftover after parsing attributes in process `syz.3.375'. [ 177.717237][ T7554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.740496][ T7554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.795109][ T7554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.841518][ T7573] netlink: 'syz.2.379': attribute type 1 has an invalid length. [ 177.841878][ T7554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.884490][ T7573] bond1: entered promiscuous mode [ 177.893817][ T7573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.917095][ T7554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.957022][ T7554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.989319][ T7554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.020625][ T7554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.037116][ T7554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.101138][ T7554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.338491][ T5819] usbhid 1-1:0.0: can't add hid device: -71 [ 178.444584][ T5819] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 178.473821][ T7586] usb usb4: usbfs: process 7586 (syz.1.381) did not claim interface 0 before use [ 178.575339][ T5819] usb 1-1: USB disconnect, device number 6 [ 179.630847][ T5819] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 179.816098][ T5819] usb 2-1: Using ep0 maxpacket: 32 [ 179.836536][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.856856][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.891732][ T5819] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 179.907187][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.930932][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 179.953071][ T5819] usb 2-1: config 0 descriptor?? [ 179.960496][ T5819] hub 2-1:0.0: USB hub found [ 180.161837][ T5819] hub 2-1:0.0: 6 ports detected [ 180.179927][ T5819] hub 2-1:0.0: insufficient power available to use all downstream ports [ 180.589979][ T5819] usb 2-1: USB disconnect, device number 8 [ 180.808275][ T5864] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 181.171478][ T5864] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 181.444580][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.473499][ T5864] usb 1-1: Product: syz [ 181.477778][ T5864] usb 1-1: Manufacturer: syz [ 181.482866][ T5864] usb 1-1: SerialNumber: syz [ 181.501608][ T5864] usb 1-1: config 0 descriptor?? [ 181.604048][ T5864] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 007 [ 181.910165][ T29] audit: type=1400 audit(1733097866.056:465): avc: denied { watch } for pid=7616 comm="syz.2.390" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 182.262399][ T5864] (null): failure reading functionality [ 182.705575][ T5864] i2c i2c-1: failure reading functionality [ 182.716227][ T5864] i2c i2c-1: connected i2c-tiny-usb device [ 182.753655][ T5864] usb 1-1: USB disconnect, device number 7 [ 185.110823][ T29] audit: type=1400 audit(1733097869.236:466): avc: denied { connect } for pid=7648 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.194092][ T29] audit: type=1400 audit(1733097869.246:467): avc: denied { ioctl } for pid=7648 comm="syz.0.398" path="socket:[15470]" dev="sockfs" ino=15470 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.234391][ T7658] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.561180][ T29] audit: type=1400 audit(1733097869.686:468): avc: denied { mount } for pid=7660 comm="syz.4.403" name="/" dev="rpc_pipefs" ino=15139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 185.592209][ T29] audit: type=1400 audit(1733097869.706:469): avc: denied { mount } for pid=7660 comm="syz.4.403" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 185.646715][ T29] audit: type=1400 audit(1733097869.796:470): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 185.764418][ T29] audit: type=1400 audit(1733097869.916:471): avc: denied { append } for pid=7665 comm="syz.3.405" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 185.798664][ T7668] usb usb1: usbfs: process 7668 (syz.3.405) did not claim interface 5 before use [ 186.201052][ T5864] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 186.398084][ T29] audit: type=1400 audit(1733097870.546:472): avc: denied { mount } for pid=7672 comm="syz.2.407" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 186.407493][ T5864] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 186.440710][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.456305][ T5864] usb 1-1: Product: syz [ 186.460517][ T5864] usb 1-1: Manufacturer: syz [ 186.465844][ T5864] usb 1-1: SerialNumber: syz [ 186.478378][ T5864] usb 1-1: config 0 descriptor?? [ 186.488944][ T5864] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 008 [ 186.555918][ T7688] netlink: 'syz.4.409': attribute type 1 has an invalid length. [ 186.615377][ T7688] bond1: entered promiscuous mode [ 186.620658][ T7688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.825208][ T29] audit: type=1400 audit(1733097870.976:473): avc: denied { setopt } for pid=7691 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 186.900975][ T5864] (null): failure reading functionality [ 186.908487][ T5864] i2c i2c-1: failure reading functionality [ 186.917432][ T5864] i2c i2c-1: connected i2c-tiny-usb device [ 186.932589][ T5864] usb 1-1: USB disconnect, device number 8 [ 188.650883][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 188.820686][ T7707] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.091686][ T29] audit: type=1400 audit(1733097873.246:474): avc: denied { setopt } for pid=7711 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 189.113408][ T7718] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7718 comm=syz.1.418 [ 189.771428][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 190.192492][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.208160][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.219730][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 191.062868][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.079131][ T8] usb 4-1: config 0 descriptor?? [ 191.494229][ T7735] sit0: entered allmulticast mode [ 192.056725][ T29] audit: type=1400 audit(1733097876.206:475): avc: denied { map } for pid=7742 comm="syz.2.423" path="socket:[16400]" dev="sockfs" ino=16400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 192.079872][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.133031][ T29] audit: type=1400 audit(1733097876.246:476): avc: denied { read } for pid=7742 comm="syz.2.423" path="socket:[16400]" dev="sockfs" ino=16400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 192.231193][ T8] appletouch 4-1:0.0: Failed to read mode from device. [ 192.249345][ T8] appletouch 4-1:0.0: probe with driver appletouch failed with error -5 [ 192.285608][ T8] usb 4-1: USB disconnect, device number 5 [ 192.411195][ T29] audit: type=1400 audit(1733097876.526:477): avc: denied { read } for pid=7742 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 192.559084][ T29] audit: type=1400 audit(1733097876.616:478): avc: denied { setopt } for pid=7742 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 192.784866][ T29] audit: type=1400 audit(1733097876.696:479): avc: denied { ioctl } for pid=7742 comm="syz.2.423" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 192.810199][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.960896][ T867] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 193.115864][ T7756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.181940][ T867] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 193.201906][ T867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.225713][ T867] usb 2-1: Product: syz [ 193.243033][ T867] usb 2-1: Manufacturer: syz [ 193.255212][ T867] usb 2-1: SerialNumber: syz [ 193.275208][ T867] usb 2-1: config 0 descriptor?? [ 193.284788][ T7761] netlink: 'syz.4.429': attribute type 1 has an invalid length. [ 193.299182][ T867] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 009 [ 193.332203][ T7761] bond2: entered promiscuous mode [ 193.348751][ T7761] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.420906][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 193.582441][ T8] usb 1-1: config 0 has an invalid interface number: 182 but max is 1 [ 193.591012][ T8] usb 1-1: config 0 has an invalid interface number: 9 but max is 1 [ 193.599641][ T8] usb 1-1: config 0 has no interface number 0 [ 193.606161][ T8] usb 1-1: config 0 has no interface number 1 [ 193.612698][ T8] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 193.622135][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.646360][ T8] usb 1-1: config 0 descriptor?? [ 193.676612][ T8] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 193.767380][ T867] (null): failure reading functionality [ 193.786864][ T867] i2c i2c-1: failure reading functionality [ 193.805884][ T867] i2c i2c-1: connected i2c-tiny-usb device [ 193.817613][ T8] snd-usb-audio 1-1:0.182: probe with driver snd-usb-audio failed with error -2 [ 193.829160][ T867] usb 2-1: USB disconnect, device number 9 [ 193.873516][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.182/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.888866][ T825] usb 1-1: USB disconnect, device number 9 [ 194.043288][ T7766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.430'. [ 194.189811][ T7769] Bluetooth: MGMT ver 1.23 [ 194.259279][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.266108][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.406459][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 195.620984][ T29] audit: type=1400 audit(1733097879.666:480): avc: denied { bind } for pid=7782 comm="syz.2.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.660665][ T29] audit: type=1400 audit(1733097879.806:481): avc: denied { listen } for pid=7782 comm="syz.2.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.750104][ T29] audit: type=1400 audit(1733097879.876:482): avc: denied { read } for pid=7782 comm="syz.2.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.839420][ T7794] vivid-000: disconnect [ 195.871270][ T29] audit: type=1400 audit(1733097880.006:483): avc: denied { accept } for pid=7787 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 195.950035][ T7777] vivid-000: reconnect [ 198.450693][ T29] audit: type=1400 audit(1733097882.596:484): avc: denied { write } for pid=7817 comm="syz.3.443" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 198.454546][ T7818] random: crng reseeded on system resumption [ 198.509612][ T7819] netlink: 92 bytes leftover after parsing attributes in process `syz.3.443'. [ 198.510973][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 198.694150][ T8] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 198.716896][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.773693][ T8] usb 3-1: Product: syz [ 198.791560][ T8] usb 3-1: Manufacturer: syz [ 198.808033][ T8] usb 3-1: SerialNumber: syz [ 200.000202][ T8] usb 3-1: config 0 descriptor?? [ 200.380704][ T8] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 011 [ 200.723431][ T8] (null): failure reading functionality [ 200.729850][ T8] i2c i2c-1: failure reading functionality [ 200.752031][ T8] i2c i2c-1: connected i2c-tiny-usb device [ 200.763626][ T8] usb 3-1: USB disconnect, device number 11 [ 201.055332][ T29] audit: type=1400 audit(1733097885.206:485): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 201.119118][ T7843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.182467][ T7845] FAULT_INJECTION: forcing a failure. [ 201.182467][ T7845] name failslab, interval 1, probability 0, space 0, times 0 [ 201.199849][ T7845] CPU: 0 UID: 0 PID: 7845 Comm: syz.0.450 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 201.210136][ T7845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 201.220207][ T7845] Call Trace: [ 201.223500][ T7845] [ 201.225168][ T7847] Cache volume key already in use (9p,(null),) [ 201.226427][ T7845] dump_stack_lvl+0x16c/0x1f0 [ 201.226461][ T7845] should_fail_ex+0x497/0x5b0 [ 201.242016][ T7845] ? fs_reclaim_acquire+0xae/0x150 [ 201.242283][ T29] audit: type=1400 audit(1733097885.396:486): avc: denied { read write } for pid=7846 comm="syz.4.451" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 201.247169][ T7845] should_failslab+0xc2/0x120 [ 201.247197][ T7845] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 201.247220][ T7845] ? getname_flags.part.0+0x4c/0x550 [ 201.247247][ T7845] ? vfs_write+0x306/0x1150 [ 201.287971][ T7845] getname_flags.part.0+0x4c/0x550 [ 201.291794][ T29] audit: type=1400 audit(1733097885.396:487): avc: denied { open } for pid=7846 comm="syz.4.451" path="/97/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 201.293093][ T7845] getname+0x8d/0xe0 [ 201.293119][ T7845] do_sys_openat2+0x104/0x1e0 [ 201.322104][ T29] audit: type=1800 audit(1733097885.426:488): pid=7847 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.451" name="/" dev="9p" ino=2 res=0 errno=0 [ 201.323583][ T7845] ? __pfx_do_sys_openat2+0x10/0x10 [ 201.323621][ T7845] ? __fget_files+0x206/0x3a0 [ 201.353255][ T7845] __x64_sys_openat+0x175/0x210 [ 201.358132][ T7845] ? __pfx___x64_sys_openat+0x10/0x10 [ 201.363596][ T7845] ? ksys_write+0x1ba/0x250 [ 201.368099][ T7845] do_syscall_64+0xcd/0x250 [ 201.372612][ T7845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.378502][ T7845] RIP: 0033:0x7f016f580849 [ 201.382904][ T7845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.402688][ T7845] RSP: 002b:00007f01703e9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 201.411194][ T7845] RAX: ffffffffffffffda RBX: 00007f016f745fa0 RCX: 00007f016f580849 [ 201.419177][ T7845] RDX: 0000000000020842 RSI: 000000002000c380 RDI: ffffffffffffff9c [ 201.427162][ T7845] RBP: 00007f01703e90a0 R08: 0000000000000000 R09: 0000000000000000 [ 201.435132][ T7845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.443100][ T7845] R13: 0000000000000000 R14: 00007f016f745fa0 R15: 00007ffe7b838ba8 [ 201.451082][ T7845] [ 201.590241][ T7851] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.023579][ T29] audit: type=1400 audit(1733097886.146:489): avc: denied { setopt } for pid=7848 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 202.044315][ T29] audit: type=1400 audit(1733097886.146:490): avc: denied { write } for pid=7848 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 202.044981][ T825] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 202.390022][ T29] audit: type=1400 audit(1733097886.146:491): avc: denied { read } for pid=7848 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 202.827472][ T7866] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x2 [ 202.957211][ T5819] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 203.080920][ T825] usb 3-1: device descriptor read/64, error -71 [ 203.110886][ T5819] usb 1-1: Using ep0 maxpacket: 16 [ 203.160253][ T5819] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 203.169434][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.178295][ T5819] usb 1-1: Product: syz [ 203.183165][ T5819] usb 1-1: Manufacturer: syz [ 203.188083][ T5819] usb 1-1: SerialNumber: syz [ 203.330988][ T825] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 203.363224][ T7875] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.380951][ T8] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 203.472671][ T825] usb 3-1: device descriptor read/64, error -71 [ 203.523991][ T29] audit: type=1400 audit(1733097887.666:492): avc: denied { bind } for pid=7854 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.581391][ T825] usb usb3-port1: attempt power cycle [ 203.662733][ T5819] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 203.679694][ T5819] snd-usb-audio 1-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 203.757228][ T7883] netlink: 'syz.1.462': attribute type 1 has an invalid length. [ 203.777340][ T8] usb 5-1: Invalid ep0 maxpacket: 64 [ 203.921355][ T8] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 204.111092][ T8] usb 5-1: Invalid ep0 maxpacket: 64 [ 204.126482][ T8] usb usb5-port1: attempt power cycle [ 204.202236][ T5819] usb 1-1: USB disconnect, device number 10 [ 204.253397][ T825] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 204.281457][ T825] usb 3-1: device descriptor read/8, error -71 [ 204.441856][ T6458] udevd[6458]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.520874][ T8] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 204.551446][ T8] usb 5-1: Invalid ep0 maxpacket: 64 [ 204.610952][ T825] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 204.631437][ T825] usb 3-1: device descriptor read/8, error -71 [ 204.682598][ T8] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 204.756639][ T8] usb 5-1: Invalid ep0 maxpacket: 64 [ 204.766197][ T8] usb usb5-port1: unable to enumerate USB device [ 204.851568][ T825] usb usb3-port1: unable to enumerate USB device [ 204.890095][ T7900] can0: slcan on ttyS3. [ 205.631914][ T7900] can0 (unregistered): slcan off ttyS3. [ 205.668104][ T7900] Falling back ldisc for ttyS3. [ 205.792958][ T29] audit: type=1400 audit(1733097889.946:493): avc: denied { nlmsg_read } for pid=7907 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 205.961851][ T5827] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 205.972800][ T8] IPVS: starting estimator thread 0... [ 206.060967][ T825] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 206.356661][ T825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.481816][ T825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.657333][ T825] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 206.677291][ T825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.716230][ T7920] IPVS: using max 32 ests per chain, 76800 per kthread [ 206.732000][ T825] usb 4-1: config 0 descriptor?? [ 206.809850][ T7930] netlink: 40 bytes leftover after parsing attributes in process `syz.4.476'. [ 207.273177][ T29] audit: type=1326 audit(1733097891.366:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7928 comm="syz.0.475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f016f580849 code=0x0 [ 207.444512][ T825] hid-steam 0003:28DE:1142.0003: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 207.563712][ T825] hid-steam 0003:28DE:1142.0003: Steam wireless receiver connected [ 207.586213][ T825] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 207.886522][ T7962] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.924169][ T7965] syz.3.472: attempt to access beyond end of device [ 207.924169][ T7965] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 207.969468][ T7965] befs: (nbd3): unable to read superblock [ 208.122059][ T8] usb 4-1: USB disconnect, device number 6 [ 208.132234][ T8] hid-steam 0003:28DE:1142.0003: Steam wireless receiver disconnected [ 209.310859][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 210.047849][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 210.076600][ T29] audit: type=1400 audit(1733097894.226:495): avc: denied { map } for pid=7978 comm="syz.1.486" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 210.240970][ T29] audit: type=1400 audit(1733097894.356:496): avc: denied { execute } for pid=7978 comm="syz.1.486" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 210.511337][ T8] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 210.522754][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.621732][ T8] usb 4-1: Product: syz [ 210.785668][ T8] usb 4-1: Manufacturer: syz [ 210.791993][ T8] usb 4-1: SerialNumber: syz [ 210.799564][ T7997] sit0: entered allmulticast mode [ 210.812146][ T8] usb 4-1: config 0 descriptor?? [ 210.906447][ T7979] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 211.060630][ T7979] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 211.097366][ T7975] hsr0: entered allmulticast mode [ 211.102829][ T7979] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 211.105221][ T7975] hsr_slave_0: entered allmulticast mode [ 211.116612][ T7975] hsr_slave_1: entered allmulticast mode [ 211.150340][ T7979] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 211.181156][ T7979] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 211.240916][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.564110][ T5906] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 211.580670][ T8007] FAULT_INJECTION: forcing a failure. [ 211.580670][ T8007] name failslab, interval 1, probability 0, space 0, times 0 [ 211.593862][ T8007] CPU: 0 UID: 0 PID: 8007 Comm: syz.1.491 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 211.604119][ T8007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 211.614261][ T8007] Call Trace: [ 211.617550][ T8007] [ 211.620477][ T8007] dump_stack_lvl+0x16c/0x1f0 [ 211.625148][ T8007] should_fail_ex+0x497/0x5b0 [ 211.629816][ T8007] ? fs_reclaim_acquire+0xae/0x150 [ 211.634934][ T8007] should_failslab+0xc2/0x120 [ 211.639618][ T8007] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 211.644980][ T8007] ? security_inode_alloc+0x3b/0x2b0 [ 211.650257][ T8007] security_inode_alloc+0x3b/0x2b0 [ 211.655360][ T8007] inode_init_always_gfp+0xce4/0x1030 [ 211.660725][ T8007] alloc_inode+0x82/0x230 [ 211.665051][ T8007] path_from_stashed+0x55f/0xec0 [ 211.669976][ T8007] ? lockdep_hardirqs_on+0x7c/0x110 [ 211.675167][ T8007] ? __pfx_path_from_stashed+0x10/0x10 [ 211.680621][ T8007] ns_get_path+0x5f/0x80 [ 211.684853][ T8007] proc_ns_get_link+0x122/0x260 [ 211.689694][ T8007] ? __pfx_proc_ns_get_link+0x10/0x10 [ 211.695064][ T8007] ? __pfx_proc_ns_get_link+0x10/0x10 [ 211.700428][ T8007] step_into+0x1aed/0x2230 [ 211.704857][ T8007] ? __pfx_step_into+0x10/0x10 [ 211.709616][ T8007] ? __pfx___up_read+0x10/0x10 [ 211.714374][ T8007] path_openat+0x74c/0x2d60 [ 211.718873][ T8007] ? __pfx_path_openat+0x10/0x10 [ 211.723799][ T8007] ? __pfx___lock_acquire+0x10/0x10 [ 211.728988][ T8007] do_filp_open+0x20c/0x470 [ 211.733479][ T8007] ? __pfx_do_filp_open+0x10/0x10 [ 211.738487][ T8007] ? find_held_lock+0x2d/0x110 [ 211.743253][ T8007] ? alloc_fd+0x41f/0x760 [ 211.747576][ T8007] do_sys_openat2+0x17a/0x1e0 [ 211.752243][ T8007] ? __pfx_do_sys_openat2+0x10/0x10 [ 211.757438][ T8007] ? __pfx___schedule+0x10/0x10 [ 211.762277][ T8007] __x64_sys_openat+0x175/0x210 [ 211.767122][ T8007] ? __pfx___x64_sys_openat+0x10/0x10 [ 211.772484][ T8007] ? xfd_validate_state+0x5d/0x180 [ 211.777591][ T8007] do_syscall_64+0xcd/0x250 [ 211.782093][ T8007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.787984][ T8007] RIP: 0033:0x7f898b17f1b0 [ 211.792404][ T8007] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 8f 02 00 8b 44 [ 211.812179][ T8007] RSP: 002b:00007f898bf3ef80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 211.820584][ T8007] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f898b17f1b0 [ 211.828544][ T8007] RDX: 0000000000000000 RSI: 00007f898b1f3a9e RDI: 00000000ffffff9c [ 211.836518][ T8007] RBP: 00007f898b1f3a9e R08: 0000000000000000 R09: 0000000000000000 [ 211.844745][ T8007] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 211.852878][ T8007] R13: 0000000000000000 R14: 00007f898b346080 R15: 00007fffae147148 [ 211.860847][ T8007] [ 212.030791][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 212.465797][ T5906] usb 3-1: New USB device found, idVendor=04cb, idProduct=0111, bcdDevice=d1.8d [ 212.475194][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.520989][ T5906] usb 3-1: Product: syz [ 212.525652][ T5906] usb 3-1: Manufacturer: syz [ 212.530369][ T5906] usb 3-1: SerialNumber: syz [ 212.536671][ T825] usb 4-1: USB disconnect, device number 7 [ 212.541828][ T5906] usb 3-1: config 0 descriptor?? [ 212.556174][ T29] audit: type=1800 audit(1733097896.706:497): pid=8013 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.493" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 212.580060][ T8014] xt_CT: You must specify a L4 protocol and not use inversions on it [ 212.639819][ T5906] gspca_main: finepix-2.14.0 probing 04cb:0111 [ 212.722089][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.494'. [ 212.803773][ T8003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.842468][ T8003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.866866][ T8003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.903609][ T8003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.942549][ T5906] usb 3-1: USB disconnect, device number 16 [ 213.131751][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.131990][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 213.211967][ T29] audit: type=1400 audit(1733097897.356:498): avc: denied { write } for pid=8011 comm="syz.1.493" path="socket:[16321]" dev="sockfs" ino=16321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 213.220944][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 213.241743][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 213.668419][ T29] audit: type=1400 audit(1733097897.816:499): avc: denied { bind } for pid=8030 comm="syz.2.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 214.250884][ T29] audit: type=1400 audit(1733097897.816:500): avc: denied { name_bind } for pid=8030 comm="syz.2.499" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 214.287084][ T29] audit: type=1400 audit(1733097897.816:501): avc: denied { node_bind } for pid=8030 comm="syz.2.499" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 214.327734][ T29] audit: type=1400 audit(1733097898.376:502): avc: denied { listen } for pid=8030 comm="syz.2.499" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 214.349212][ T29] audit: type=1400 audit(1733097898.396:503): avc: denied { connect } for pid=8030 comm="syz.2.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 214.372465][ T29] audit: type=1400 audit(1733097898.396:504): avc: denied { name_connect } for pid=8030 comm="syz.2.499" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 214.404158][ T29] audit: type=1400 audit(1733097898.396:505): avc: denied { accept } for pid=8030 comm="syz.2.499" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 214.648241][ T29] audit: type=1400 audit(1733097898.396:506): avc: denied { read } for pid=8030 comm="syz.2.499" laddr=127.0.0.1 lport=33594 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 216.110876][ T8061] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.950916][ T5819] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 217.122641][ T5819] usb 4-1: unable to get BOS descriptor or descriptor too short [ 217.139402][ T5819] usb 4-1: not running at top speed; connect to a high speed hub [ 217.159073][ T5819] usb 4-1: config 9 has an invalid interface number: 218 but max is 0 [ 217.168217][ T5819] usb 4-1: config 9 has no interface number 0 [ 217.354468][ T5819] usb 4-1: config 9 interface 218 has no altsetting 0 [ 217.397482][ T5819] usb 4-1: string descriptor 0 read error: -22 [ 217.411760][ T8080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.439219][ T5819] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=d7.19 [ 217.505965][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.697849][ T8085] capability: warning: `syz.1.514' uses deprecated v2 capabilities in a way that may be insecure [ 217.760667][ T5819] peak_usb 4-1:9.218: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 218.380316][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 218.380380][ T29] audit: type=1400 audit(1733097902.336:510): avc: denied { write } for pid=8088 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.630972][ T29] audit: type=1400 audit(1733097902.336:511): avc: denied { name_connect } for pid=8088 comm="syz.2.515" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 218.694509][ T8091] team0: Device ipvlan2 failed to register rx_handler [ 220.210923][ T29] audit: type=1400 audit(1733097904.006:512): avc: denied { write } for pid=8095 comm="syz.0.516" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 220.540584][ T29] audit: type=1400 audit(1733097904.006:513): avc: denied { ioctl } for pid=8095 comm="syz.0.516" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 220.565834][ T29] audit: type=1400 audit(1733097904.386:514): avc: denied { name_bind } for pid=8107 comm="syz.0.520" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 220.844803][ T5819] peak_usb 4-1:9.218 can0: unable to request usb[type=2 value=5] err=-71 [ 220.858031][ T5819] peak_usb 4-1:9.218: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 220.912236][ T5819] peak_usb 4-1:9.218: probe with driver peak_usb failed with error -71 [ 221.188565][ T5819] usb 4-1: USB disconnect, device number 8 [ 221.228981][ T8122] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8122 comm=syz.2.523 [ 222.567912][ T29] audit: type=1400 audit(1733097906.696:515): avc: denied { watch_mount watch_reads } for pid=8125 comm="syz.0.524" path="/106" dev="tmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 223.130888][ T5865] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 223.556806][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 223.562445][ T5865] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.588114][ T5865] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.634491][ T5865] usb 1-1: config 0 interface 0 has no altsetting 0 [ 223.649472][ T29] audit: type=1400 audit(1733097907.796:516): avc: denied { bind } for pid=8144 comm="syz.4.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 223.678480][ T5865] usb 1-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 223.679113][ T29] audit: type=1400 audit(1733097907.816:517): avc: denied { name_bind } for pid=8144 comm="syz.4.529" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 223.719495][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.726909][ T29] audit: type=1400 audit(1733097907.816:518): avc: denied { node_bind } for pid=8144 comm="syz.4.529" saddr=::ffff:255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 223.761364][ T29] audit: type=1400 audit(1733097907.866:519): avc: denied { module_request } for pid=8144 comm="syz.4.529" kmod="algif-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 223.763168][ T5865] usb 1-1: config 0 descriptor?? [ 223.849757][ T5865] usbhid 1-1:0.0: can't add hid device: -22 [ 223.861706][ T5865] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 223.894668][ T29] audit: type=1400 audit(1733097908.036:520): avc: denied { getopt } for pid=8135 comm="syz.2.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 224.173942][ T29] audit: type=1326 audit(1733097908.306:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8148 comm="syz.4.530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f822d980849 code=0x0 [ 224.991199][ T5864] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 225.121648][ T5865] usb 1-1: USB disconnect, device number 11 [ 225.154121][ T8163] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.163634][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 225.221747][ T29] audit: type=1326 audit(1733097909.376:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8158 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898b180849 code=0x7fc00000 [ 225.235898][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 225.264547][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 225.275374][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.288535][ T5864] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.298812][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.314274][ T5864] usb 4-1: config 0 descriptor?? [ 225.392372][ T8169] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8169 comm=syz.0.536 [ 225.516434][ T29] audit: type=1400 audit(1733097909.546:523): avc: denied { create } for pid=8166 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 225.585749][ T29] audit: type=1400 audit(1733097909.546:524): avc: denied { write } for pid=8166 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 225.606496][ T29] audit: type=1400 audit(1733097909.556:525): avc: denied { read } for pid=8166 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 226.146956][ T5817] Bluetooth: hci5: command 0x1003 tx timeout [ 226.380891][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 227.145285][ T5864] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 227.165528][ T5864] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 228.096822][ T8198] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8198 comm=syz.2.540 [ 228.961515][ T8209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.972985][ T8208] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.989318][ T8209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.100814][ T867] usb 4-1: USB disconnect, device number 9 [ 229.309967][ T8220] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 229.491497][ T8221] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8221 comm=syz.2.547 [ 230.010947][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 230.010964][ T29] audit: type=1400 audit(1733097914.156:533): avc: denied { override_creds } for pid=8217 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 232.157587][ T29] audit: type=1326 audit(1733097916.146:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8226 comm="syz.1.549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f898b180849 code=0x0 [ 233.494248][ T5864] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 233.858650][ T8257] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 233.921287][ T8259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 234.171775][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 234.182625][ T5864] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 234.191845][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.199924][ T5864] usb 3-1: Product: syz [ 234.230999][ T8265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.857706][ T5864] usb 3-1: Manufacturer: syz [ 234.864358][ T5864] usb 3-1: SerialNumber: syz [ 234.874083][ T5864] usb 3-1: config 0 descriptor?? [ 234.907174][ T29] audit: type=1400 audit(1733097919.056:535): avc: denied { read } for pid=5174 comm="acpid" name="event8" dev="devtmpfs" ino=2915 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 234.965365][ T29] audit: type=1400 audit(1733097919.056:536): avc: denied { open } for pid=5174 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=2915 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 235.115782][ T5864] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 235.265923][ T29] audit: type=1400 audit(1733097919.056:537): avc: denied { ioctl } for pid=5174 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=2915 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 235.345786][ T8278] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8278 comm=syz.1.561 [ 236.517015][ T5864] gspca_sunplus: reg_w_riv err -110 [ 236.522555][ T5864] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 237.551499][ T5864] usb 3-1: USB disconnect, device number 17 [ 238.900958][ T29] audit: type=1326 audit(1733097922.926:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8295 comm="syz.2.568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1a1f80849 code=0x0 [ 239.177298][ T29] audit: type=1400 audit(1733097922.966:539): avc: denied { name_bind } for pid=8302 comm="syz.0.566" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 240.468973][ T29] audit: type=1400 audit(1733097924.616:540): avc: denied { create } for pid=8317 comm="syz.0.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 240.489521][ T29] audit: type=1400 audit(1733097924.646:541): avc: denied { append } for pid=8317 comm="syz.0.572" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 240.504570][ T8326] netlink: 56 bytes leftover after parsing attributes in process `syz.4.573'. [ 240.567968][ T8326] process 'syz.4.573' launched '/dev/fd/3' with NULL argv: empty string added [ 240.584513][ T29] audit: type=1400 audit(1733097924.726:542): avc: denied { execute_no_trans } for pid=8325 comm="syz.4.573" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 240.674905][ T29] audit: type=1400 audit(1733097924.776:543): avc: denied { write } for pid=8317 comm="syz.0.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 240.722626][ T29] audit: type=1400 audit(1733097924.856:544): avc: denied { setopt } for pid=8324 comm="syz.1.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 241.868858][ T5827] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 242.391179][ T5906] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 242.668449][ T8360] team0: Cannot enslave team device to itself [ 242.676218][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 242.687698][ T5906] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 242.729939][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.756391][ T5906] usb 3-1: config 0 descriptor?? [ 244.446890][ T867] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 244.584257][ T29] audit: type=1326 audit(1733097928.736:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.3.587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8547980849 code=0x0 [ 244.782669][ T867] usb 5-1: Using ep0 maxpacket: 32 [ 244.862216][ T867] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 244.873675][ T867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.881940][ T867] usb 5-1: Product: syz [ 244.886201][ T867] usb 5-1: Manufacturer: syz [ 244.891002][ T867] usb 5-1: SerialNumber: syz [ 244.903464][ T867] usb 5-1: config 0 descriptor?? [ 244.914386][ T867] usb 5-1: bad CDC descriptors [ 244.920540][ T867] usb 5-1: unsupported MDLM descriptors [ 245.047061][ T5906] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 245.125730][ T5906] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 245.161068][ T5906] asix 3-1:0.0: probe with driver asix failed with error -71 [ 245.187150][ T5906] usb 3-1: USB disconnect, device number 18 [ 245.254492][ T8363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.584'. [ 245.374635][ T8] usb 5-1: USB disconnect, device number 10 [ 246.144656][ T29] audit: type=1400 audit(1733097930.296:546): avc: denied { setopt } for pid=8381 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 246.478924][ T8395] vivid-001: disconnect [ 246.561301][ T8399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.834783][ T29] audit: type=1400 audit(1733097930.926:547): avc: denied { connect } for pid=8392 comm="syz.0.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 246.943568][ T5819] vivid-001: reconnect [ 247.120071][ T8406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.595'. [ 247.161412][ T5864] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 247.400898][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 247.980305][ T5864] usb 5-1: config 0 has an invalid interface number: 174 but max is 0 [ 247.989166][ T5864] usb 5-1: config 0 has no interface number 0 [ 248.006834][ T5864] usb 5-1: New USB device found, idVendor=04ca, idProduct=0000, bcdDevice=ee.00 [ 248.026068][ T8416] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 248.183711][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.204062][ T5864] usb 5-1: Product: syz [ 248.214307][ T5864] usb 5-1: Manufacturer: syz [ 248.222368][ T5864] usb 5-1: SerialNumber: syz [ 248.241735][ T5864] usb 5-1: config 0 descriptor?? [ 249.289455][ T5817] Bluetooth: hci0: command 0x0c1a tx timeout [ 249.313719][ T8404] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 249.708640][ T8404] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 249.711708][ T5819] usb 5-1: USB disconnect, device number 11 [ 249.721099][ T8404] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 249.736394][ T8404] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 249.900613][ T8404] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 249.988800][ T8430] netlink: 64 bytes leftover after parsing attributes in process `syz.3.600'. [ 251.770930][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 251.777010][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 251.783401][ T5817] Bluetooth: hci1: command 0x0c1a tx timeout [ 251.931000][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 252.128601][ T29] audit: type=1400 audit(1733097936.266:548): avc: denied { accept } for pid=8456 comm="syz.1.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 252.175378][ T29] audit: type=1400 audit(1733097936.276:549): avc: denied { ioctl } for pid=8456 comm="syz.1.606" path="socket:[19133]" dev="sockfs" ino=19133 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 252.178034][ T8460] netlink: 40 bytes leftover after parsing attributes in process `syz.3.607'. [ 252.500823][ T5819] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 252.751114][ T825] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 252.789070][ T5819] usb 2-1: Using ep0 maxpacket: 8 [ 252.857087][ T5819] usb 2-1: config 7 has an invalid interface number: 60 but max is 3 [ 252.995015][ T5819] usb 2-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 253.038626][ T5819] usb 2-1: config 7 has an invalid interface number: 183 but max is 3 [ 253.047486][ T825] usb 3-1: Using ep0 maxpacket: 16 [ 253.134483][ T5819] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 253.143463][ T5819] usb 2-1: config 7 has an invalid descriptor of length 245, skipping remainder of the config [ 253.154565][ T5819] usb 2-1: config 7 has 2 interfaces, different from the descriptor's value: 4 [ 253.154671][ T825] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 253.173653][ T5819] usb 2-1: config 7 has no interface number 0 [ 253.179782][ T5819] usb 2-1: config 7 has no interface number 1 [ 253.185403][ T29] audit: type=1400 audit(1733097937.326:550): avc: denied { mounton } for pid=8470 comm="syz.3.611" path="/116/file0/file0" dev="bpf" ino=18216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=file permissive=1 [ 253.186088][ T5819] usb 2-1: config 7 interface 60 altsetting 5 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 253.208521][ C0] vkms_vblank_simulate: vblank timer overrun [ 253.241988][ T825] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 253.260003][ T825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.268121][ T825] usb 3-1: Product: syz [ 253.275669][ T5819] usb 2-1: config 7 interface 60 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 253.289868][ T825] usb 3-1: Manufacturer: syz [ 253.304502][ T825] usb 3-1: SerialNumber: syz [ 253.313706][ T5819] usb 2-1: config 7 interface 60 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 253.318566][ T29] audit: type=1400 audit(1733097937.466:551): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 253.332592][ T825] usb 3-1: config 0 descriptor?? [ 253.390848][ T5819] usb 2-1: config 7 interface 60 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 253.404134][ T5819] usb 2-1: config 7 interface 60 altsetting 5 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 253.439498][ T825] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 253.501575][ T5819] usb 2-1: config 7 interface 60 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 253.523408][ T825] usb 3-1: Detected FT232R [ 253.590515][ T5819] usb 2-1: config 7 interface 60 altsetting 5 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 253.616981][ T5819] usb 2-1: config 7 interface 60 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 253.786690][ T5819] usb 2-1: config 7 interface 60 altsetting 5 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 253.840916][ T5819] usb 2-1: config 7 interface 60 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 253.860930][ T5819] usb 2-1: config 7 interface 60 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 253.880855][ T5819] usb 2-1: config 7 interface 183 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 253.893955][ T5819] usb 2-1: config 7 interface 60 has no altsetting 0 [ 253.948136][ T5819] usb 2-1: config 7 interface 183 has no altsetting 0 [ 253.950628][ T8482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 254.161240][ T825] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 254.179143][ T5819] usb 2-1: New USB device found, idVendor=0499, idProduct=1053, bcdDevice=e2.b2 [ 254.188624][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.211385][ T5819] usb 2-1: Product: ࢚坄ﮘ䐁皅ᵚ躤㟯멡滏ꚮ☔씕噫⩳㜥ﶙ敥树펞ꫛﰛ [ 254.242526][ T5819] usb 2-1: Manufacturer: 碟틹읝酌溛蹒䔠剣ᾗᥑ䪞羱芚︫☂㊵埇➟ﱷ벆䧍ꧢꋖ雛䕽폫泲桡䡮傏穎껴я솅﵄嘏ꀷ踄ꞵ衡剳㟹驓ຽ˅¨鍐䕦ꬁ珧㋈썲玝㓀ꑋ帓䗣귏늶澨经ࡥ⎽⤟꫗钫᝹㔸㞝ᔥꦦ聯꧹ꭳᆍ쿟㘷舱튍ㆠ擣䴜㦹䟥棭历㚳녧凯튎ꁋ沷䅅牮䎊例꿔 [ 254.377508][ T5819] usb 2-1: SerialNumber: syz [ 254.411372][ T8457] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 254.613432][ T8468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.630645][ T8489] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 254.646709][ T8468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.669486][ T5819] usb 2-1: USB disconnect, device number 10 [ 254.837461][ T29] audit: type=1400 audit(1733097938.986:552): avc: denied { connect } for pid=8491 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 254.977723][ T825] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 255.060831][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 255.227276][ T8] usb 5-1: config 0 has an invalid interface number: 182 but max is 1 [ 255.233697][ T8468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.247969][ T8468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.250237][ T8] usb 5-1: config 0 has an invalid interface number: 9 but max is 1 [ 255.285402][ T5906] usb 3-1: USB disconnect, device number 19 [ 255.316043][ T5906] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 255.326415][ T8] usb 5-1: config 0 has no interface number 0 [ 255.344338][ T8] usb 5-1: config 0 has no interface number 1 [ 255.345657][ T29] audit: type=1400 audit(1733097939.496:553): avc: denied { compute_member } for pid=8494 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 255.355073][ T5906] ftdi_sio 3-1:0.0: device disconnected [ 255.379294][ T8497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.380854][ T8] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 255.399735][ T8497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.424313][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.442797][ T8] usb 5-1: config 0 descriptor?? [ 255.459017][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 255.523736][ T8] snd-usb-audio 5-1:0.182: probe with driver snd-usb-audio failed with error -2 [ 255.575770][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.182/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.620905][ T825] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 255.699894][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.708118][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.737295][ T5906] usb 5-1: USB disconnect, device number 12 [ 255.826470][ T825] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 255.844857][ T825] usb 2-1: can't read configurations, error -71 [ 255.979224][ T8504] FAULT_INJECTION: forcing a failure. [ 255.979224][ T8504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.993738][ T8504] CPU: 0 UID: 0 PID: 8504 Comm: syz.2.620 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 256.004004][ T8504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 256.014065][ T8504] Call Trace: [ 256.017332][ T8504] [ 256.020248][ T8504] dump_stack_lvl+0x16c/0x1f0 [ 256.024921][ T8504] should_fail_ex+0x497/0x5b0 [ 256.029598][ T8504] _copy_to_user+0x32/0xd0 [ 256.034005][ T8504] simple_read_from_buffer+0xd0/0x160 [ 256.039384][ T8504] proc_fail_nth_read+0x198/0x270 [ 256.044403][ T8504] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 256.049944][ T8504] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 256.055480][ T8504] vfs_read+0x1df/0xbe0 [ 256.059623][ T8504] ? __fget_files+0x1fc/0x3a0 [ 256.064288][ T8504] ? __pfx___mutex_lock+0x10/0x10 [ 256.069302][ T8504] ? __pfx_vfs_read+0x10/0x10 [ 256.073974][ T8504] ? __fget_files+0x206/0x3a0 [ 256.078650][ T8504] ksys_read+0x12b/0x250 [ 256.082884][ T8504] ? __pfx_ksys_read+0x10/0x10 [ 256.087640][ T8504] do_syscall_64+0xcd/0x250 [ 256.092139][ T8504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.098029][ T8504] RIP: 0033:0x7fe1a1f7f25c [ 256.102430][ T8504] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 256.122038][ T8504] RSP: 002b:00007fe1a2d02050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 256.130460][ T8504] RAX: ffffffffffffffda RBX: 00007fe1a2145fa0 RCX: 00007fe1a1f7f25c [ 256.138427][ T8504] RDX: 000000000000000f RSI: 00007fe1a2d020b0 RDI: 0000000000000004 [ 256.146385][ T8504] RBP: 00007fe1a2d020a0 R08: 0000000000000000 R09: 0000000000000000 [ 256.154344][ T8504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.162305][ T8504] R13: 0000000000000000 R14: 00007fe1a2145fa0 R15: 00007ffe2630e938 [ 256.170276][ T8504] [ 256.173386][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.380976][ T29] audit: type=1400 audit(1733097941.526:554): avc: denied { write } for pid=8517 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 257.436791][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 257.496512][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 257.655725][ T8527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.754522][ T8532] FAULT_INJECTION: forcing a failure. [ 257.754522][ T8532] name failslab, interval 1, probability 0, space 0, times 0 [ 257.818198][ T8532] CPU: 1 UID: 0 PID: 8532 Comm: syz.2.628 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 257.828832][ T8532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 257.838897][ T8532] Call Trace: [ 257.842179][ T8532] [ 257.845112][ T8532] dump_stack_lvl+0x16c/0x1f0 [ 257.849802][ T8532] should_fail_ex+0x497/0x5b0 [ 257.854505][ T8532] should_failslab+0xc2/0x120 [ 257.859205][ T8532] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 257.865026][ T8532] ? hci_sock_sendmsg+0xdee/0x25e0 [ 257.870498][ T8532] ? __alloc_skb+0x2b1/0x380 [ 257.875202][ T8532] __alloc_skb+0x2b1/0x380 [ 257.879636][ T8532] ? __pfx___alloc_skb+0x10/0x10 [ 257.884596][ T8532] hci_sock_sendmsg+0x1a47/0x25e0 [ 257.889639][ T8532] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 257.895030][ T8532] sock_write_iter+0x4fe/0x5b0 [ 257.899805][ T8532] ? __pfx_sock_write_iter+0x10/0x10 [ 257.905110][ T8532] ? bpf_lsm_file_permission+0x9/0x10 [ 257.910491][ T8532] ? security_file_permission+0x71/0x210 [ 257.916146][ T8532] aio_write+0x3b2/0x8c0 [ 257.920408][ T8532] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 257.926402][ T8532] ? __pfx_aio_write+0x10/0x10 [ 257.931188][ T8532] ? find_held_lock+0x2d/0x110 [ 257.935976][ T8532] ? lock_acquire+0x2f/0xb0 [ 257.940490][ T8532] ? __might_fault+0xe3/0x190 [ 257.945192][ T8532] ? io_submit_one+0x1248/0x1da0 [ 257.950142][ T8532] io_submit_one+0x1248/0x1da0 [ 257.954929][ T8532] ? __pfx_io_submit_one+0x10/0x10 [ 257.960059][ T8532] ? __might_fault+0x13b/0x190 [ 257.964845][ T8532] ? lock_acquire+0x2f/0xb0 [ 257.969351][ T8532] ? __might_fault+0xe3/0x190 [ 257.974053][ T8532] ? __x64_sys_io_submit+0x1b2/0x340 [ 257.979345][ T8532] __x64_sys_io_submit+0x1b2/0x340 [ 257.984466][ T8532] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 257.990114][ T8532] do_syscall_64+0xcd/0x250 [ 257.994630][ T8532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.000535][ T8532] RIP: 0033:0x7fe1a1f80849 [ 258.004951][ T8532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.024566][ T8532] RSP: 002b:00007fe1a2d02058 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 258.032987][ T8532] RAX: ffffffffffffffda RBX: 00007fe1a2145fa0 RCX: 00007fe1a1f80849 [ 258.040960][ T8532] RDX: 0000000020000440 RSI: 0000000000000002 RDI: 00007fe1a2ce1000 [ 258.048937][ T8532] RBP: 00007fe1a2d020a0 R08: 0000000000000000 R09: 0000000000000000 [ 258.056916][ T8532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.064892][ T8532] R13: 0000000000000000 R14: 00007fe1a2145fa0 R15: 00007ffe2630e938 [ 258.072888][ T8532] [ 258.785363][ T29] audit: type=1400 audit(1733097942.936:555): avc: denied { ioctl } for pid=8537 comm="syz.4.629" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 258.883500][ T29] audit: type=1400 audit(1733097942.986:556): avc: denied { connect } for pid=8537 comm="syz.4.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 259.752889][ T29] audit: type=1400 audit(1733097943.906:557): avc: denied { nlmsg_tty_audit } for pid=8556 comm="syz.3.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 259.759375][ T8557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.636'. [ 259.899731][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.632'. [ 260.610942][ T867] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 261.192139][ T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 261.942265][ T867] usb 1-1: config 7 interface 0 has no altsetting 0 [ 262.227316][ T867] usb 1-1: string descriptor 0 read error: -22 [ 262.238104][ T867] usb 1-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 262.250523][ T867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.266372][ T867] usb 1-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 262.353448][ T8590] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.530985][ T5819] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 262.599362][ T29] audit: type=1326 audit(1733097946.746:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.0.643" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f016f580849 code=0x0 [ 262.650184][ T867] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 262.660567][ T867] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 262.669618][ T867] usb 1-1: media controller created [ 262.687004][ T867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.731334][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 262.775496][ T867] usb 1-1: USB disconnect, device number 13 [ 262.789022][ T8] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 262.798092][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.826272][ T8] usb 3-1: config 0 has no interface number 0 [ 262.838608][ T8] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 262.866873][ T5819] usb 2-1: config 0 has an invalid interface number: 30 but max is 0 [ 262.867736][ T8] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 262.875399][ T5819] usb 2-1: config 0 has no interface number 0 [ 262.875448][ T5819] usb 2-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 262.875474][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.910181][ T5819] usb 2-1: config 0 descriptor?? [ 262.911075][ T8] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 262.923404][ T8] usb 3-1: Product: syz [ 262.927622][ T8] usb 3-1: SerialNumber: syz [ 262.933692][ T5819] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 262.940698][ T5819] usb 2-1: setting power ON [ 262.947984][ T5819] dvb-usb: bulk message failed: -22 (2/0) [ 263.005747][ T8] usb 3-1: config 0 descriptor?? [ 263.014079][ T8] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 263.090839][ T5819] dvb-usb: bulk message failed: -22 (1/0) [ 263.264922][ T5819] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 263.328114][ T5819] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 263.374130][ T5819] dvb_usb_cxusb 2-1:0.30: probe with driver dvb_usb_cxusb failed with error -22 [ 263.645930][ T5819] usb 2-1: USB disconnect, device number 13 [ 263.842324][ T8605] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.888416][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 263.900794][ T29] audit: type=1400 audit(1733097948.036:559): avc: denied { write } for pid=8606 comm="syz.0.647" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 263.944667][ T8] usb 3-1: USB disconnect, device number 20 [ 264.100918][ T29] audit: type=1400 audit(1733097948.246:560): avc: denied { ioctl } for pid=8608 comm="syz.4.649" path="socket:[20484]" dev="sockfs" ino=20484 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 264.184024][ T8612] netlink: 'syz.0.647': attribute type 1 has an invalid length. [ 267.164931][ T8635] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 267.583881][ T29] audit: type=1400 audit(1733097951.646:561): avc: denied { read } for pid=8634 comm="syz.2.656" dev="sockfs" ino=20526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 268.482656][ T8644] netlink: 40 bytes leftover after parsing attributes in process `syz.2.660'. [ 268.539536][ T8646] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.274367][ T867] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 270.082921][ T867] usb 1-1: config 27 has no interfaces? [ 270.088665][ T867] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 270.130652][ T867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.142019][ T8666] netlink: zone id is out of range [ 270.148380][ T8666] netlink: zone id is out of range [ 270.169833][ T8666] netlink: zone id is out of range [ 270.176525][ T8666] netlink: zone id is out of range [ 270.191597][ T8668] fuse: Unknown parameter 'f0x0000000000000003' [ 270.314463][ T8674] trusted_key: syz.2.664 sent an empty control message without MSG_MORE. [ 270.563312][ T8680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.051520][ T8678] netlink: 'syz.4.669': attribute type 5 has an invalid length. [ 271.080705][ T8678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.669'. [ 272.210285][ T8696] IPVS: set_ctl: invalid protocol: 41 172.20.20.28:20001 [ 272.488895][ T8700] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.592507][ T5819] usb 1-1: USB disconnect, device number 14 [ 272.847181][ T8705] fuse: Bad value for 'fd' [ 273.167605][ T8710] netlink: 40 bytes leftover after parsing attributes in process `syz.0.674'. [ 273.911056][ T29] audit: type=1400 audit(1733097958.066:562): avc: denied { ioctl } for pid=8714 comm="syz.4.677" path="socket:[19782]" dev="sockfs" ino=19782 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 273.935574][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.663163][ T29] audit: type=1400 audit(1733097958.806:563): avc: denied { watch watch_reads } for pid=8723 comm="syz.2.681" path="/proc/473" dev="proc" ino=19798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 276.877550][ T8742] geneve2: entered promiscuous mode [ 277.172653][ T29] audit: type=1400 audit(1733097961.236:564): avc: denied { setopt } for pid=8721 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 277.272198][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 277.293684][ T29] audit: type=1400 audit(1733097961.236:565): avc: denied { bind } for pid=8721 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 277.399686][ T29] audit: type=1400 audit(1733097961.236:566): avc: denied { name_bind } for pid=8721 comm="syz.0.679" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 277.518265][ T29] audit: type=1400 audit(1733097961.236:567): avc: denied { node_bind } for pid=8721 comm="syz.0.679" saddr=fc01:: src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 277.540131][ T29] audit: type=1400 audit(1733097961.376:568): avc: denied { getopt } for pid=8741 comm="syz.4.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 277.561001][ T29] audit: type=1400 audit(1733097961.416:569): avc: denied { accept } for pid=8752 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.661657][ T8765] netlink: 40 bytes leftover after parsing attributes in process `syz.4.689'. [ 278.750910][ T867] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 279.383975][ T8788] i2c i2c-0: Invalid block write size 34 [ 279.430797][ T29] audit: type=1326 audit(1733097963.116:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8781 comm="syz.3.694" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8547980849 code=0x0 [ 279.594486][ T867] usb 5-1: config 0 has an invalid interface number: 182 but max is 1 [ 279.603056][ T867] usb 5-1: config 0 has an invalid interface number: 9 but max is 1 [ 279.615867][ T867] usb 5-1: config 0 has no interface number 0 [ 279.623138][ T867] usb 5-1: config 0 has no interface number 1 [ 279.639989][ T867] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 279.649264][ T5906] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 279.677704][ T867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.771735][ T867] usb 5-1: config 0 descriptor?? [ 279.786863][ T867] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 279.811079][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 279.834345][ T5906] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 280.398826][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 280.411369][ T5906] usb 3-1: Product: syz [ 280.415570][ T5906] usb 3-1: Manufacturer: syz [ 280.420169][ T5906] usb 3-1: SerialNumber: syz [ 280.428862][ T5906] usb 3-1: config 0 descriptor?? [ 280.461814][ T867] snd-usb-audio 5-1:0.182: probe with driver snd-usb-audio failed with error -2 [ 280.515912][ T867] usb 5-1: USB disconnect, device number 13 [ 280.770563][ T5868] usb 3-1: USB disconnect, device number 21 [ 280.771867][ T7292] udevd[7292]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.182/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.860809][ T5906] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 280.931012][ T8810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.231044][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 281.523817][ T5906] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 281.716663][ T5906] usb 2-1: config 2 has no interface number 0 [ 281.814797][ T5906] usb 2-1: config 2 interface 31 has no altsetting 0 [ 282.354088][ T8828] sd 0:0:1:0: device reset [ 283.109386][ T5906] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 283.130966][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.175927][ T5906] usb 2-1: Product: syz [ 283.180195][ T5906] usb 2-1: Manufacturer: syz [ 283.231219][ T5906] usb 2-1: SerialNumber: syz [ 284.263655][ T29] audit: type=1400 audit(1733097968.136:571): avc: denied { connect } for pid=8832 comm="syz.2.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 284.792416][ T5906] usb 2-1: can't set config #2, error -71 [ 284.823076][ T5906] usb 2-1: USB disconnect, device number 14 [ 286.094811][ T825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.233510][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.051202][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.133452][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.188550][ T29] audit: type=1400 audit(1733097971.336:572): avc: denied { write } for pid=8873 comm="syz.1.719" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 287.250618][ T29] audit: type=1400 audit(1733097971.386:573): avc: denied { setopt } for pid=8871 comm="syz.0.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 288.387910][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.506393][ T8891] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8891 comm=syz.2.723 [ 289.222260][ T29] audit: type=1400 audit(1733097972.796:574): avc: denied { bind } for pid=8889 comm="syz.0.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 289.290987][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.621926][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.371742][ T29] audit: type=1326 audit(1733097974.526:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="syz.4.725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f822d980849 code=0x0 [ 290.661653][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.747021][ T8919] xt_socket: unknown flags 0xc [ 290.891085][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.960877][ T29] audit: type=1400 audit(1733097975.086:576): avc: denied { write } for pid=8918 comm="syz.2.731" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 291.906760][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.941511][ T29] audit: type=1400 audit(1733097975.376:577): avc: denied { open } for pid=8918 comm="syz.2.731" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 292.274210][ T8937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.685909][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.780112][ T8939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8939 comm=syz.0.733 [ 292.980698][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.405442][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.583119][ T29] audit: type=1326 audit(1733097978.556:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8932 comm="syz.2.735" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1a1f80849 code=0x0 [ 306.922044][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.622254][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.870754][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 399.877736][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8952/2:b..l [ 399.886246][ C0] rcu: (detected by 0, t=10503 jiffies, g=21681, q=212 ncpus=2) [ 399.893965][ C0] task:syz.2.735 state:R running task stack:26080 pid:8952 tgid:8932 ppid:5824 flags:0x00004002 [ 399.906783][ C0] Call Trace: [ 399.910072][ C0] [ 399.913017][ C0] __schedule+0xe58/0x5ad0 [ 399.917468][ C0] ? __pfx___schedule+0x10/0x10 [ 399.922323][ C0] ? mark_lock+0xb5/0xc60 [ 399.926667][ C0] ? mark_held_locks+0x9f/0xe0 [ 399.931441][ C0] preempt_schedule_irq+0x51/0x90 [ 399.936474][ C0] irqentry_exit+0x36/0x90 [ 399.940899][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.946900][ C0] RIP: 0010:rcu_is_watching+0x80/0xc0 [ 399.952293][ C0] Code: 89 da 48 c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 8b 03 c1 e8 02 83 e0 01 65 ff 0d d8 49 84 7e <74> 07 5b 5d c3 cc cc cc cc e8 a2 55 8c ff 5b 5d c3 cc cc cc cc 48 [ 399.971909][ C0] RSP: 0018:ffffc9001b51f6a0 EFLAGS: 00000286 [ 399.977992][ C0] RAX: 0000000000000001 RBX: ffff8880b8637f68 RCX: ffffc9000f565000 [ 399.985964][ C0] RDX: 0000000000000000 RSI: ffffffff8bd1b3e0 RDI: ffffffff8da72be0 [ 399.993937][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 400.001907][ C0] R10: 0000000000000001 R11: 0000000000000002 R12: 00000000000000b0 [ 400.009875][ C0] R13: ffffc9001b51f9c8 R14: ffffc9001b51f9c8 R15: ffffffff81d00670 [ 400.017855][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 400.023337][ C0] filemap_map_pages+0xc58/0x16b0 [ 400.028366][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 400.033571][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 400.038793][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 400.044262][ C0] ? do_pte_missing+0xcec/0x3e70 [ 400.049225][ C0] ? lock_acquire+0x2f/0xb0 [ 400.053839][ C0] ? do_pte_missing+0xcec/0x3e70 [ 400.058792][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 400.064265][ C0] do_pte_missing+0xdab/0x3e70 [ 400.069058][ C0] __handle_mm_fault+0x103c/0x2a40 [ 400.074188][ C0] ? find_held_lock+0x2d/0x110 [ 400.078966][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 400.084439][ C0] ? follow_page_pte+0x3c3/0x1b20 [ 400.089472][ C0] ? __pfx_lock_release+0x10/0x10 [ 400.094512][ C0] ? follow_page_pte+0x3f7/0x1b20 [ 400.099546][ C0] handle_mm_fault+0x3fa/0xaa0 [ 400.104325][ C0] __get_user_pages+0x8d9/0x3b50 [ 400.109280][ C0] ? __pfx_mt_find+0x10/0x10 [ 400.113884][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 400.119523][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 400.124914][ C0] ? __mm_populate+0x21d/0x380 [ 400.129693][ C0] populate_vma_page_range+0x27f/0x3a0 [ 400.135162][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 400.141149][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 400.146969][ C0] __mm_populate+0x1d6/0x380 [ 400.151578][ C0] ? __pfx___mm_populate+0x10/0x10 [ 400.156707][ C0] ? up_write+0x1b2/0x520 [ 400.161047][ C0] vm_mmap_pgoff+0x293/0x360 [ 400.165653][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 400.170777][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 400.175718][ C0] ? __x64_sys_futex+0x1ea/0x4c0 [ 400.180667][ C0] ksys_mmap_pgoff+0x7d/0x5c0 [ 400.185354][ C0] ? rcu_is_watching+0x12/0xc0 [ 400.194133][ C0] __x64_sys_mmap+0x125/0x190 [ 400.198835][ C0] do_syscall_64+0xcd/0x250 [ 400.203355][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.209268][ C0] RIP: 0033:0x7fe1a1f80849 [ 400.213686][ C0] RSP: 002b:00007fe1a2cc0058 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 400.222137][ C0] RAX: ffffffffffffffda RBX: 00007fe1a2146160 RCX: 00007fe1a1f80849 [ 400.230374][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 400.238368][ C0] RBP: 00007fe1a1ff3986 R08: ffffffffffffffff R09: 0000000000000000 [ 400.246373][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 400.254365][ C0] R13: 0000000000000000 R14: 00007fe1a2146160 R15: 00007ffe2630e938 [ 400.262364][ C0] [ 400.265404][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10486 jiffies! g21681 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 400.277757][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=19074 [ 400.285654][ C0] rcu: rcu_preempt kthread starved for 10487 jiffies! g21681 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 400.297041][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 400.307060][ C0] rcu: RCU grace-period kthread stack dump: [ 400.312953][ C0] task:rcu_preempt state:I stack:27216 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 400.323182][ C0] Call Trace: [ 400.326469][ C0] [ 400.329406][ C0] __schedule+0xe58/0x5ad0 [ 400.333839][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 400.339057][ C0] ? __pfx___schedule+0x10/0x10 [ 400.343915][ C0] ? schedule+0x298/0x350 [ 400.348255][ C0] ? __pfx_lock_release+0x10/0x10 [ 400.353292][ C0] ? lock_acquire+0x2f/0xb0 [ 400.357801][ C0] ? schedule+0x1fd/0x350 [ 400.362141][ C0] schedule+0xe7/0x350 [ 400.366239][ C0] schedule_timeout+0x124/0x280 [ 400.371093][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 400.376477][ C0] ? __pfx_process_timeout+0x10/0x10 [ 400.381781][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 400.387592][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 400.393081][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 400.397865][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 400.403156][ C0] ? rcu_gp_init+0xc82/0x1630 [ 400.407847][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 400.413082][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 400.418912][ C0] rcu_gp_kthread+0x271/0x380 [ 400.423621][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 400.428843][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 400.434065][ C0] ? __kthread_parkme+0x148/0x220 [ 400.439140][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 400.444366][ C0] kthread+0x2c1/0x3a0 [ 400.448527][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.453756][ C0] ? __pfx_kthread+0x10/0x10 [ 400.458371][ C0] ret_from_fork+0x45/0x80 [ 400.462805][ C0] ? __pfx_kthread+0x10/0x10 [ 400.467440][ C0] ret_from_fork_asm+0x1a/0x30 [ 400.472253][ C0] [ 400.475284][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 400.481617][ C0] Sending NMI from CPU 0 to CPUs 1: [ 400.486835][ C1] NMI backtrace for cpu 1 [ 400.486853][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.12.0-syzkaller-12113-gbcc8eda6d349 #0 [ 400.486875][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 400.486886][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x0/0x20 [ 400.486916][ C1] Code: 0c 24 48 89 f2 48 89 fe bf 06 00 00 00 e9 b8 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 40 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 e9 [ 400.486934][ C1] RSP: 0018:ffffc90000a18e28 EFLAGS: 00000046 [ 400.486950][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81873798 [ 400.486962][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 400.486973][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 400.486985][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88805a85b340 [ 400.486997][ C1] R13: ffff8880b872cb00 R14: ffff8880b872ca00 R15: ffffffff8941c100 [ 400.487010][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 400.487029][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.487042][ C1] CR2: 000000110c2f2909 CR3: 0000000031754000 CR4: 00000000003526f0 [ 400.487054][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 400.487065][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 400.487077][ C1] Call Trace: [ 400.487084][ C1] [ 400.487092][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 400.487115][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 400.487134][ C1] ? nmi_handle+0x1ac/0x5d0 [ 400.487155][ C1] ? __pfx___sanitizer_cov_trace_const_cmp1+0x10/0x10 [ 400.487181][ C1] ? default_do_nmi+0x6a/0x160 [ 400.487199][ C1] ? exc_nmi+0x170/0x1e0 [ 400.487221][ C1] ? end_repeat_nmi+0xf/0x53 [ 400.487247][ C1] ? __pfx_advance_sched+0x10/0x10 [ 400.487269][ C1] ? __hrtimer_run_queues+0x2a8/0xae0 [ 400.487297][ C1] ? __pfx___sanitizer_cov_trace_const_cmp1+0x10/0x10 [ 400.487323][ C1] ? __pfx___sanitizer_cov_trace_const_cmp1+0x10/0x10 [ 400.487350][ C1] ? __pfx___sanitizer_cov_trace_const_cmp1+0x10/0x10 [ 400.487375][ C1] [ 400.487381][ C1] [ 400.487386][ C1] __hrtimer_run_queues+0x873/0xae0 [ 400.487417][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 400.487443][ C1] ? read_tsc+0x9/0x20 [ 400.487472][ C1] hrtimer_interrupt+0x392/0x8e0 [ 400.487503][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 400.487528][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 400.487551][ C1] [ 400.487556][ C1] [ 400.487563][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 400.487590][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 400.487619][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 18 f4 d9 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 88 66 b3 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 400.487636][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 400.487651][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b29c819 [ 400.487663][ C1] RDX: 0000000000000001 RSI: ffff888020ef9800 RDI: ffff888020ef9864 [ 400.487675][ C1] RBP: ffff888020ef9864 R08: 0000000000000001 R09: ffffed10170e6fed [ 400.487688][ C1] R10: ffff8880b8737f6b R11: 0000000000000000 R12: ffff8881482a5800 [ 400.487701][ C1] R13: ffffffff8ee14960 R14: 0000000000000001 R15: 0000000000000000 [ 400.487716][ C1] ? ct_kernel_exit+0x139/0x190 [ 400.487742][ C1] acpi_idle_enter+0xc5/0x160 [ 400.487770][ C1] cpuidle_enter_state+0xaa/0x4f0 [ 400.487797][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 400.487819][ C1] cpuidle_enter+0x4e/0xa0 [ 400.487849][ C1] do_idle+0x310/0x3f0 [ 400.487869][ C1] ? __pfx_do_idle+0x10/0x10 [ 400.487891][ C1] cpu_startup_entry+0x4f/0x60 [ 400.487911][ C1] start_secondary+0x222/0x2b0 [ 400.487929][ C1] ? __pfx_start_secondary+0x10/0x10 [ 400.487949][ C1] common_startup_64+0x13e/0x148 [ 400.487978][ C1] [ 404.211079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog