last executing test programs: 3m4.543583016s ago: executing program 4 (id=291): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd000000fb000000000097c7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'geneve0\x00', 0x1000}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) prlimit64(r0, 0xd, &(0x7f0000000300)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x1104, &(0x7f0000000200)={0x0, 0xb490, 0x80, 0x0, 0x80000222}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) getsockopt(0xffffffffffffffff, 0x114, 0x2719, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0xfffefffe, 0x2, 0x2, 0x4800020}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) 3m2.013936825s ago: executing program 4 (id=301): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$kcm(0x10, 0x2, 0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000200)=0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000179000/0x2000)=nil, 0x2000, 0x8) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1, 0x5, 0x9}}, 0x28) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x61) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') 3m1.087794478s ago: executing program 4 (id=302): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f000001b000)='./file0\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000000001c0000000000000000001c0000000c0001000100000000000000"], 0x20}}, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) vmsplice(r2, &(0x7f000001c280)=[{&(0x7f000001b180)="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", 0x1000}, {&(0x7f000001c180)="44b47113c97e304a784e466455bedd9eb5f835df201db17c442c14dd5bf5e343177466309b2daa5602bfb62698fe27efbffb921ae7a174a3d2ade8eab6d579f834389bbc687609625c1708b3fa7153ec31d2492f7f040dfd659188afe7fb8c51322091cb365f057ea3ed6e7490ed3dfb9714c0ac490ae0bcc959bad7637b6facfa024b6eb1e177a03425310887168a39507856f63807a3df7aa8d283754f9d9883cd491153e972f8753f941ebf89d1f90dc2cadc64f299a7d3d04521504822cbc91fdc66dbbf8116a701a514275dcc27358c3394", 0xd4}], 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = syz_open_dev$video(0x0, 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000004060102000001000000000001000c090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x113000) ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, &(0x7f0000000040)={0xe7, 0x9, 0x800, 0xb}) close(r0) r7 = dup(r1) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_UNLOCK(r8, 0x6406) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f000001b040)={0x4, {{0xa, 0x4e21, 0x62ffcfdd, @mcast1, 0x2}}, {{0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x400}}}, 0x108) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r1, &(0x7f0000000080)={0x20, 0x0, r9, {0x2, 0x0, 0x81, 0x3ff}}, 0x20) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f000001c340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000001c300)={&(0x7f000001c2c0)={0x6, 0x1, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x34}}, 0x24044000) rt_sigqueueinfo(r10, 0x4, &(0x7f0000002200)={0xa, 0x7, 0x8467}) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000"], 0x0) r11 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r11, 0x707, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x9b, 0x210, 0x4f, &(0x7f00000000c0)="4e8ac507481ed7964f3dce4e44eeb894837e6c2dc3e67f8c3e37e6230c92cfc261a15d172c93d6dbbdf236283970221f075eac78679a8a9b4f030d7e96c75fb79cf3da5c5b48cc337d049fb3267d4a"}], 0x1}) 2m58.243793262s ago: executing program 4 (id=310): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000180)={0x0, @broadcast, @broadcast}, &(0x7f00000002c0)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbf, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xef, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="2039750445486f25ad8b412999400f28a68fe3dc77800a6996ed5ea6c511c8be279ed733d7bc5c444fed1e12dbf308e79a4044a2f4fb4090345d55955f14fa2cea8cebf2d138529b9b619acd41fe1f81e45bdacbc5162ae71ea7765384a3580c591ed3c028258bcff9d95280391937f9b61edda57230fe1d4f66330be2abddd5c0de11be59a26aae71c85bc4371ced20e5099c2e631ad5c755874fa6db54d80f98de"], 0x0, 0x0, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0xd7b, 0x9, 0x7, 0x6, 0xd0ec, 0x8000, 0x2a5, 0x8000, 0x7ff, 0x0, 0xff, 0x4}}, 0x0, &(0x7f0000000900)={0x20, 0x83, 0x2, 0x1}, 0x0, 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e00010000000000fcdbdf25071e"], 0x30}}, 0x20000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r7, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="ffff6ed944bad45ab3277a1395cdccffffffff00000000000086dd6b09070800002901fc020000000000000000000000000004ff020000030000000000000000000001"], 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r10 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r10, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$loop(0x0, 0x81, 0x2a82) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='page_pool_state_hold\x00', r11, 0x0, 0x2}, 0x18) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$kcm(0x2b, 0x1, 0x0) epoll_create1(0x0) syz_usb_disconnect(r10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b0000000000011907800000000e000000100004e20009c907802000000000000000000000082d18160f7d8dda36479a6b179161b4bbff2d0508977b3928eb12dee05607d170194bd7b1b0303c5ba7f602606a285b330da2d58da817f8a5f77a23de36a21643b33cfa231a427159c7b9f0eceb155f0"], 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000080)) 2m54.55501504s ago: executing program 4 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x13, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x1c}}, 0x40880) (fail_nth: 1) 2m53.055576703s ago: executing program 4 (id=325): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0xfc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x2100, 0x4) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{}, 0x1, 0x2, 0x0, 0x0, "09151995c95f32cc"}, 0x10}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) 2m37.756552458s ago: executing program 32 (id=325): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0xfc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x2100, 0x4) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{}, 0x1, 0x2, 0x0, 0x0, "09151995c95f32cc"}, 0x10}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) 11.495999806s ago: executing program 2 (id=684): accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x40800) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) accept4(r3, 0x0, &(0x7f00000002c0), 0x80800) socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) r4 = socket$netlink(0x10, 0x3, 0xa) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e207f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000300)={0x0, 0x2, 0x2, 0x0, 0x40}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x4, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setresuid(0xee01, 0xee01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 8.856798806s ago: executing program 2 (id=687): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000021c0)=ANY=[@ANYRES64=r5, @ANYBLOB="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", @ANYRESHEX=r0], 0x2c}, 0x1, 0x0, 0x0, 0xf71db4521796b9db}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) socket$netlink(0x10, 0x3, 0x14) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) write$tun(0xffffffffffffffff, 0x0, 0x46) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_score\x00') preadv(r7, &(0x7f0000000280)=[{&(0x7f0000001180)=""/4113, 0x1011}, {&(0x7f0000000400)=""/171, 0xab}, {&(0x7f0000000540)=""/219, 0xdb}, {&(0x7f00000001c0)=""/28, 0x1c}], 0x4, 0x16, 0xfffffff9) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) 7.5560759s ago: executing program 0 (id=688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) (fail_nth: 10) 7.554306634s ago: executing program 2 (id=689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) madvise(&(0x7f0000878000/0x3000)=nil, 0x3000, 0x13) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) timer_create(0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x8042, 0xf3b7db288574cadf) openat(0xffffffffffffff9c, 0x0, 0x21af00, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000c00)={@local, @random="ad2380eb3968", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x3, 0x1a, 0x5c, 0x66, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x44, 0x2}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1, 0x1}, {0x1}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0x8d, 0x3, 0x1, 0x1, 0x3, 0x4}, 0x1, {0x510}}}, {0x8, 0x22eb, 0x4, {{0xb, 0x2, 0x10, 0x1, 0x0, 0x3, 0x4, 0x7}, 0x2, {0x3, 0x6, 0x3, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1}}}}}}}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) iopl(0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf3000000000000015000200000000103d030100000000009500000000000000bc26080000000000bf67000000000000070300000fff070067020000030000001606000080ffffffbf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba"], 0x0}, 0x94) 7.060176783s ago: executing program 0 (id=691): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000510008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 6.490608479s ago: executing program 1 (id=693): msgsnd(0x0, &(0x7f0000000040)={0x1}, 0x8, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000000000000e4cf55784d31749f3a6317769813e8e0d2d62ea8831c6d090db50522e1a1e54d910b0f771fe8da34fae12f8329f8c9fd8d8b3aa7841b139dfbadd65b5deec544440a122322d72ed4609c599df7ef1fb61cd7a5ead47c55d76776f03d2735588cd1b863ea460bf9377fe6f0ee64f5be49ccdbbef065388e9238522218bb20dcc6ac2a45183d17b915de63a9e4eb4a051f89d595d7da30f1ae067bd90d6c3b53ea671e87f727679d543c7aeb3b9fcf31748fbe426be98ad6cbcdbb372a4efd59f0b09a097b72e659fecc6a52923daeab884f4a49c83238e2e7feb0ec1f7728639da9613f9d9e08fa5c627c0846747a8de7b3aaa63cafe504faaca7b9ef3e7efad6a560e6374df8a18de077455b61e04491313d38e017451b094cc20a43fc396bc9af16733bdca1315da1772194b5b9ee533ad4dea3c9d7a5254262e9d5eaed3e4e00a44be2cb914e9d870363146bcdc092a64e909356f5d248b23322f8296fd57c914c742196d4dd66ff349161890e3c93b101a06eb45c86afebab675f5312ceaa2f621b293d6031b92e834b73784c159bd266974fc1c7bff263ae1ebd4c9596dff14e6ed1bdc7ee71a12011c119d3b890955ff868cd0bffccf57778ac362a139ad72532df20487cc5b29c1ee18f4b95f98dd1412ee039d3216952731365ab8b687757567c4c181b4ffc88f19e3522d6d1b003e32539ef1d19dec160f48425bdea166c72f03be567ee98f48a4ec65dd3d8aed583f42baf4390fe251db6aac71c1927d9cf4030b695433f2f84f83b42b2d673490f0b65a23db3be78ca8bb735b5ba16a4b383d6b79ac73e88e162aaa5c5a951fe149a8ee8df103393084d8fce1da461fcc6dec4cb940cacc9a9bb0b124fa852bff4f83e03ddeb1b055772036e5bce9fc079bf568e9080911a2f91581d0f5b356a0aa04551fe2d670500000000915aa5e58ab927f09c208ebc4b16ad6b4cb3b79738434e129f56e8915e38f6715f8a49f9493f73c7437eb3e565dca1f574e07596169817afdab517d4b5d9026b124123d2e97e45994eb28412365f5d6acb153e0c2e30ad3dc622cad6955dd9890d3def37fb0a8dd7445a94cafd00c3b5994da958d75c7b12b034aad01ed84c1f4d8473b750f5db85ad0ffb51b85a65554f6c6470a20178139d93f32c4efc219fe05c37b2e6ad145fffa02fc7bf3f05451d6964bde16268dbb1466ff87820e1a47b6a09373562922f75c08879ee692ed4604ee299ddde23e0d4e0ceb60da6f576dcffbfc5fbd1996f607f623d990d2cf2c195a27d634297fcb3d3e27bef1a7f966b1000804cd63194ef8630ca194a7522cf38a93578e0aff9384e53b1b4758583e7ddff2cb9cf172b799e8a79f3e7463305118be967fe9bf9762e2a1b0000ef6f9fa34391bf54f94969093863472e261806e5a8ae9bc2e244350ab61c8ddbdcd55a4841ad66844d029c367dda2e24e6faf87c5006d74479f806"], 0x3f9, 0x0) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x0, 0x20000800, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wg2\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0xffff, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r4 = syz_open_procfs(0x0, 0x0) write$FUSE_IOCTL(r4, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) sched_getattr(0x0, &(0x7f0000000c00)={0x38}, 0x38, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) modify_ldt$write(0x1, &(0x7f0000000000)={0xfffff48f, 0x20000000, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) 6.462808048s ago: executing program 2 (id=694): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000040000000700b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0xac, 0x0, 0x1, 0x400, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x88}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r8, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000140)={0x3, r10, 0x1}) 5.452401287s ago: executing program 5 (id=696): socket(0x10, 0x803, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000000000/0x4000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/connector\x00') socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x4000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000540)={0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r3, 0x1, r4}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r3, 0x0, r1, 0x2, 0x80000}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'dvmrp0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}}) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r7, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 5.437994921s ago: executing program 0 (id=697): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 5.186970304s ago: executing program 1 (id=700): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x4) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) unshare(0x400) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x5c, @rand_addr=0x64010102, 0x4e21, 0x1, 'wlc\x00', 0x1a, 0x8, 0x44}, 0x2c) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000002c0)={0x0, 0x89b8, 0x1000, 0x0, 0x208}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x847ba, 0x2300, 0xe, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0fe1709850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYBLOB="763fb7ad202ffdb85809509028c6c460efcea31b4b1d43eef200fd5875c5da590207477919ac92c6a92866c62a02bc915775", @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmmsg$inet6(r6, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="f6", 0x1}], 0x1}}], 0x2, 0x41) 5.127567106s ago: executing program 0 (id=701): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x42) open_by_handle_at(r0, &(0x7f0000000380)=ANY=[@ANYRES8=r0], 0x40000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f00000002c0)=@multiplanar_fd={0xc3b4eab, 0x7, 0x4, 0x400, 0x4, {0x0, 0xea60}, {0x2, 0x0, 0x7, 0xb, 0x4, 0x3, "f6de8be8"}, 0xac14, 0x4, {0x0}, 0x2}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x58, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x11, 0x20, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xf, 0xf989, "9fca59893b5031248415bc"}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0xa, [0x2, 0x2]}, @exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r3, 0x80045438, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0x6, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x4, {0x966, 0x1, 0x3, 0x9, 0x0, 0x4}}) write$nci(0xffffffffffffffff, &(0x7f0000001740)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x1, 0x2, 0x1, 0x5, {0x1, 0xc, 0x3, 0x3, 0x4, 0x9, 0x5, 0x3, 0x72, "bad45e265e96dc1ce36dac131b1126baa0c7c8a90c3a824b51746b39f2b0295b6999a3cee94bac3b6ad3a4472906319cbee76bb972143bf81dbf25e67a468298c2cd66ee042b490d38191a80eac4a0c3669195482e070fa2157afc927a66cf21fac07d1e662e320e134bd9cde6bc84789344"}}, 0x83) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) move_pages(0x0, 0x1, &(0x7f0000001100)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f00000010c0)=[0x9, 0x1ff, 0x80005, 0x7f, 0xffffffff, 0x56733d84], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0xfb, 0x8, 0x0, "062383a78614d321eb086bebba55db0dfca05613826fffd4ee640ffed6cd68cb", 0x32314d54}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001000000000047000280050001"], 0xe4}}, 0x0) 3.461536632s ago: executing program 5 (id=702): mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x583, 0x0, 0x81}]}) r3 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 2.929244707s ago: executing program 5 (id=703): socket$inet6(0xa, 0x1, 0x0) (async) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x8, 0x8000000000000000}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r0 = getpid() (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket(0x11, 0xa, 0x0) getsockopt(r3, 0x200000000114, 0x2718, 0x0, &(0x7f0000000400)) (async, rerun: 32) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) rmdir(&(0x7f0000000000)='./file0\x00') (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) (async, rerun: 32) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff92) (async, rerun: 32) r5 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0)}) (rerun: 32) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000e00)={0x4ff1, 0x0, r6}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6(0xa, 0x80002, 0x0) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) 2.840115803s ago: executing program 1 (id=704): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x79ba, 0x4) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xfff3}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 2.808138683s ago: executing program 3 (id=705): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="c0ac0000042004001c002b8008000800", @ANYRES32=r0, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="08001b00000000009eed84233d70d49670147633d8e0621fde165f9f2b200db27f1bea1bf2d7a9265ad329ffdc"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="c0ac0000042004001c002b8008000800", @ANYRES32=r0, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="08001b00000000009eed84233d70d49670147633d8e0621fde165f9f2b200db27f1bea1bf2d7a9265ad329ffdc"], 0x44}}, 0x0) (async) 2.617733485s ago: executing program 5 (id=706): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x2000000000000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x3}, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x1900f) unshare(0x8040480) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000600000014000000223da8f27ed1659ba4c0ddb4379d0d14"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000540)}, 0x20) 2.448009865s ago: executing program 5 (id=707): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = syz_io_uring_setup(0x236, &(0x7f0000000080)={0x0, 0x20000, 0x8, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x55, 0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140)={0x77359400}}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setrlimit(0x6, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)=ANY=[@ANYBLOB="3c0004ed", @ANYRES16=r9, @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4044840}, 0x48000) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r10, 0x41045508, &(0x7f0000000340)) syz_open_procfs(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x101000) socket$inet6_mptcp(0xa, 0x1, 0x106) 2.026466472s ago: executing program 3 (id=708): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000600)={0x29, 0x1, 0x3, "ff050000007eefad00000000ffffffff000000000000000000000900", 0x32314d4e}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, 0x0) socket$inet(0x10, 0x3, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) 1.946418454s ago: executing program 5 (id=709): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40) (fail_nth: 5) 1.882936569s ago: executing program 1 (id=710): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x4, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) (async) connect$802154_dgram(r2, &(0x7f0000000240)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000640)="a8", 0x1}], 0x1) 1.838345407s ago: executing program 2 (id=711): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 1.739438241s ago: executing program 2 (id=712): socket(0x10, 0x803, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000000000/0x4000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/connector\x00') socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x4000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000540)={0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r3, 0x1, r4}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r3, 0x0, r1, 0x2, 0x80000}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'dvmrp0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}}) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r7, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 1.597651367s ago: executing program 3 (id=713): socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0xe}], 0x1}, 0x10) 1.496176131s ago: executing program 0 (id=714): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x4) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) unshare(0x400) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x5c, @rand_addr=0x64010102, 0x4e21, 0x1, 'wlc\x00', 0x1a, 0x8, 0x44}, 0x2c) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000002c0)={0x0, 0x89b8, 0x1000, 0x0, 0x208}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x847ba, 0x2300, 0xe, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0fe1709850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYBLOB="763fb7ad202ffdb85809509028c6c460efcea31b4b1d43eef200fd5875c5da590207477919ac92c6a92866c62a02bc915775", @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmmsg$inet6(r6, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="f6", 0x1}], 0x1}}], 0x2, 0x41) 1.388119073s ago: executing program 3 (id=715): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0xfff4, 0x0, 0x0, 0x8010002}) 505.025029ms ago: executing program 0 (id=716): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000100)=0x3ff) sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000209, 0xa, 0x0, 0x5}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r4 = accept(r1, 0x0, 0x0) r5 = socket(0x2b, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10) bind$rds(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x46, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r8 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000001c0)={0x0, 0x0, 0x100, 0x5, {0x80, 0x9, 0xf, 0x4}}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r8, 0x5008, 0x0) 384.88962ms ago: executing program 1 (id=717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r1, 0x96b89d6b2b46148d, 0x70bd2b, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x3c}}, 0x24004040) syz_open_dev$evdev(&(0x7f0000000000), 0x44, 0x10000) 316.616975ms ago: executing program 3 (id=718): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 266.601µs ago: executing program 1 (id=719): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x40184, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000500)={0x7, 0x7fffffffffffffff, 0x4}}) (fail_nth: 2) 0s ago: executing program 3 (id=720): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000004009500"/24], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): RSP: 002b:00007f820e292038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.552913][ T7273] RAX: ffffffffffffffda RBX: 00007f820d5b5fa0 RCX: 00007f820d38ebe9 [ 176.552924][ T7273] RDX: 0000000000040880 RSI: 0000200000000180 RDI: 0000000000000003 [ 176.552935][ T7273] RBP: 00007f820e292090 R08: 0000000000000000 R09: 0000000000000000 [ 176.552946][ T7273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.552957][ T7273] R13: 00007f820d5b6038 R14: 00007f820d5b5fa0 R15: 00007ffd3096c0e8 [ 176.552980][ T7273] [ 176.716904][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.014513][ T30] audit: type=1400 audit(1755215184.009:1942): avc: denied { open } for pid=7249 comm="syz.3.316" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 177.038039][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.378454][ T7286] sp0: Synchronizing with TNC [ 178.427508][ T30] audit: type=1400 audit(1755215185.419:1943): avc: denied { getopt } for pid=7284 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.450056][ T7286] lo speed is unknown, defaulting to 1000 [ 178.468990][ T7286] lo speed is unknown, defaulting to 1000 [ 178.487344][ T7286] lo speed is unknown, defaulting to 1000 [ 178.489718][ T30] audit: type=1400 audit(1755215185.449:1944): avc: denied { setopt } for pid=7285 comm="syz.4.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.612714][ T7295] random: crng reseeded on system resumption [ 178.856514][ T7303] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[7303] [ 179.145238][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 179.154112][ T7305] netlink: 40 bytes leftover after parsing attributes in process `syz.2.329'. [ 179.553320][ T5971] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 179.715812][ T30] audit: type=1400 audit(1755215186.689:1945): avc: denied { bind } for pid=7307 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.796293][ T7286] infiniband syz2: set active [ 179.831095][ T7286] infiniband syz2: added lo [ 180.786495][ T5971] usb 4-1: Using ep0 maxpacket: 16 [ 187.785792][ T5971] usb 4-1: unable to read config index 0 descriptor/start: -110 [ 187.834072][ T7286] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 188.786638][ T5907] lo speed is unknown, defaulting to 1000 [ 188.793220][ T5971] usb 4-1: can't read configurations, error -110 [ 188.885513][ T7286] infiniband syz2: Couldn't open port 1 [ 190.785738][ T5971] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 190.960681][ T5971] usb 4-1: device descriptor read/64, error -32 [ 191.319225][ T5971] usb usb4-port1: attempt power cycle [ 191.325672][ T30] audit: type=1800 audit(1755215198.209:1946): pid=7322 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.332" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 192.065516][ T7286] RDS/IB: syz2: added [ 192.066034][ T7286] smc: adding ib device syz2 with port count 1 [ 192.066123][ T7286] smc: ib device syz2 port 1 has pnetid [ 192.067628][ T5907] lo speed is unknown, defaulting to 1000 [ 192.076539][ T7286] lo speed is unknown, defaulting to 1000 [ 192.196899][ T5971] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 192.210922][ T5971] usb 4-1: device descriptor read/8, error -32 [ 192.470655][ T5971] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 192.500930][ T5971] usb 4-1: device descriptor read/8, error -32 [ 192.610839][ T5971] usb usb4-port1: unable to enumerate USB device [ 192.702270][ T30] audit: type=1400 audit(1755215199.479:1947): avc: denied { getopt } for pid=7335 comm="syz.1.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 193.173602][ T7297] raw-gadget.0 gadget.3: failed to queue disconnect event [ 193.252670][ T30] audit: type=1400 audit(1755215200.249:1948): avc: denied { setopt } for pid=7345 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 193.471516][ T5853] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 193.490999][ T30] audit: type=1400 audit(1755215200.299:1949): avc: denied { create } for pid=7348 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 193.570742][ T5971] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 193.774157][ T5853] usb 1-1: config 46 has an invalid descriptor of length 0, skipping remainder of the config [ 193.789521][ T5853] usb 1-1: config 46 has 0 interfaces, different from the descriptor's value: 10 [ 193.867338][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.875639][ T5853] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 193.880721][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.895536][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.923331][ T5853] usb 1-1: Product: syz [ 193.927647][ T5853] usb 1-1: Manufacturer: syz [ 193.932994][ T5853] usb 1-1: SerialNumber: syz [ 193.942226][ T5971] usb 2-1: config 0 has an invalid interface number: 204 but max is 0 [ 193.953480][ T5971] usb 2-1: config 0 has no interface number 0 [ 193.970680][ T5971] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 193.991007][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.999019][ T5971] usb 2-1: Product: syz [ 194.022091][ T7340] lo speed is unknown, defaulting to 1000 [ 194.037847][ T5971] usb 2-1: Manufacturer: syz [ 194.064240][ T5971] usb 2-1: SerialNumber: syz [ 194.160325][ T7344] lo speed is unknown, defaulting to 1000 [ 194.217585][ T5971] usb 2-1: config 0 descriptor?? [ 194.248087][ T5971] ems_usb 2-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 194.260987][ T5971] ems_usb 2-1:0.204: probe with driver ems_usb failed with error -22 [ 195.755078][ T5863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 195.765891][ T5863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 195.774342][ T5863] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 195.782309][ T5863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 195.790481][ T5863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 196.000188][ T30] audit: type=1400 audit(1755215202.989:1950): avc: denied { mounton } for pid=7360 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 196.317330][ T5853] usb 1-1: USB disconnect, device number 13 [ 196.475466][ T7346] lo speed is unknown, defaulting to 1000 [ 196.588210][ T7286] lo speed is unknown, defaulting to 1000 [ 196.761130][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 196.769999][ T7366] netlink: 40 bytes leftover after parsing attributes in process `syz.3.342'. [ 197.046637][ T5853] usb 2-1: USB disconnect, device number 25 [ 197.840655][ T5861] Bluetooth: hci5: command tx timeout [ 198.517210][ T7360] lo speed is unknown, defaulting to 1000 [ 199.810473][ T7286] lo speed is unknown, defaulting to 1000 [ 199.891971][ T30] audit: type=1400 audit(1755215206.879:1951): avc: denied { ioctl } for pid=7384 comm="syz.3.349" path="socket:[16497]" dev="sockfs" ino=16497 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 199.930880][ T5861] Bluetooth: hci5: command tx timeout [ 200.991725][ T7360] chnl_net:caif_netlink_parms(): no params data found [ 201.142118][ T5930] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 201.360684][ T5930] usb 1-1: Using ep0 maxpacket: 16 [ 201.442562][ T5930] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 201.453836][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.475926][ T5930] usb 1-1: Product: syz [ 201.501125][ T5930] usb 1-1: Manufacturer: syz [ 201.640700][ T5930] usb 1-1: SerialNumber: syz [ 201.713120][ T5930] usb 1-1: config 0 descriptor?? [ 201.759705][ T5930] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 202.030071][ T5861] Bluetooth: hci5: command tx timeout [ 202.097677][ T7385] netlink: 'syz.3.349': attribute type 10 has an invalid length. [ 202.142074][ T7360] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.159224][ T7360] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.167023][ T7360] bridge_slave_0: entered allmulticast mode [ 202.175210][ T7360] bridge_slave_0: entered promiscuous mode [ 202.211619][ T7286] lo speed is unknown, defaulting to 1000 [ 202.212240][ T7360] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.225932][ T7360] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.241750][ T7360] bridge_slave_1: entered allmulticast mode [ 202.263122][ T7360] bridge_slave_1: entered promiscuous mode [ 202.378933][ T7385] batman_adv: batadv0: Adding interface: wlan0 [ 202.389653][ T7385] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.420498][ T7385] batman_adv: batadv0: Interface activated: wlan0 [ 202.539051][ T7360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.840349][ T7360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.941387][ T7360] team0: Port device team_slave_0 added [ 202.962478][ T7360] team0: Port device team_slave_1 added [ 203.042929][ T7360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.078433][ T7360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.109916][ T7360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.120831][ T5916] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 203.126560][ T7286] lo speed is unknown, defaulting to 1000 [ 203.140418][ T7360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.156880][ T7360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.160630][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 203.292507][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.306229][ T5916] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 203.369994][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.515140][ T7360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.668640][ T5916] usb 4-1: config 0 descriptor?? [ 203.705652][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 204.090287][ T5861] Bluetooth: hci5: command tx timeout [ 204.116218][ T5916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 204.151489][ T5916] pwc: recv_control_msg error -32 req 02 val 2700 [ 204.175820][ T5916] pwc: recv_control_msg error -32 req 02 val 2c00 [ 204.211077][ T5916] pwc: recv_control_msg error -32 req 04 val 1000 [ 204.273393][ T5930] usb 1-1: clie_3_5_startup: get interface number failed: -71 [ 204.281943][ T5930] visor 1-1:0.0: probe with driver visor failed with error -71 [ 204.290811][ T5916] pwc: recv_control_msg error -32 req 04 val 1300 [ 204.320672][ T5916] pwc: recv_control_msg error -32 req 04 val 1400 [ 204.343724][ T5930] usb 1-1: USB disconnect, device number 14 [ 204.360688][ T5916] pwc: recv_control_msg error -32 req 02 val 2000 [ 204.370824][ T5916] pwc: recv_control_msg error -32 req 02 val 2100 [ 204.398043][ T5916] pwc: recv_control_msg error -32 req 04 val 1500 [ 204.450381][ T5916] pwc: recv_control_msg error -32 req 02 val 2500 [ 204.457689][ T5916] pwc: recv_control_msg error -32 req 02 val 2400 [ 204.465062][ T5916] pwc: recv_control_msg error -32 req 02 val 2600 [ 204.473839][ T5916] pwc: recv_control_msg error -32 req 02 val 2900 [ 204.573735][ T7360] hsr_slave_0: entered promiscuous mode [ 204.645767][ T7360] hsr_slave_1: entered promiscuous mode [ 204.665924][ T7360] debugfs: 'hsr0' already exists in 'hsr' [ 204.697930][ T7360] Cannot create hsr debugfs directory [ 204.746860][ T5916] pwc: recv_control_msg error -71 req 04 val 1100 [ 204.773159][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 204.791665][ T5916] pwc: Registered as video103. [ 204.807847][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 204.852538][ T5916] usb 4-1: USB disconnect, device number 18 [ 206.069754][ T30] audit: type=1400 audit(1755215213.059:1952): avc: denied { mount } for pid=7435 comm="syz.3.360" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 206.093265][ T30] audit: type=1400 audit(1755215213.089:1953): avc: denied { unmount } for pid=7435 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 206.299705][ T30] audit: type=1400 audit(1755215213.289:1954): avc: denied { create } for pid=7438 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 206.478237][ T6228] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.854727][ T7450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.080228][ T6228] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.197409][ T6228] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.231239][ T5916] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 207.275039][ T6228] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.288998][ T7360] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 207.300589][ T7360] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 207.310873][ T5971] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 207.326110][ T7360] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 207.351439][ T7360] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 207.384605][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 207.398280][ T5916] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 207.407709][ T5916] usb 4-1: config 0 has no interface number 0 [ 207.415042][ T5916] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 207.427514][ T5916] usb 4-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 207.443677][ T5916] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 207.466933][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.489205][ T5916] usb 4-1: Product: syz [ 207.496582][ T5971] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.508563][ T5916] usb 4-1: Manufacturer: syz [ 207.513910][ T5971] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.524631][ T5916] usb 4-1: SerialNumber: syz [ 207.532520][ T5971] usb 1-1: config 0 interface 0 has no altsetting 0 [ 207.540313][ T5916] usb 4-1: config 0 descriptor?? [ 207.562538][ T5916] smsc95xx v2.0.0 [ 207.567950][ T5971] usb 1-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 207.578630][ T5916] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 207.590289][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.599147][ T5916] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 207.632652][ T5971] usb 1-1: config 0 descriptor?? [ 207.746937][ T6228] bridge_slave_1: left allmulticast mode [ 207.771129][ T6228] bridge_slave_1: left promiscuous mode [ 207.782978][ T6228] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.873862][ T5971] usbhid 1-1:0.0: can't add hid device: -71 [ 207.891340][ T30] audit: type=1400 audit(1755215214.879:1955): avc: denied { connect } for pid=7458 comm="syz.0.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 207.914614][ T6228] bridge_slave_0: left allmulticast mode [ 207.920317][ T6228] bridge_slave_0: left promiscuous mode [ 207.926924][ T6228] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.938877][ T5971] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 208.744527][ T30] audit: type=1400 audit(1755215214.949:1956): avc: denied { bind } for pid=7458 comm="syz.0.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 208.767898][ T30] audit: type=1400 audit(1755215214.949:1957): avc: denied { listen } for pid=7458 comm="syz.0.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 208.788259][ T30] audit: type=1400 audit(1755215214.949:1958): avc: denied { accept } for pid=7458 comm="syz.0.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 208.808085][ T30] audit: type=1400 audit(1755215215.779:1959): avc: denied { read } for pid=7458 comm="syz.0.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 210.036877][ T5971] usb 1-1: USB disconnect, device number 15 [ 210.762614][ T7502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.799928][ T7502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.871158][ T5845] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 211.032691][ T5845] usb 2-1: Using ep0 maxpacket: 8 [ 211.056116][ T5845] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.086696][ T5845] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.106811][ T5845] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.117474][ T5845] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.152079][ T5845] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.164105][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.199458][ T6228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.237336][ T6228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.255475][ T6228] bond0 (unregistering): Released all slaves [ 211.307626][ T7493] team_slave_0: entered allmulticast mode [ 211.322239][ T7497] team_slave_0: entered promiscuous mode [ 211.408123][ T5845] usb 2-1: GET_CAPABILITIES returned 0 [ 211.435864][ T5845] usbtmc 2-1:16.0: can't read capabilities [ 211.625118][ T7360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.768575][ T7360] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.806417][ T6233] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.813573][ T6233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.055173][ T6233] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.062360][ T6233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.229293][ T7512] comedi comedi1: reset error (fatal) [ 212.298881][ T1623] usb 4-1: USB disconnect, device number 19 [ 212.406499][ T30] audit: type=1400 audit(1755215219.399:1960): avc: denied { getopt } for pid=7519 comm="syz.0.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 212.888554][ T7544] ptrace attach of "./syz-executor exec"[5856] was attempted by " Àÿ Đÿ đ¥ Àÿ Àÿ Đÿ àÿ đÿ °ÿ Àÿ ÿÿÿÿ team0  € ø €  ./file0 G\x0b \x09   € 0xffffffffffffffff €  @ À  @ » € \x5c °ÿAĂ ./bus ./file1 upperdir=./file1,lowerdir=./file0,workdir=./bus,nfs_e [ 212.975075][ T6228] hsr_slave_0: left promiscuous mode [ 213.247098][ T6228] hsr_slave_1: left promiscuous mode [ 213.300427][ T6228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.370233][ T5971] usb 2-1: USB disconnect, device number 26 [ 213.523662][ T6228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.767215][ T6228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.853635][ T6228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.214635][ T7567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.384'. [ 214.235333][ T6228] veth1_macvtap: left promiscuous mode [ 214.267433][ T6228] veth0_macvtap: left promiscuous mode [ 214.294574][ T6228] veth1_vlan: left promiscuous mode [ 214.310240][ T6228] veth0_vlan: left promiscuous mode [ 214.551654][ T7575] overlayfs: failed to resolve './file0': -2 [ 215.565492][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'. [ 215.574953][ T7571] netlink: 40 bytes leftover after parsing attributes in process `syz.3.385'. [ 215.705850][ T7583] syz.1.389 (7583): /proc/7582/oom_adj is deprecated, please use /proc/7582/oom_score_adj instead. [ 216.252116][ T5971] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 216.402186][ T5971] usb 2-1: device descriptor read/64, error -71 [ 216.588796][ T6228] team0 (unregistering): Port device team_slave_1 removed [ 216.759150][ T30] audit: type=1400 audit(1755215223.749:1961): avc: denied { mount } for pid=7594 comm="syz.0.391" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 216.803117][ T5971] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 216.861901][ T6228] team0 (unregistering): Port device team_slave_0 removed [ 216.906622][ T7597] 9pnet_fd: Insufficient options for proto=fd [ 216.940653][ T5971] usb 2-1: device descriptor read/64, error -71 [ 217.061271][ T5971] usb usb2-port1: attempt power cycle [ 217.361762][ T30] audit: type=1400 audit(1755215224.349:1962): avc: denied { watch watch_reads } for pid=7598 comm="syz.3.392" path="/87" dev="tmpfs" ino=481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 217.372096][ T7601] netlink: 32 bytes leftover after parsing attributes in process `syz.3.392'. [ 217.410660][ T5971] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 217.441427][ T5971] usb 2-1: device descriptor read/8, error -71 [ 217.441961][ T6233] smc: removing ib device syz2 [ 217.728302][ T5853] lo speed is unknown, defaulting to 1000 [ 217.751688][ T5853] syz2: Port: 1 Link DOWN [ 217.797830][ T5971] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 217.802295][ T7360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.839462][ T5971] usb 2-1: device descriptor read/8, error -71 [ 217.962130][ T5971] usb usb2-port1: unable to enumerate USB device [ 217.999282][ T30] audit: type=1400 audit(1755215224.969:1963): avc: denied { write } for pid=7605 comm="syz.0.393" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.804150][ T30] audit: type=1400 audit(1755215225.729:1964): avc: denied { accept } for pid=7637 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 219.619848][ T7360] veth0_vlan: entered promiscuous mode [ 219.679237][ T7360] veth1_vlan: entered promiscuous mode [ 219.877992][ T7360] veth0_macvtap: entered promiscuous mode [ 219.928173][ T7360] veth1_macvtap: entered promiscuous mode [ 220.033263][ T7360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.070631][ T7360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.261305][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.352870][ T6230] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.805923][ T30] audit: type=1400 audit(1755215227.469:1965): avc: denied { connect } for pid=7664 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 220.911549][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.399'. [ 220.996459][ T6231] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.058528][ T6231] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.312265][ T7675] netlink: 'syz.0.402': attribute type 1 has an invalid length. [ 221.330679][ T5930] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 221.490751][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 221.511336][ T5930] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 221.532696][ T5930] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 221.562733][ T30] audit: type=1400 audit(1755215228.559:1966): avc: denied { write } for pid=7679 comm="syz.0.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 221.585489][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.588882][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.623923][ T7680] binder: 7679:7680 unknown command 0 [ 221.629325][ T7680] binder: 7679:7680 ioctl c0306201 200000000080 returned -22 [ 221.636791][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.680771][ T5930] usb 4-1: Product: syz [ 221.685035][ T5930] usb 4-1: Manufacturer: syz [ 221.689637][ T5930] usb 4-1: SerialNumber: syz [ 221.705963][ T30] audit: type=1400 audit(1755215228.699:1967): avc: denied { write } for pid=7679 comm="syz.0.403" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 221.726690][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.745393][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.763950][ T5930] usb 4-1: config 0 descriptor?? [ 221.774931][ T7668] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 221.859781][ T5930] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 221.883828][ T30] audit: type=1400 audit(1755215228.789:1968): avc: denied { mounton } for pid=7360 comm="syz-executor" path="/root/syzkaller.OIWoRo/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 221.883876][ T30] audit: type=1400 audit(1755215228.799:1969): avc: denied { mount } for pid=7360 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 221.883915][ T30] audit: type=1400 audit(1755215228.799:1970): avc: denied { mounton } for pid=7360 comm="syz-executor" path="/root/syzkaller.OIWoRo/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 221.883953][ T30] audit: type=1400 audit(1755215228.799:1971): avc: denied { mounton } for pid=7360 comm="syz-executor" path="/root/syzkaller.OIWoRo/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 221.883993][ T30] audit: type=1400 audit(1755215228.819:1972): avc: denied { mounton } for pid=7360 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 222.025380][ T7691] syz.1.404: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 222.025656][ T7691] CPU: 1 UID: 0 PID: 7691 Comm: syz.1.404 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 222.025681][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.025692][ T7691] Call Trace: [ 222.025700][ T7691] [ 222.025707][ T7691] dump_stack_lvl+0x16c/0x1f0 [ 222.025729][ T7691] warn_alloc+0x248/0x3a0 [ 222.025751][ T7691] ? __pfx_warn_alloc+0x10/0x10 [ 222.025770][ T7691] ? __pfx_stack_trace_save+0x10/0x10 [ 222.025803][ T7691] ? kasan_save_stack+0x42/0x60 [ 222.025820][ T7691] ? kasan_save_stack+0x33/0x60 [ 222.025836][ T7691] ? kasan_save_track+0x14/0x30 [ 222.025851][ T7691] ? xskq_create+0x52/0x1d0 [ 222.025875][ T7691] ? xsk_setsockopt+0x74e/0x9a0 [ 222.025896][ T7691] ? do_sock_setsockopt+0xf3/0x1d0 [ 222.025921][ T7691] ? xskq_create+0xfb/0x1d0 [ 222.025946][ T7691] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 222.025979][ T7691] ? xskq_create+0xfb/0x1d0 [ 222.026009][ T7691] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 222.026042][ T7691] ? xskq_create+0xfb/0x1d0 [ 222.026067][ T7691] vmalloc_user_noprof+0x9e/0xe0 [ 222.026092][ T7691] ? xskq_create+0xfb/0x1d0 [ 222.026117][ T7691] xskq_create+0xfb/0x1d0 [ 222.026144][ T7691] xsk_setsockopt+0x74e/0x9a0 [ 222.026168][ T7691] ? __pfx_xsk_setsockopt+0x10/0x10 [ 222.026191][ T7691] ? find_held_lock+0x2b/0x80 [ 222.026217][ T7691] ? selinux_socket_setsockopt+0x6a/0x80 [ 222.026242][ T7691] ? __pfx_xsk_setsockopt+0x10/0x10 [ 222.026279][ T7691] do_sock_setsockopt+0xf3/0x1d0 [ 222.026305][ T7691] __sys_setsockopt+0x1a0/0x230 [ 222.026326][ T7691] __x64_sys_setsockopt+0xbd/0x160 [ 222.026342][ T7691] ? do_syscall_64+0x91/0x4c0 [ 222.026360][ T7691] ? lockdep_hardirqs_on+0x7c/0x110 [ 222.026376][ T7691] do_syscall_64+0xcd/0x4c0 [ 222.026402][ T7691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.026421][ T7691] RIP: 0033:0x7f690278ebe9 [ 222.026437][ T7691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.026454][ T7691] RSP: 002b:00007f6903685038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 222.026470][ T7691] RAX: ffffffffffffffda RBX: 00007f69029b6090 RCX: 00007f690278ebe9 [ 222.026481][ T7691] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 222.026491][ T7691] RBP: 00007f6902811e19 R08: 0000000000000004 R09: 0000000000000000 [ 222.026501][ T7691] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.026511][ T7691] R13: 00007f69029b6128 R14: 00007f69029b6090 R15: 00007ffe6646d638 [ 222.026534][ T7691] [ 222.026541][ T7691] Mem-Info: [ 222.026551][ T7691] active_anon:7091 inactive_anon:0 isolated_anon:0 [ 222.026551][ T7691] active_file:14728 inactive_file:40624 isolated_file:0 [ 222.026551][ T7691] unevictable:768 dirty:95 writeback:0 [ 222.026551][ T7691] slab_reclaimable:12068 slab_unreclaimable:99510 [ 222.026551][ T7691] mapped:30809 shmem:1386 pagetables:1184 [ 222.026551][ T7691] sec_pagetables:0 bounce:0 [ 222.026551][ T7691] kernel_misc_reclaimable:0 [ 222.026551][ T7691] free:1302469 free_pcp:14687 free_cma:0 [ 222.026595][ T7691] Node 0 active_anon:28364kB inactive_anon:0kB active_file:58912kB inactive_file:162296kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123236kB dirty:380kB writeback:0kB shmem:4008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12636kB pagetables:4604kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 222.026643][ T7691] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 222.026691][ T7691] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 222.026740][ T7691] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 222.026774][ T7691] Node 0 DMA32 free:1304548kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28316kB inactive_anon:0kB active_file:58912kB inactive_file:160972kB unevictable:1536kB writepending:416kB present:3129332kB managed:2539408kB mlocked:0kB bounce:0kB free_pcp:38484kB local_pcp:20384kB free_cma:0kB [ 222.026823][ T7691] lowmem_reserve[]: 0 0 1 1 1 [ 222.026854][ T7691] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 222.026900][ T7691] lowmem_reserve[]: 0 0 0 0 0 [ 222.026931][ T7691] Node 1 Normal free:3889964kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20248kB local_pcp:7820kB free_cma:0kB [ 222.026979][ T7691] lowmem_reserve[]: 0 0 0 0 0 [ 222.027011][ T7691] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 222.027165][ T7691] Node 0 DMA32: 815*4kB (UME) 533*8kB (UM) 414*16kB (UME) 377*32kB (UME) 239*64kB (UME) 191*128kB (UME) 138*256kB (UME) 50*512kB (UME) 18*1024kB (UME) 8*2048kB (UM) 279*4096kB (UM) = 1304484kB [ 222.027341][ T7691] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 222.027452][ T7691] Node 1 Normal: 189*4kB (UE) 39*8kB (UME) 48*16kB (UME) 58*32kB (UME) 27*64kB (UME) 10*128kB (UME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3889964kB [ 222.027607][ T7691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.027621][ T7691] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.027633][ T7691] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.027645][ T7691] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.027656][ T7691] 56734 total pagecache pages [ 222.027663][ T7691] 0 pages in swap cache [ 222.027670][ T7691] Free swap = 124996kB [ 222.027677][ T7691] Total swap = 124996kB [ 222.027685][ T7691] 2097051 pages RAM [ 222.027692][ T7691] 0 pages HighMem/MovableOnly [ 222.027698][ T7691] 430237 pages reserved [ 222.027706][ T7691] 0 pages cma reserved [ 222.046563][ T5930] usb 4-1: USB disconnect, device number 20 [ 222.046655][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 222.075703][ T7694] syz.2.406: attempt to access beyond end of device [ 222.075703][ T7694] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 222.075799][ T7694] EXT4-fs (nbd2): unable to read superblock [ 222.889581][ T7711] binder: 7710:7711 ioctl 4018620d 0 returned -22 [ 222.933787][ T7711] sp0: Synchronizing with TNC [ 224.830657][ T5971] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 224.836193][ T7728] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.836590][ T7728] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.988126][ T7739] tmpfs: Unknown parameter 'usrquota/#/msr' [ 225.029264][ T5971] usb 3-1: Using ep0 maxpacket: 16 [ 225.040116][ T5971] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 225.040141][ T5971] usb 3-1: config 0 interface 0 has no altsetting 0 [ 225.040159][ T5971] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 225.040173][ T5971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.041903][ T5971] usb 3-1: config 0 descriptor?? [ 225.070102][ T7728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.084913][ T7728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.467072][ T5971] cypress 0003:04B4:07B1.0008: unbalanced collection at end of report description [ 225.467614][ T5971] cypress 0003:04B4:07B1.0008: parse failed [ 225.467666][ T5971] cypress 0003:04B4:07B1.0008: probe with driver cypress failed with error -22 [ 225.491446][ T59] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.491978][ T59] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.492496][ T59] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.493000][ T59] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.674542][ T9] usb 3-1: USB disconnect, device number 9 [ 225.769130][ T7750] : Can't lookup blockdev [ 225.841826][ T7753] netlink: 36 bytes leftover after parsing attributes in process `syz.3.416'. [ 226.251968][ T7729] tty tty4: ldisc open failed (-12), clearing slot 3 [ 227.135930][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.419'. [ 227.145339][ T7764] netlink: 40 bytes leftover after parsing attributes in process `syz.5.419'. [ 227.360170][ T7775] comedi comedi4: bad chanlist[0]=0x032c0000 chan=0 range length=2 [ 227.369695][ T43] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 227.501534][ T7777] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=4096 sclass=netlink_tcpdiag_socket pid=7777 comm=syz.2.422 [ 227.516515][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 227.516530][ T30] audit: type=1400 audit(1755215234.519:1981): avc: denied { remount } for pid=7776 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 227.526691][ T43] usb 1-1: device descriptor read/64, error -71 [ 227.812561][ T43] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 227.965720][ T43] usb 1-1: device descriptor read/64, error -71 [ 228.081507][ T43] usb usb1-port1: attempt power cycle [ 228.192179][ T5907] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 228.310636][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 228.884210][ T43] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 228.955169][ T30] audit: type=1400 audit(1755215235.559:1982): avc: denied { shutdown } for pid=7796 comm="syz.5.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.075191][ T43] usb 1-1: device descriptor read/8, error -71 [ 229.090799][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 229.225363][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 229.632471][ T43] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 229.647045][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.673966][ T5907] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 229.683395][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.698301][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.703081][ T5907] usb 2-1: Product: syz [ 229.723911][ T43] usb 1-1: device descriptor read/8, error -71 [ 229.765336][ T5907] usb 2-1: Manufacturer: syz [ 229.769965][ T5907] usb 2-1: SerialNumber: syz [ 229.770584][ T9] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 229.842989][ T43] usb usb1-port1: unable to enumerate USB device [ 229.852538][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 229.947210][ T5907] usb 2-1: config 0 descriptor?? [ 229.960109][ T5907] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 230.380020][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 230.399425][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.426374][ T9] usb 4-1: config 0 descriptor?? [ 231.212055][ T7827] overlayfs: failed lookup in lower (newroot/98, name='file1', err=-40): overlapping layers [ 231.550873][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 231.557022][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 231.735636][ T9] usb 4-1: USB disconnect, device number 21 [ 232.590653][ T5930] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 232.740701][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 232.901941][ T7861] netlink: 'syz.3.440': attribute type 1 has an invalid length. [ 233.005252][ T30] audit: type=1400 audit(1755215239.999:1983): avc: denied { accept } for pid=7859 comm="syz.3.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 233.112794][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'. [ 233.284793][ T5907] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 233.307625][ T5907] visor 2-1:0.0: probe with driver visor failed with error -71 [ 233.342915][ T5907] usb 2-1: USB disconnect, device number 31 [ 233.350794][ T5930] usb 6-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 233.363136][ T5930] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.393840][ T5930] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 233.403043][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.411307][ T5930] usb 6-1: Product: syz [ 233.415514][ T5930] usb 6-1: Manufacturer: syz [ 233.420107][ T5930] usb 6-1: SerialNumber: syz [ 233.485237][ T5930] usb 6-1: config 0 descriptor?? [ 233.513214][ T7861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.026482][ T7855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.105972][ T7855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.114843][ T7876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.123944][ T7876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.133984][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.765636][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.750390][ T5930] usb 6-1: USB disconnect, device number 2 [ 235.858463][ T7872] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 236.403823][ T7898] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 236.410721][ T30] audit: type=1400 audit(1755215243.399:1984): avc: denied { create } for pid=7897 comm="syz.5.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 236.475398][ T5930] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 236.523441][ T7898] audit: out of memory in audit_log_start [ 236.593209][ T5845] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 236.682063][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 236.710904][ T5930] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 236.866549][ T5930] usb 2-1: config 0 has no interface number 0 [ 237.017218][ T5845] usb 4-1: config 46 has an invalid descriptor of length 0, skipping remainder of the config [ 237.060790][ T5845] usb 4-1: config 46 has 0 interfaces, different from the descriptor's value: 10 [ 237.074768][ T5930] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 237.086020][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.099003][ T5845] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 237.108242][ T5930] usb 2-1: Product: syz [ 237.117859][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.126706][ T5930] usb 2-1: Manufacturer: syz [ 237.140582][ T5845] usb 4-1: Product: syz [ 237.153038][ T5930] usb 2-1: SerialNumber: syz [ 237.170818][ T5845] usb 4-1: Manufacturer: syz [ 237.175453][ T5845] usb 4-1: SerialNumber: syz [ 237.189732][ T5930] usb 2-1: config 0 descriptor?? [ 237.217512][ T5930] smsc95xx v2.0.0 [ 237.225068][ T30] audit: type=1400 audit(1755215244.219:1985): avc: denied { create } for pid=7909 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 237.261666][ T7911] SELinux: Context system_u:object_r:bin_t:s0 is not valid (left unmapped). [ 237.311553][ T30] audit: type=1400 audit(1755215244.299:1986): avc: denied { relabelto } for pid=7909 comm="syz.2.447" name="cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:bin_t:s0" [ 237.485803][ T30] audit: type=1400 audit(1755215244.339:1987): avc: denied { associate } for pid=7909 comm="syz.2.447" name="cgroup.procs" dev="cgroup" ino=294 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:bin_t:s0" [ 237.514667][ T30] audit: type=1400 audit(1755215244.399:1988): avc: denied { nlmsg_write } for pid=7916 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 237.616295][ T5930] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 237.760744][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 238.484155][ T5930] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 238.567632][ T30] audit: type=1400 audit(1755215245.539:1989): avc: denied { bind } for pid=7928 comm="syz.5.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 238.694881][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 239.583715][ T30] audit: type=1400 audit(1755215245.549:1990): avc: denied { write } for pid=7928 comm="syz.5.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 239.636160][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.719440][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.756469][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 239.787540][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.798227][ T9] usb 3-1: config 0 descriptor?? [ 239.870414][ T7936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.016839][ T7936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.217247][ T5916] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 240.245580][ T9] input: HID 041e:3100 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.0009/input/input11 [ 240.392493][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 240.405150][ T5845] usb 4-1: USB disconnect, device number 22 [ 240.416442][ T5916] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 240.428261][ T7920] program syz.2.450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.754617][ T9] creative-sb0540 0003:041E:3100.0009: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.2-1/input0 [ 240.800676][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.808696][ T5916] usb 1-1: Product: syz [ 240.830694][ T5916] usb 1-1: Manufacturer: syz [ 240.835411][ T5916] usb 1-1: SerialNumber: syz [ 240.852489][ T5916] usb 1-1: config 0 descriptor?? [ 240.873532][ T5916] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 240.913742][ C1] sd 0:0:1:0: [sda] tag#5581 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 240.924257][ C1] sd 0:0:1:0: [sda] tag#5581 CDB: Write(6) 0a 00 00 00 00 00 [ 241.010448][ T5930] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 241.056409][ T5930] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 241.112759][ T5930] usb 2-1: USB disconnect, device number 32 [ 241.951557][ T5930] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 243.706894][ T1623] usb 3-1: USB disconnect, device number 10 [ 244.027798][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 244.037027][ T7988] netlink: 40 bytes leftover after parsing attributes in process `syz.2.458'. [ 244.161604][ T5916] usb 1-1: clie_3_5_startup: get interface number failed: -110 [ 244.252871][ T5916] visor 1-1:0.0: probe with driver visor failed with error -110 [ 244.904917][ T30] audit: type=1400 audit(1755215251.879:1991): avc: denied { mount } for pid=7989 comm="syz.1.457" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 244.968090][ T9] usb 1-1: USB disconnect, device number 20 [ 245.389838][ T30] audit: type=1400 audit(1755215252.379:1992): avc: denied { read } for pid=8015 comm="syz.3.466" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 245.444430][ T30] audit: type=1400 audit(1755215252.389:1993): avc: denied { write } for pid=8015 comm="syz.3.466" path="socket:[20730]" dev="sockfs" ino=20730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 245.575438][ T8022] FAULT_INJECTION: forcing a failure. [ 245.575438][ T8022] name failslab, interval 1, probability 0, space 0, times 0 [ 245.594142][ T8022] CPU: 1 UID: 0 PID: 8022 Comm: syz.1.467 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 245.594171][ T8022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.594181][ T8022] Call Trace: [ 245.594188][ T8022] [ 245.594195][ T8022] dump_stack_lvl+0x16c/0x1f0 [ 245.594218][ T8022] should_fail_ex+0x512/0x640 [ 245.594236][ T8022] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 245.594262][ T8022] should_failslab+0xc2/0x120 [ 245.594281][ T8022] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 245.594299][ T8022] ? mark_held_locks+0x49/0x80 [ 245.594322][ T8022] ? kstrdup_const+0x63/0x80 [ 245.594344][ T8022] kstrdup+0x53/0x100 [ 245.594361][ T8022] kstrdup_const+0x63/0x80 [ 245.594376][ T8022] kvasprintf_const+0x10f/0x1a0 [ 245.594399][ T8022] kobject_set_name_vargs+0x5a/0x140 [ 245.594419][ T8022] dev_set_name+0xc7/0x100 [ 245.594441][ T8022] ? __pfx_dev_set_name+0x10/0x10 [ 245.594465][ T8022] ? lockdep_init_map_type+0x5c/0x280 [ 245.594481][ T8022] ? __init_waitqueue_head+0xca/0x150 [ 245.594504][ T8022] netdev_register_kobject+0xc5/0x3d0 [ 245.594528][ T8022] register_netdevice+0x13dc/0x2270 [ 245.594552][ T8022] ? __pfx_register_netdevice+0x10/0x10 [ 245.594577][ T8022] vti6_tnl_create2+0x80/0x180 [ 245.594602][ T8022] vti6_locate+0x5cc/0x6f0 [ 245.594624][ T8022] ? __pfx_vti6_locate+0x10/0x10 [ 245.594652][ T8022] vti6_siocdevprivate+0x2c0/0x660 [ 245.594675][ T8022] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 245.594713][ T8022] ? full_name_hash+0xbc/0x110 [ 245.594735][ T8022] ? netdev_name_node_lookup+0x127/0x180 [ 245.594761][ T8022] dev_ifsioc+0x8ee/0x1f70 [ 245.594788][ T8022] ? __pfx_dev_ifsioc+0x10/0x10 [ 245.594812][ T8022] ? __pfx___mutex_lock+0x10/0x10 [ 245.594837][ T8022] ? dev_load+0x8e/0x240 [ 245.594865][ T8022] dev_ioctl+0x1b2/0x10e0 [ 245.594882][ T8022] sock_ioctl+0x5b3/0x6b0 [ 245.594903][ T8022] ? __pfx_sock_ioctl+0x10/0x10 [ 245.594921][ T8022] ? hook_file_ioctl_common+0x145/0x410 [ 245.594945][ T8022] ? selinux_file_ioctl+0x180/0x270 [ 245.594966][ T8022] ? selinux_file_ioctl+0xb4/0x270 [ 245.594988][ T8022] ? __pfx_sock_ioctl+0x10/0x10 [ 245.595009][ T8022] __x64_sys_ioctl+0x18b/0x210 [ 245.595035][ T8022] do_syscall_64+0xcd/0x4c0 [ 245.595053][ T8022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.595070][ T8022] RIP: 0033:0x7f690278ebe9 [ 245.595089][ T8022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.595104][ T8022] RSP: 002b:00007f69036a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.595120][ T8022] RAX: ffffffffffffffda RBX: 00007f69029b5fa0 RCX: 00007f690278ebe9 [ 245.595130][ T8022] RDX: 0000200000000180 RSI: 00000000000089f1 RDI: 0000000000000003 [ 245.595140][ T8022] RBP: 00007f69036a6090 R08: 0000000000000000 R09: 0000000000000000 [ 245.595149][ T8022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.595158][ T8022] R13: 00007f69029b6038 R14: 00007f69029b5fa0 R15: 00007ffe6646d638 [ 245.595179][ T8022] [ 245.670596][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 245.686722][ T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 245.832695][ T10] usb 3-1: config 46 has an invalid descriptor of length 0, skipping remainder of the config [ 245.963777][ T10] usb 3-1: config 46 has 0 interfaces, different from the descriptor's value: 10 [ 246.011690][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 246.050924][ T10] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 246.060188][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.071337][ T10] usb 3-1: Product: syz [ 246.075523][ T10] usb 3-1: Manufacturer: syz [ 246.080127][ T10] usb 3-1: SerialNumber: syz [ 246.174157][ T9] usb 2-1: config 0 has no interfaces? [ 246.180745][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 246.189846][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.203404][ T9] usb 2-1: config 0 descriptor?? [ 246.240609][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 246.247315][ T43] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 246.255931][ T43] usb 6-1: config 0 has no interface number 0 [ 246.265224][ T43] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 246.274563][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.284767][ T43] usb 6-1: Product: syz [ 246.288953][ T43] usb 6-1: Manufacturer: syz [ 246.294777][ T43] usb 6-1: SerialNumber: syz [ 246.304960][ T43] usb 6-1: config 0 descriptor?? [ 246.312760][ T43] smsc95xx v2.0.0 [ 247.872208][ T8024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.892327][ T8024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.909007][ T5916] usb 2-1: USB disconnect, device number 33 [ 248.072600][ T43] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 248.106040][ T43] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 248.742370][ T8044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.028453][ T8044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.080501][ T10] usb 3-1: USB disconnect, device number 11 [ 249.356697][ T30] audit: type=1326 audit(1755215256.349:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz.3.470" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc34118ebe9 code=0x0 [ 249.512095][ T30] audit: type=1400 audit(1755215256.479:1995): avc: denied { create } for pid=8036 comm="syz.3.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 249.568932][ T30] audit: type=1400 audit(1755215256.479:1996): avc: denied { write } for pid=8036 comm="syz.3.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 249.799364][ T43] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 249.984786][ T43] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 249.999286][ T43] usb 6-1: USB disconnect, device number 3 [ 253.757847][ T8078] random: crng reseeded on system resumption [ 253.775529][ T30] audit: type=1400 audit(1755215260.739:1997): avc: denied { append } for pid=8075 comm="syz.1.476" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 254.407042][ T30] audit: type=1400 audit(1755215261.399:1998): avc: denied { read } for pid=8095 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 254.520618][ T1623] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 254.696044][ T1623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.755481][ T1623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.790337][ T30] audit: type=1400 audit(1755215261.779:1999): avc: denied { setopt } for pid=8103 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 254.813123][ T1623] usb 6-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 254.840953][ T1623] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.875171][ T1623] usb 6-1: config 0 descriptor?? [ 255.086766][ T43] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 255.250084][ T8112] FAULT_INJECTION: forcing a failure. [ 255.250084][ T8112] name failslab, interval 1, probability 0, space 0, times 0 [ 255.263143][ T8112] CPU: 0 UID: 0 PID: 8112 Comm: syz.2.481 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 255.263170][ T8112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.263179][ T8112] Call Trace: [ 255.263184][ T8112] [ 255.263190][ T8112] dump_stack_lvl+0x16c/0x1f0 [ 255.263219][ T8112] should_fail_ex+0x512/0x640 [ 255.263242][ T8112] should_failslab+0xc2/0x120 [ 255.263261][ T8112] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 255.263279][ T8112] ? skb_clone+0x190/0x3f0 [ 255.263299][ T8112] skb_clone+0x190/0x3f0 [ 255.263316][ T8112] netlink_deliver_tap+0xabd/0xd30 [ 255.263339][ T8112] netlink_unicast+0x64c/0x870 [ 255.263361][ T8112] ? __pfx_netlink_unicast+0x10/0x10 [ 255.263381][ T8112] ? security_netlink_send+0x24/0x210 [ 255.263400][ T8112] ? __sanitizer_cov_trace_pc+0x41/0x70 [ 255.263422][ T8112] netlink_sendmsg+0x8d1/0xdd0 [ 255.263444][ T8112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.263465][ T8112] ? bpf_lsm_socket_sendmsg+0x4/0x10 [ 255.263488][ T8112] ____sys_sendmsg+0xa98/0xc70 [ 255.263511][ T8112] ? copy_msghdr_from_user+0x10a/0x160 [ 255.263527][ T8112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.263559][ T8112] ___sys_sendmsg+0x134/0x1d0 [ 255.263576][ T8112] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.263590][ T8112] ? preempt_schedule_common+0x44/0xc0 [ 255.263638][ T8112] ? lockdep_hardirqs_on+0x50/0x110 [ 255.263659][ T8112] __sys_sendmsg+0x16d/0x220 [ 255.263675][ T8112] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.263690][ T8112] ? rcu_is_watching+0x12/0xc0 [ 255.263721][ T8112] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 255.263744][ T8112] do_syscall_64+0xcd/0x4c0 [ 255.263762][ T8112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.263778][ T8112] RIP: 0033:0x7eff8c18ebe9 [ 255.263791][ T8112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.263806][ T8112] RSP: 002b:00007eff8cf78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.263822][ T8112] RAX: ffffffffffffffda RBX: 00007eff8c3b6090 RCX: 00007eff8c18ebe9 [ 255.263833][ T8112] RDX: 0000000004000000 RSI: 0000200000000e80 RDI: 0000000000000007 [ 255.263843][ T8112] RBP: 00007eff8cf78090 R08: 0000000000000000 R09: 0000000000000000 [ 255.263852][ T8112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.263861][ T8112] R13: 00007eff8c3b6128 R14: 00007eff8c3b6090 R15: 00007ffc89594c38 [ 255.263883][ T8112] [ 255.616457][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 255.771190][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.780616][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.792372][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.900696][ T43] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 255.981846][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.000630][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 256.082500][ T43] usb 2-1: config 0 descriptor?? [ 256.108904][ T8090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.168865][ T8090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.179711][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.199128][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.226280][ T24] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 256.249639][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.270854][ T5916] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 256.292929][ T24] usb 1-1: config 0 descriptor?? [ 256.346886][ T1623] usbhid 6-1:0.0: can't add hid device: -71 [ 256.353059][ T1623] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 256.359643][ T43] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 256.363205][ T1623] usb 6-1: USB disconnect, device number 4 [ 256.468527][ T5916] usb 3-1: config 46 has an invalid descriptor of length 0, skipping remainder of the config [ 256.482168][ T5916] usb 3-1: config 46 has 0 interfaces, different from the descriptor's value: 10 [ 256.497093][ T5916] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 256.508351][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.517664][ T5916] usb 3-1: Product: syz [ 256.527469][ T5916] usb 3-1: Manufacturer: syz [ 256.537033][ T5916] usb 3-1: SerialNumber: syz [ 256.607323][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 256.616659][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 256.648939][ T24] usb 1-1: USB disconnect, device number 21 [ 256.959148][ T24] usb 2-1: USB disconnect, device number 34 [ 257.866300][ T8138] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20000 [ 258.856838][ T8146] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 258.905243][ T5916] usb 3-1: USB disconnect, device number 12 [ 259.053648][ T8153] binder: 8152:8153 unknown command 0 [ 259.059282][ T8153] binder: 8152:8153 ioctl c0306201 200000000080 returned -22 [ 260.066212][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 262.150629][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 262.702968][ T10] usb 2-1: device descriptor read/all, error -71 [ 264.160581][ T30] audit: type=1400 audit(1755215270.819:2000): avc: denied { setopt } for pid=8169 comm="syz.5.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 265.148543][ T30] audit: type=1400 audit(1755215272.139:2001): avc: denied { ioctl } for pid=8185 comm="syz.5.497" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 265.214767][ T8196] overlayfs: upper fs does not support tmpfile. [ 265.245320][ T30] audit: type=1400 audit(1755215272.209:2002): avc: denied { mounton } for pid=8182 comm="syz.2.498" path="/bus" dev="bpf" ino=19933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 265.345973][ T30] audit: type=1326 audit(1755215272.279:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz.5.497" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f136578ebe9 code=0x0 [ 265.519240][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.497'. [ 265.528311][ T8200] openvswitch: netlink: Unknown nsh attribute 0 [ 265.535032][ T8200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.520608][ T5916] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 266.770587][ T5916] usb 6-1: Using ep0 maxpacket: 16 [ 267.083288][ T5916] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.228830][ T5916] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 267.543765][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 267.801792][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 267.815947][ T5916] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 267.826501][ T5916] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.840664][ T5916] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 267.849718][ T5916] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 268.772874][ T5916] usb 6-1: Manufacturer: syz [ 268.912671][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 269.079055][ T5916] usb 6-1: config 0 descriptor?? [ 269.098449][ T5916] usb 6-1: can't set config #0, error -71 [ 269.112711][ T8233] netlink: 40 bytes leftover after parsing attributes in process `syz.0.507'. [ 269.132024][ T5916] usb 6-1: USB disconnect, device number 5 [ 269.321253][ T1623] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 269.421038][ T10] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 269.734768][ T1623] usb 3-1: config 46 has an invalid descriptor of length 0, skipping remainder of the config [ 269.748664][ T1623] usb 3-1: config 46 has 0 interfaces, different from the descriptor's value: 10 [ 269.760231][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 270.720176][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 270.741729][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.752053][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.762102][ T1623] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 271.721245][ T1623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.729258][ T1623] usb 3-1: Product: syz [ 271.733432][ T1623] usb 3-1: Manufacturer: syz [ 271.738008][ T1623] usb 3-1: SerialNumber: syz [ 273.561581][ T1623] usb 3-1: can't set config #46, error -71 [ 273.674035][ T1623] usb 3-1: USB disconnect, device number 13 [ 273.751720][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.861339][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.066355][ T8275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.093992][ T10] usb 2-1: can't set config #1, error -71 [ 274.116165][ T8275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.802831][ T10] usb 2-1: USB disconnect, device number 37 [ 275.323032][ T5861] Bluetooth: hci2: SCO packet too small [ 276.009364][ T8297] netlink: 24 bytes leftover after parsing attributes in process `syz.1.515'. [ 276.730835][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 277.394202][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 277.409345][ T10] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 277.449324][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.514111][ T10] usb 2-1: config 0 descriptor?? [ 277.539737][ T10] as10x_usb: device has been detected [ 277.555217][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 277.736930][ T10] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 277.779616][ T8297] overlayfs: failed lookup in lower (newroot/96, name='bus', err=-40): overlapping layers [ 277.907241][ T8304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.907836][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 277.916176][ T8304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.924912][ T8324] netlink: 40 bytes leftover after parsing attributes in process `syz.0.520'. [ 277.937447][ T8304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.953238][ T8304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.166004][ T10] as10x_usb: error during firmware upload part1 [ 278.172291][ T30] audit: type=1400 audit(1755215285.159:2004): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 278.500661][ T5916] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 278.596099][ T10] Registered device nBox DVB-T Dongle [ 278.598429][ T10] usb 2-1: USB disconnect, device number 38 [ 278.606340][ T30] audit: type=1400 audit(1755215285.409:2005): avc: denied { write } for pid=8298 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 278.622943][ T10] Unregistered device nBox DVB-T Dongle [ 278.631128][ T10] as10x_usb: device has been disconnected [ 278.818038][ T5916] usb 6-1: config 46 has an invalid descriptor of length 0, skipping remainder of the config [ 278.864210][ T5916] usb 6-1: config 46 has 0 interfaces, different from the descriptor's value: 10 [ 278.903817][ T30] audit: type=1400 audit(1755215285.889:2006): avc: denied { connect } for pid=8335 comm="syz.0.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 278.922411][ T5916] usb 6-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 278.923271][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.937394][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.957882][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.522'. [ 278.986097][ T5916] usb 6-1: Product: syz [ 279.013457][ T5916] usb 6-1: Manufacturer: syz [ 279.034024][ T5916] usb 6-1: SerialNumber: syz [ 279.034044][ T30] audit: type=1400 audit(1755215285.949:2007): avc: denied { write } for pid=8335 comm="syz.0.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 279.058164][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.683764][ T30] audit: type=1400 audit(1755215286.609:2008): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 281.002135][ T30] audit: type=1400 audit(1755215287.989:2009): avc: denied { mounton } for pid=8358 comm="syz.0.526" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 281.025082][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.055041][ T8359] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 282.090225][ T5916] usb 6-1: USB disconnect, device number 6 [ 283.942025][ T30] audit: type=1400 audit(1755215290.119:2010): avc: denied { mount } for pid=8370 comm="syz.1.531" name="/" dev="ramfs" ino=20416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 284.040647][ T30] audit: type=1326 audit(1755215290.749:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz.5.532" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f136578ebe9 code=0x0 [ 284.194488][ T8385] tipc: Started in network mode [ 284.199376][ T8385] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 284.206714][ T8385] tipc: Enabled bearer , priority 10 [ 284.213384][ T8386] lo speed is unknown, defaulting to 1000 [ 284.219126][ T8386] lo speed is unknown, defaulting to 1000 [ 284.226330][ T8386] lo speed is unknown, defaulting to 1000 [ 284.236481][ T8386] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 284.251634][ T8386] lo speed is unknown, defaulting to 1000 [ 284.258027][ T8386] lo speed is unknown, defaulting to 1000 [ 284.265580][ T8386] lo speed is unknown, defaulting to 1000 [ 284.272027][ T8386] lo speed is unknown, defaulting to 1000 [ 284.278383][ T8386] lo speed is unknown, defaulting to 1000 [ 284.285284][ T8386] lo speed is unknown, defaulting to 1000 [ 284.475491][ T8398] smc: net device bond0 applied user defined pnetid SYZ2 [ 284.483192][ T8398] netlink: 14 bytes leftover after parsing attributes in process `syz.5.536'. [ 284.743286][ T8396] overlayfs: failed to resolve './file1': -2 [ 284.799806][ T8394] siw: device registration error -23 [ 285.332723][ T43] tipc: Node number set to 10005162 [ 285.558457][ T8398] smc: removing net device bond0 with user defined pnetid SYZ2 [ 285.567399][ T8398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.583073][ T30] audit: type=1400 audit(1755215292.569:2012): avc: denied { connect } for pid=8425 comm="syz.0.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 285.617326][ T8398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.649914][ T8398] bond0 (unregistering): Released all slaves [ 285.670884][ T8381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.533'. [ 285.950604][ T5916] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 285.958351][ T43] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 286.314854][ T8430] lo speed is unknown, defaulting to 1000 [ 286.324387][ T5916] usb 3-1: device descriptor read/64, error -71 [ 286.459441][ T8438] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.543'. [ 286.480585][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 286.530636][ T5930] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 286.617127][ T5916] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 286.678185][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 286.688916][ T43] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 286.698753][ T43] usb 1-1: config 1 has no interface number 1 [ 286.705473][ T43] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 286.723994][ T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 286.734121][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.811309][ T5916] usb 3-1: device descriptor read/64, error -71 [ 287.130685][ T5971] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 287.207491][ T5930] usb 2-1: config 46 has an invalid descriptor of length 0, skipping remainder of the config [ 287.210832][ T5916] usb usb3-port1: attempt power cycle [ 287.259036][ T5930] usb 2-1: config 46 has 0 interfaces, different from the descriptor's value: 10 [ 287.264710][ T43] usb 1-1: Product: syz [ 287.280984][ T43] usb 1-1: Manufacturer: syz [ 287.286273][ T43] usb 1-1: SerialNumber: syz [ 287.504311][ T5971] usb 6-1: Using ep0 maxpacket: 32 [ 287.794670][ T5971] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 287.803192][ T5971] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 287.817311][ T5971] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 287.826601][ T5916] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 287.834815][ T5971] usb 6-1: config 1 has no interface number 0 [ 287.844925][ T5971] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 287.858023][ T5971] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 287.872249][ T5916] usb 3-1: device descriptor read/8, error -71 [ 287.878551][ T5971] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 287.887739][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.901078][ T5930] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 287.947573][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.975821][ T8445] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 288.110656][ T5916] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 288.730592][ T30] audit: type=1400 audit(1755215294.979:2013): avc: denied { relabelto } for pid=8441 comm="syz.3.544" name="112" dev="tmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 288.760579][ T5930] usb 2-1: Product: syz [ 288.764808][ T5930] usb 2-1: Manufacturer: syz [ 288.766554][ T5971] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 288.777260][ T5930] usb 2-1: SerialNumber: syz [ 288.792471][ T30] audit: type=1400 audit(1755215294.979:2014): avc: denied { associate } for pid=8441 comm="syz.3.544" name="112" dev="tmpfs" ino=614 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 288.896653][ T43] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 288.947460][ T5930] usb 2-1: USB disconnect, device number 39 [ 289.040623][ T30] audit: type=1400 audit(1755215295.039:2015): avc: denied { ioctl } for pid=8441 comm="syz.3.544" path="socket:[22101]" dev="sockfs" ino=22101 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 289.083570][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 289.092449][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 289.679813][ T30] audit: type=1400 audit(1755215295.779:2016): avc: denied { remove_name } for pid=5856 comm="syz-executor" name="binderfs" dev="tmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 289.708373][ T30] audit: type=1400 audit(1755215295.779:2017): avc: denied { rmdir } for pid=5856 comm="syz-executor" name="112" dev="tmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 289.712891][ T43] usb 1-1: USB disconnect, device number 22 [ 289.867545][ T8451] dummy0: entered promiscuous mode [ 289.981916][ T8265] udevd[8265]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 290.258582][ T8464] binder_alloc: 8463: binder_alloc_buf size 16777216 failed, no address space [ 290.267836][ T43] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 290.275709][ T8464] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 290.292656][ T30] audit: type=1400 audit(1755215297.239:2018): avc: denied { call } for pid=8463 comm="syz.1.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 290.430900][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 290.490303][ T43] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 290.520912][ T43] usb 1-1: config 0 has no interface number 0 [ 290.544207][ T43] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 290.593615][ T43] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 290.723113][ T5971] snd_usb_pod 6-1:1.1: set_interface failed [ 290.750963][ T5971] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 290.758333][ T5971] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 290.770631][ T43] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 291.257502][ T43] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 291.354293][ T5971] usb 6-1: USB disconnect, device number 7 [ 291.430769][ T43] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 291.440250][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.469657][ T5861] Bluetooth: hci4: unexpected event for opcode 0x0c13 [ 291.541616][ T43] usb 1-1: config 0 descriptor?? [ 291.799071][ T8482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.831867][ T43] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 291.850593][ T5916] usb 3-1: device descriptor read/8, error -71 [ 291.858521][ T30] audit: type=1400 audit(1755215298.849:2019): avc: denied { create } for pid=8453 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 291.984101][ T5916] usb usb3-port1: unable to enumerate USB device [ 291.988967][ T30] audit: type=1400 audit(1755215298.879:2020): avc: denied { read } for pid=8487 comm="syz.1.554" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 292.140923][ T30] audit: type=1400 audit(1755215298.879:2021): avc: denied { open } for pid=8487 comm="syz.1.554" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 292.359407][ T5853] usb 1-1: USB disconnect, device number 23 [ 292.365495][ T5930] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 292.472821][ T30] audit: type=1400 audit(1755215299.469:2022): avc: denied { bind } for pid=8505 comm="syz.3.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 292.511184][ T8499] lo speed is unknown, defaulting to 1000 [ 292.522685][ T5853] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 292.724428][ T5930] usb 6-1: config 46 has an invalid descriptor of length 0, skipping remainder of the config [ 292.762611][ T8506] netlink: 'syz.3.557': attribute type 4 has an invalid length. [ 292.784714][ T5930] usb 6-1: config 46 has 0 interfaces, different from the descriptor's value: 10 [ 292.839643][ T5930] usb 6-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 292.920152][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.973858][ T5930] usb 6-1: Product: syz [ 292.979690][ T5930] usb 6-1: Manufacturer: syz [ 292.997268][ T5930] usb 6-1: SerialNumber: syz [ 293.697519][ T5853] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 293.876269][ T5853] usb 1-1: config 66 has an invalid interface number: 195 but max is 0 [ 294.168129][ T5853] usb 1-1: config 66 has no interface number 0 [ 294.353912][ T5853] usb 1-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=56.49 [ 294.393945][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.423176][ T5853] usb 1-1: Product: syz [ 294.436956][ T5853] usb 1-1: Manufacturer: syz [ 294.459619][ T5853] usb 1-1: SerialNumber: syz [ 296.447783][ T5930] usb 6-1: USB disconnect, device number 8 [ 297.403827][ T8550] overlayfs: failed lookup in lower (newroot/117, name='file1', err=-40): overlapping layers [ 297.446577][ T5916] usb 1-1: USB disconnect, device number 24 [ 298.545399][ T8563] overlayfs: failed lookup in lower (newroot/124, name='file1', err=-40): overlapping layers [ 299.102829][ T30] audit: type=1400 audit(1755215306.099:2023): avc: denied { ioctl } for pid=8555 comm="syz.5.563" path="socket:[22346]" dev="sockfs" ino=22346 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 299.520571][ T5971] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 299.590690][ T8571] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 299.597454][ T8571] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 299.637325][ T8571] vhci_hcd vhci_hcd.0: Device attached [ 299.691272][ T5971] usb 2-1: device descriptor read/64, error -71 [ 299.820740][ T43] vhci_hcd: vhci_device speed not set [ 299.886591][ T43] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 299.911703][ T5916] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 300.064422][ T5971] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 300.159793][ T5916] usb 3-1: config 0 has no interfaces? [ 300.165961][ T5916] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 300.177281][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.221956][ T5971] usb 2-1: device descriptor read/64, error -71 [ 300.524900][ T5916] usb 3-1: config 0 descriptor?? [ 300.640789][ T1623] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 300.643608][ T5971] usb usb2-port1: attempt power cycle [ 300.842184][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 300.889134][ T1623] usb 1-1: device descriptor read/64, error -71 [ 300.976703][ T8572] usb 37-1: recv xbuf, 0 [ 301.010656][ T5971] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 301.113288][ T5916] usb 3-1: USB disconnect, device number 18 [ 301.134822][ T2978] vhci_hcd: stop threads [ 301.145048][ T2978] vhci_hcd: release socket [ 301.145473][ T8589] syz.5.572: attempt to access beyond end of device [ 301.145473][ T8589] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 301.152455][ T2978] vhci_hcd: disconnect device [ 301.168134][ T5971] usb 2-1: device descriptor read/8, error -71 [ 301.200754][ T43] vhci_hcd: vhci_device speed not set [ 301.231064][ T1623] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 301.284844][ T24] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 301.295153][ T24] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 301.304283][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 301.313909][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.362943][ T1623] usb 1-1: device descriptor read/64, error -71 [ 301.410700][ T5971] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 301.420764][ T5930] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 301.441283][ T5971] usb 2-1: device descriptor read/8, error -71 [ 301.473125][ T1623] usb usb1-port1: attempt power cycle [ 301.535484][ T8579] kAFS: unable to lookup cell '.,' [ 301.551993][ T5971] usb usb2-port1: unable to enumerate USB device [ 301.570808][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 301.579671][ T5930] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.592051][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 301.600454][ T5930] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 301.612281][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.620659][ T5930] usb 6-1: Product: syz [ 301.624833][ T5930] usb 6-1: Manufacturer: syz [ 301.629444][ T5930] usb 6-1: SerialNumber: syz [ 301.636666][ T5930] usb 6-1: config 0 descriptor?? [ 301.648918][ T5930] gs_usb 6-1:0.0: Required endpoints not found [ 301.820634][ T1623] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 301.853495][ T1623] usb 1-1: device descriptor read/8, error -71 [ 301.864057][ T5971] usb 6-1: USB disconnect, device number 9 [ 301.960615][ T5930] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 302.090597][ T1623] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 302.111182][ T1623] usb 1-1: device descriptor read/8, error -71 [ 302.118604][ T5930] usb 3-1: unable to get BOS descriptor or descriptor too short [ 302.128021][ T5930] usb 3-1: not running at top speed; connect to a high speed hub [ 302.137495][ T5930] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.147672][ T5930] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.159001][ T5930] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.168236][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.176282][ T5930] usb 3-1: Product: syz [ 302.180452][ T5930] usb 3-1: Manufacturer: syz [ 302.185088][ T5930] usb 3-1: SerialNumber: syz [ 302.221150][ T1623] usb usb1-port1: unable to enumerate USB device [ 302.343412][ T8593] PKCS8: Unsupported PKCS#8 version [ 302.400978][ T5930] usb 3-1: invalid UAC_HEADER (v1) [ 302.459555][ T5930] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 302.474408][ T5930] usb 3-1: USB disconnect, device number 19 [ 302.519688][ T8265] udevd[8265]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.667191][ T30] audit: type=1400 audit(1755215309.659:2024): avc: denied { read } for pid=8598 comm="syz.1.577" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 302.713916][ T30] audit: type=1400 audit(1755215309.699:2025): avc: denied { open } for pid=8598 comm="syz.1.577" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 302.950151][ T5930] usb 4-1: USB disconnect, device number 23 [ 303.041427][ T30] audit: type=1326 audit(1755215310.009:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8603 comm="syz.5.578" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f136578ebe9 code=0x0 [ 303.395300][ T8610] netlink: 3 bytes leftover after parsing attributes in process `syz.2.579'. [ 303.462033][ T8613] SELinux: security_context_str_to_sid (l©Rl^º) failed with errno=-22 [ 303.479964][ T30] audit: type=1400 audit(1755215310.469:2027): avc: denied { append } for pid=8614 comm="syz.0.581" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 303.489325][ T8613] netlink: 36 bytes leftover after parsing attributes in process `syz.2.579'. [ 303.566694][ T8602] lo speed is unknown, defaulting to 1000 [ 304.286671][ T8628] netlink: 12 bytes leftover after parsing attributes in process `syz.5.584'. [ 304.975217][ T8625] : entered promiscuous mode [ 307.253184][ T8656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.589'. [ 307.320802][ T1623] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 308.237334][ T8656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.589'. [ 308.290177][ T30] audit: type=1400 audit(1755215315.279:2028): avc: denied { node_bind } for pid=8669 comm="syz.0.594" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 308.371494][ T1623] usb 6-1: Using ep0 maxpacket: 16 [ 308.380182][ T1623] usb 6-1: config 0 has an invalid interface number: 17 but max is 0 [ 308.388430][ T1623] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.536184][ T1623] usb 6-1: config 0 has no interface number 0 [ 308.577639][ T1623] usb 6-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 308.720986][ T1623] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.749468][ T1623] usb 6-1: Product: syz [ 309.183170][ T1623] usb 6-1: Manufacturer: syz [ 309.187813][ T1623] usb 6-1: SerialNumber: syz [ 309.214137][ T1623] usb 6-1: config 0 descriptor?? [ 309.250147][ T8681] can0: slcan on ptm1. [ 309.628805][ T1623] usb 6-1: Found UVC 0.00 device syz (0408:4034) [ 309.641947][ T8674] can0 (unregistered): slcan off ptm1. [ 309.660176][ T8684] syzkaller1: entered promiscuous mode [ 309.673086][ T1623] usb 6-1: No valid video chain found. [ 309.691222][ T8684] syzkaller1: entered allmulticast mode [ 309.786833][ T30] audit: type=1400 audit(1755215316.779:2029): avc: denied { setopt } for pid=8650 comm="syz.5.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 309.806322][ C0] vkms_vblank_simulate: vblank timer overrun [ 310.455157][ T8652] netlink: 'syz.5.590': attribute type 3 has an invalid length. [ 310.488191][ T1623] usb 6-1: USB disconnect, device number 10 [ 310.866693][ T8701] overlayfs: failed lookup in lower (newroot/118, name='file1', err=-40): overlapping layers [ 311.397231][ T8711] random: crng reseeded on system resumption [ 311.714635][ T8721] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 311.726446][ T8721] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 311.752666][ T6231] Bluetooth: (null): Invalid header checksum [ 311.846045][ T1213] Bluetooth: (null): Invalid header checksum [ 312.035029][ T8724] ptrace attach of "./syz-executor exec"[7360] was attempted by "./syz-executor exec"[8724] [ 312.071787][ T1213] Bluetooth: (null): Invalid header checksum [ 312.114945][ T1213] Bluetooth: (null): Invalid header checksum [ 312.286244][ T2978] Bluetooth: (null): Invalid header checksum [ 312.410639][ T2978] Bluetooth: (null): Invalid header checksum [ 312.644971][ T30] audit: type=1400 audit(1755215319.579:2030): avc: denied { create } for pid=8700 comm="syz.3.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 312.900987][ T8731] random: crng reseeded on system resumption [ 313.112021][ T8741] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[8741] [ 314.475439][ T30] audit: type=1400 audit(1755215321.459:2031): avc: denied { name_connect } for pid=8752 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 315.257736][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 315.319306][ T8768] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 315.451635][ T8771] overlayfs: failed lookup in lower (newroot/50, name='file1', err=-40): overlapping layers [ 315.651044][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 315.705765][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 315.717020][ T1623] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 315.759977][ T10] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 315.789029][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.830114][ T10] usb 2-1: config 0 descriptor?? [ 315.846895][ T8778] netlink: 60 bytes leftover after parsing attributes in process `syz.2.613'. [ 315.910451][ T1623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.928969][ T1623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.942967][ T1623] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 315.952529][ T1623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.993042][ T1623] usb 1-1: config 0 descriptor?? [ 316.300748][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 316.305256][ T10] uclogic 0003:5543:0781.000A: item fetching failed at offset 4/5 [ 316.321592][ T30] audit: type=1400 audit(1755215323.229:2032): avc: denied { watch } for pid=8781 comm="syz.3.615" path="/127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 316.338141][ T10] uclogic 0003:5543:0781.000A: parse failed [ 316.366041][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.511261][ T8759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.537632][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 316.558102][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.559495][ T10] uclogic 0003:5543:0781.000A: probe with driver uclogic failed with error -22 [ 316.575616][ T8759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.583413][ T8767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.593812][ T8767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.732678][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.739017][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.766673][ T30] audit: type=1400 audit(1755215323.229:2033): avc: denied { watch_sb watch_reads } for pid=8781 comm="syz.3.615" path="/127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 316.780832][ T10] usb 2-1: USB disconnect, device number 44 [ 316.811989][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.812626][ T24] usb 3-1: Product: syz [ 316.828943][ T24] usb 3-1: Manufacturer: syz [ 316.833752][ T24] usb 3-1: SerialNumber: syz [ 317.275141][ T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 317.337506][ T43] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 317.880876][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 318.234092][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 318.342687][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.354520][ T1623] usbhid 1-1:0.0: can't add hid device: -71 [ 318.400753][ T1623] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 318.532621][ T1623] usb 1-1: USB disconnect, device number 29 [ 318.662146][ T10] usb 2-1: config 0 descriptor?? [ 318.747258][ T43] usb 3-1: Service connection timeout for: 256 [ 318.752019][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 318.753634][ T43] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 318.811335][ T5845] usb 3-1: USB disconnect, device number 20 [ 318.814736][ T43] ath9k_htc: Failed to initialize the device [ 318.867453][ T5863] Bluetooth: hci5: command 0x0406 tx timeout [ 318.930056][ T5845] usb 3-1: ath9k_htc: USB layer deinitialized [ 321.067143][ T10] usb 2-1: USB disconnect, device number 45 [ 324.229564][ T30] audit: type=1400 audit(1755215331.219:2034): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 324.288240][ T30] audit: type=1400 audit(1755215331.249:2035): avc: denied { getopt } for pid=8841 comm="syz.5.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 324.615604][ T8853] netlink: 'syz.1.632': attribute type 5 has an invalid length. [ 324.651380][ T8863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8863 comm=syz.1.632 [ 324.708822][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 325.309893][ T8859] binder: 8855:8859 ioctl c0306201 0 returned -14 [ 325.391942][ T43] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 325.600772][ T30] audit: type=1400 audit(1755215332.589:2036): avc: denied { write } for pid=8855 comm="syz.2.630" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 325.601627][ T43] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 325.623896][ C0] vkms_vblank_simulate: vblank timer overrun [ 325.841269][ T43] usb 1-1: config 0 has no interface number 0 [ 325.971296][ T43] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 325.988541][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.009737][ T43] usb 1-1: config 0 descriptor?? [ 326.046049][ T43] usb 1-1: selecting invalid altsetting 1 [ 326.060702][ T5845] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 326.075302][ T43] dvb_ttusb_budget: ttusb_init_controller: error [ 326.088115][ T43] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 326.253997][ T5845] usb 2-1: device descriptor read/64, error -71 [ 326.490593][ T5845] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 326.569754][ T43] DVB: Unable to find symbol cx22700_attach() [ 327.190683][ T5845] usb 2-1: device descriptor read/64, error -71 [ 327.314621][ T5845] usb usb2-port1: attempt power cycle [ 327.543648][ T43] DVB: Unable to find symbol tda10046_attach() [ 327.579103][ T43] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 327.640272][ T43] usb 1-1: USB disconnect, device number 30 [ 327.761925][ T5845] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 327.791449][ T5845] usb 2-1: device descriptor read/8, error -71 [ 327.932615][ T8896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.645'. [ 327.963493][ T5853] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 328.041517][ T5845] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 328.091532][ T5845] usb 2-1: device descriptor read/8, error -71 [ 328.132083][ T5853] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 328.147438][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.201171][ T5845] usb usb2-port1: unable to enumerate USB device [ 328.215540][ T5853] usb 3-1: config 0 descriptor?? [ 328.440583][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 328.714135][ T24] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 328.766696][ T8903] autofs: Unknown parameter 'tunl0' [ 328.773496][ T30] audit: type=1400 audit(1755215335.769:2037): avc: denied { read } for pid=8902 comm="syz.0.648" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 328.773882][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.833296][ T30] audit: type=1400 audit(1755215335.809:2038): avc: denied { ioctl } for pid=8902 comm="syz.0.648" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 328.858283][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.895087][ T24] usb 4-1: config 0 descriptor?? [ 328.896554][ T5853] ath6kl: Failed to read usb control message: -71 [ 328.938790][ T5853] ath6kl: Unable to read the bmi data from the device: -71 [ 328.949445][ T5853] ath6kl: unable to read target info byte count: -71 [ 328.977596][ T5853] ath6kl: Failed to init ath6kl core: -71 [ 328.990944][ T30] audit: type=1400 audit(1755215335.989:2039): avc: denied { read write } for pid=8908 comm="syz.1.649" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 329.017814][ T5853] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 329.044534][ T5853] usb 3-1: USB disconnect, device number 21 [ 329.056115][ T30] audit: type=1400 audit(1755215336.029:2040): avc: denied { open } for pid=8908 comm="syz.1.649" path="/123/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 329.169264][ T5861] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 329.265222][ T8914] netlink: 6 bytes leftover after parsing attributes in process `syz.3.647'. [ 329.279971][ T8914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.674651][ T24] usb 4-1: Cannot read MAC address [ 329.680057][ T24] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 329.693472][ T8919] 9pnet_fd: Insufficient options for proto=fd [ 329.998860][ T24] usb 4-1: USB disconnect, device number 24 [ 331.235902][ T8933] CIFS: iocharset name too long [ 331.394527][ T8935] usb usb8: usbfs: process 8935 (syz.0.657) did not claim interface 0 before use [ 331.574256][ T5861] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 331.700682][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 332.000815][ T5853] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 332.138523][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 332.171402][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.182491][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.209596][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 332.216392][ T5853] usb 1-1: Using ep0 maxpacket: 32 [ 332.221965][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 332.231987][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.242116][ T5853] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 332.257335][ T10] usb 4-1: config 0 descriptor?? [ 332.273048][ T5853] usb 1-1: config 0 has no interface number 0 [ 332.289439][ T5853] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.320616][ T5853] usb 1-1: config 0 interface 85 has no altsetting 0 [ 332.342720][ T5853] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 332.420363][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.469784][ T5853] usb 1-1: Product: syz [ 332.479205][ T5853] usb 1-1: Manufacturer: syz [ 332.495005][ T30] audit: type=1400 audit(1755215339.489:2041): avc: denied { setattr } for pid=8938 comm="syz.3.659" name="/" dev="9p" ino=4412305357440913309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 332.530164][ T5853] usb 1-1: SerialNumber: syz [ 332.577082][ T5853] usb 1-1: config 0 descriptor?? [ 333.105065][ T5861] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 333.112709][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 333.129409][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 333.204496][ T8963] unsupported nla_type 52263 [ 333.238741][ T10] usb 4-1: USB disconnect, device number 25 [ 333.289800][ T5853] appletouch 1-1:0.85: Geyser mode initialized. [ 333.327752][ T5853] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input14 [ 333.513155][ T8967] input: syz1 as /devices/virtual/input/input15 [ 333.656910][ T8976] Invalid logical block size (4) [ 335.287744][ T10] usb 1-1: USB disconnect, device number 31 [ 335.414440][ T10] appletouch 1-1:0.85: input: appletouch disconnected [ 336.348414][ T30] audit: type=1400 audit(1755215343.309:2042): avc: denied { getopt } for pid=8982 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 336.634131][ T30] audit: type=1400 audit(1755215343.629:2043): avc: denied { read } for pid=9000 comm="syz.2.676" name="cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:bin_t:s0" [ 336.665150][ T9002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.676'. [ 336.726167][ T30] audit: type=1400 audit(1755215343.629:2044): avc: denied { open } for pid=9000 comm="syz.2.676" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:bin_t:s0" [ 336.764359][ T9007] FAULT_INJECTION: forcing a failure. [ 336.764359][ T9007] name failslab, interval 1, probability 0, space 0, times 0 [ 336.778383][ T9007] CPU: 0 UID: 0 PID: 9007 Comm: syz.1.678 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 336.778413][ T9007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.778424][ T9007] Call Trace: [ 336.778431][ T9007] [ 336.778438][ T9007] dump_stack_lvl+0x16c/0x1f0 [ 336.778465][ T9007] should_fail_ex+0x512/0x640 [ 336.778484][ T9007] ? fs_reclaim_acquire+0xae/0x150 [ 336.778511][ T9007] ? tomoyo_encode2+0x100/0x3e0 [ 336.778536][ T9007] should_failslab+0xc2/0x120 [ 336.778563][ T9007] __kmalloc_noprof+0xd2/0x510 [ 336.778582][ T9007] ? d_absolute_path+0x136/0x1a0 [ 336.778612][ T9007] tomoyo_encode2+0x100/0x3e0 [ 336.778641][ T9007] tomoyo_encode+0x29/0x50 [ 336.778664][ T9007] tomoyo_realpath_from_path+0x18f/0x6e0 [ 336.778696][ T9007] tomoyo_path_number_perm+0x245/0x580 [ 336.778716][ T9007] ? tomoyo_path_number_perm+0x237/0x580 [ 336.778740][ T9007] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 336.778763][ T9007] ? find_held_lock+0x2b/0x80 [ 336.778810][ T9007] ? find_held_lock+0x2b/0x80 [ 336.778831][ T9007] ? hook_file_ioctl_common+0x145/0x410 [ 336.778853][ T9007] ? __fget_files+0x20e/0x3c0 [ 336.778878][ T9007] security_file_ioctl+0x9b/0x240 [ 336.778904][ T9007] __x64_sys_ioctl+0xb7/0x210 [ 336.778933][ T9007] do_syscall_64+0xcd/0x4c0 [ 336.778955][ T9007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.778973][ T9007] RIP: 0033:0x7f690278ebe9 [ 336.778988][ T9007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.779004][ T9007] RSP: 002b:00007f69036a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.779022][ T9007] RAX: ffffffffffffffda RBX: 00007f69029b5fa0 RCX: 00007f690278ebe9 [ 336.779034][ T9007] RDX: 0000000000000000 RSI: 000000000000560a RDI: 0000000000000003 [ 336.779044][ T9007] RBP: 00007f69036a6090 R08: 0000000000000000 R09: 0000000000000000 [ 336.779055][ T9007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.779065][ T9007] R13: 00007f69029b6038 R14: 00007f69029b5fa0 R15: 00007ffe6646d638 [ 336.779090][ T9007] [ 336.779108][ T9007] ERROR: Out of memory at tomoyo_realpath_from_path. [ 338.838544][ T30] audit: type=1400 audit(1755215343.689:2045): avc: denied { ioctl } for pid=9000 comm="syz.2.676" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=294 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:bin_t:s0" [ 339.205312][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 339.442724][ T30] audit: type=1326 audit(1755215346.429:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9011 comm="syz.5.682" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f136578ebe9 code=0x0 [ 339.781218][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 339.788153][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 339.809801][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 339.823695][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.832503][ T10] usb 4-1: Product: syz [ 339.836674][ T10] usb 4-1: Manufacturer: syz [ 339.846624][ T10] usb 4-1: SerialNumber: syz [ 339.853132][ T10] usb 4-1: config 0 descriptor?? [ 339.862099][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 339.875111][ T10] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 339.890705][ T5930] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 340.014615][ T30] audit: type=1400 audit(1755215347.009:2047): avc: denied { create } for pid=9021 comm="syz.2.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 340.156862][ T5930] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 340.166337][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.174935][ T5930] usb 2-1: Product: syz [ 340.179186][ T5930] usb 2-1: Manufacturer: syz [ 340.189419][ T5930] usb 2-1: SerialNumber: syz [ 340.209977][ T5930] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 340.321196][ T30] audit: type=1400 audit(1755215347.309:2048): avc: denied { write } for pid=9021 comm="syz.2.684" path="socket:[24781]" dev="sockfs" ino=24781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 340.392700][ T5845] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 340.557256][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 341.529632][ T5845] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 342.003802][ T5845] ath9k_htc: Failed to initialize the device [ 342.018992][ T9009] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 342.116419][ T5845] usb 2-1: ath9k_htc: USB layer deinitialized [ 342.792123][ T10] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 342.803929][ T10] em28xx 4-1:0.0: board has no eeprom [ 342.821761][ T30] audit: type=1400 audit(1755215349.819:2049): avc: denied { map } for pid=9039 comm="syz.0.686" path="socket:[24808]" dev="sockfs" ino=24808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 343.350318][ T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 343.438653][ T10] em28xx 4-1:0.0: dvb set to bulk mode. [ 343.475752][ T5930] em28xx 4-1:0.0: Binding DVB extension [ 343.520654][ T10] usb 4-1: USB disconnect, device number 26 [ 343.548772][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 343.554968][ T5845] usb 2-1: USB disconnect, device number 50 [ 343.611581][ T9052] FAULT_INJECTION: forcing a failure. [ 343.611581][ T9052] name failslab, interval 1, probability 0, space 0, times 0 [ 343.625603][ T5930] em28xx 4-1:0.0: Registering input extension [ 343.732592][ T9052] CPU: 1 UID: 0 PID: 9052 Comm: syz.0.688 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 343.732620][ T9052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.732631][ T9052] Call Trace: [ 343.732637][ T9052] [ 343.732644][ T9052] dump_stack_lvl+0x16c/0x1f0 [ 343.732668][ T9052] should_fail_ex+0x512/0x640 [ 343.732689][ T9052] ? __kmalloc_noprof+0xbf/0x510 [ 343.732710][ T9052] ? nft_trans_alloc_gfp+0x26/0x2e0 [ 343.732727][ T9052] should_failslab+0xc2/0x120 [ 343.732749][ T9052] __kmalloc_noprof+0xd2/0x510 [ 343.732765][ T9052] ? lockdep_init_map_type+0x5c/0x280 [ 343.732784][ T9052] ? rhashtable_init_noprof+0x55e/0x7e0 [ 343.732809][ T9052] nft_trans_alloc_gfp+0x26/0x2e0 [ 343.732827][ T9052] nf_tables_newtable+0x1387/0x1b40 [ 343.732859][ T9052] ? __pfx_nf_tables_newtable+0x10/0x10 [ 343.732890][ T9052] ? __nla_parse+0x40/0x60 [ 343.732917][ T9052] nfnetlink_rcv_batch+0x18ea/0x2330 [ 343.732956][ T9052] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 343.732998][ T9052] ? avc_has_perm_noaudit+0x149/0x3b0 [ 343.733044][ T9052] ? __nla_parse+0x40/0x60 [ 343.733071][ T9052] nfnetlink_rcv+0x3c1/0x430 [ 343.733095][ T9052] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 343.733127][ T9052] netlink_unicast+0x5a7/0x870 [ 343.733151][ T9052] ? __pfx_netlink_unicast+0x10/0x10 [ 343.733171][ T9052] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 343.733198][ T9052] netlink_sendmsg+0x8d1/0xdd0 [ 343.733223][ T9052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.733252][ T9052] ____sys_sendmsg+0xa98/0xc70 [ 343.733277][ T9052] ? copy_msghdr_from_user+0x10a/0x160 [ 343.733295][ T9052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.733330][ T9052] ___sys_sendmsg+0x134/0x1d0 [ 343.733357][ T9052] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.733398][ T9052] ? __mutex_unlock_slowpath+0x100/0x800 [ 343.733427][ T9052] __sys_sendmsg+0x16d/0x220 [ 343.733445][ T9052] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.733481][ T9052] do_syscall_64+0xcd/0x4c0 [ 343.733502][ T9052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.733521][ T9052] RIP: 0033:0x7f027c78ebe9 [ 343.733535][ T9052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.733552][ T9052] RSP: 002b:00007f027d630038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.733571][ T9052] RAX: ffffffffffffffda RBX: 00007f027c9b5fa0 RCX: 00007f027c78ebe9 [ 343.733583][ T9052] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 343.733593][ T9052] RBP: 00007f027d630090 R08: 0000000000000000 R09: 0000000000000000 [ 343.733603][ T9052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.733613][ T9052] R13: 00007f027c9b6038 R14: 00007f027c9b5fa0 R15: 00007ffcf6202fe8 [ 343.733638][ T9052] [ 343.779036][ T10] em28xx 4-1:0.0: Closing input extension [ 344.144606][ T30] audit: type=1326 audit(1755215351.129:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.2.689" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff8c18ebe9 code=0x0 [ 344.380543][ T10] em28xx 4-1:0.0: Freeing device [ 344.392902][ T9061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.696658][ T30] audit: type=1400 audit(1755215351.689:2051): avc: denied { ioctl } for pid=9062 comm="syz.5.692" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 344.721183][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.970689][ T9076] lo speed is unknown, defaulting to 1000 [ 345.246036][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.694'. [ 345.586928][ T9086] random: crng reseeded on system resumption [ 345.830640][ T9093] ptrace attach of "./syz-executor exec"[7360] was attempted by "./syz-executor exec"[9093] [ 345.906404][ T30] audit: type=1400 audit(1755215352.879:2052): avc: denied { read } for pid=9092 comm="syz.3.699" dev="sockfs" ino=24981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 347.871906][ T9107] process 'syz.0.701' launched './file0' with NULL argv: empty string added [ 347.879586][ T30] audit: type=1400 audit(1755215354.869:2053): avc: denied { execute_no_trans } for pid=9097 comm="syz.0.701" path="/158/file0" dev="tmpfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 347.906193][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.937123][ T9107] netlink: 44 bytes leftover after parsing attributes in process `syz.0.701'. [ 347.937146][ T9107] netlink: 59 bytes leftover after parsing attributes in process `syz.0.701'. [ 348.115072][ T30] audit: type=1400 audit(1755215355.059:2054): avc: denied { getopt } for pid=9109 comm="syz.5.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 348.145249][ T30] audit: type=1400 audit(1755215355.079:2055): avc: denied { connect } for pid=9109 comm="syz.5.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 348.185937][ T30] audit: type=1400 audit(1755215355.139:2056): avc: denied { ioctl } for pid=9113 comm="syz.1.704" path="socket:[25037]" dev="sockfs" ino=25037 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 348.210575][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.233330][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'. [ 348.393000][ T9116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.481703][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880565b8400: rx timeout, send abort [ 348.507948][ T30] audit: type=1400 audit(1755215355.499:2057): avc: denied { read } for pid=5201 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 348.832780][ T30] audit: type=1400 audit(1755215355.499:2058): avc: denied { search } for pid=5201 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.855628][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.865586][ T9119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.936449][ T30] audit: type=1400 audit(1755215355.499:2059): avc: denied { search } for pid=5201 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.958021][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.265220][ T9136] random: crng reseeded on system resumption [ 349.365430][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 349.365443][ T30] audit: type=1400 audit(1755215356.359:2064): avc: denied { connect } for pid=9132 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 349.527521][ T9143] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[9143] [ 350.417434][ T9128] FAULT_INJECTION: forcing a failure. [ 350.417434][ T9128] name failslab, interval 1, probability 0, space 0, times 0 [ 350.488299][ T9128] CPU: 1 UID: 0 PID: 9128 Comm: syz.5.709 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 350.488328][ T9128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 350.488338][ T9128] Call Trace: [ 350.488344][ T9128] [ 350.488351][ T9128] dump_stack_lvl+0x16c/0x1f0 [ 350.488374][ T9128] should_fail_ex+0x512/0x640 [ 350.488391][ T9128] ? fs_reclaim_acquire+0xae/0x150 [ 350.488417][ T9128] ? tomoyo_encode2+0x100/0x3e0 [ 350.488446][ T9128] should_failslab+0xc2/0x120 [ 350.488465][ T9128] __kmalloc_noprof+0xd2/0x510 [ 350.488482][ T9128] ? d_absolute_path+0x136/0x1a0 [ 350.488511][ T9128] tomoyo_encode2+0x100/0x3e0 [ 350.488536][ T9128] tomoyo_encode+0x29/0x50 [ 350.488558][ T9128] tomoyo_realpath_from_path+0x18f/0x6e0 [ 350.488590][ T9128] tomoyo_path_number_perm+0x245/0x580 [ 350.488610][ T9128] ? tomoyo_path_number_perm+0x237/0x580 [ 350.488635][ T9128] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 350.488659][ T9128] ? __lock_acquire+0xb97/0x1ce0 [ 350.488709][ T9128] ? _raw_spin_unlock+0x28/0x50 [ 350.488736][ T9128] ? current_check_access_path+0x33c/0x460 [ 350.488757][ T9128] ? __pfx_current_check_access_path+0x10/0x10 [ 350.488777][ T9128] ? simple_lookup+0x105/0x1d0 [ 350.488797][ T9128] ? lookup_one_qstr_excl+0xb3/0x250 [ 350.488826][ T9128] tomoyo_path_mkdir+0x9b/0xe0 [ 350.488843][ T9128] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 350.488869][ T9128] security_path_mkdir+0x154/0x2f0 [ 350.488896][ T9128] do_mkdirat+0x175/0x3e0 [ 350.488918][ T9128] ? __pfx_do_mkdirat+0x10/0x10 [ 350.488938][ T9128] ? getname_flags.part.0+0x1c5/0x550 [ 350.488962][ T9128] ? syscall_user_dispatch+0x78/0x140 [ 350.488988][ T9128] __x64_sys_mkdirat+0x83/0xb0 [ 350.489008][ T9128] do_syscall_64+0xcd/0x4c0 [ 350.489029][ T9128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.489046][ T9128] RIP: 0033:0x7f136578ebe9 [ 350.489062][ T9128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.489079][ T9128] RSP: 002b:00007f1366583038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 350.489097][ T9128] RAX: ffffffffffffffda RBX: 00007f13659b5fa0 RCX: 00007f136578ebe9 [ 350.489109][ T9128] RDX: 0000000000000040 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 350.489121][ T9128] RBP: 00007f1366583090 R08: 0000000000000000 R09: 0000000000000000 [ 350.489133][ T9128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.489144][ T9128] R13: 00007f13659b6038 R14: 00007f13659b5fa0 R15: 00007fffee14dcb8 [ 350.489175][ T9128] [ 350.489262][ T9128] ERROR: Out of memory at tomoyo_realpath_from_path. [ 455.930460][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 455.937437][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5219/1:b..l P8265/1:b..l P9150/1:b..l [ 455.948117][ C0] rcu: (detected by 0, t=10502 jiffies, g=28605, q=678 ncpus=2) [ 455.955821][ C0] task:syz.5.709 state:R running task stack:26440 pid:9150 tgid:9127 ppid:7360 task_flags:0x40044c flags:0x00004002 [ 455.969795][ C0] Call Trace: [ 455.973072][ C0] [ 455.975992][ C0] __schedule+0x1190/0x5de0 [ 455.980517][ C0] ? __pfx___schedule+0x10/0x10 [ 455.985372][ C0] ? mark_held_locks+0x49/0x80 [ 455.990135][ C0] preempt_schedule_irq+0x51/0x90 [ 455.995146][ C0] irqentry_exit+0x36/0x90 [ 455.999549][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 456.005517][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 456.010709][ C0] Code: 77 3e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 62 6c 13 0f 0f 82 74 02 00 00 8b 35 2a 9e 13 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 b9 76 3e 12 0f 85 c7 02 00 00 48 83 c4 [ 456.030305][ C0] RSP: 0018:ffffc9000466f4f0 EFLAGS: 00000206 [ 456.036383][ C0] RAX: 0000000000000046 RBX: ffffffff8e5c11e0 RCX: 00000000d3addaf6 [ 456.044340][ C0] RDX: 0000000000000000 RSI: ffffffff8de29d40 RDI: ffffffff8c162580 [ 456.052319][ C0] RBP: 0000000000000002 R08: 328b0d0cf36cb5da R09: 0000000000000000 [ 456.060293][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 456.068654][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.076650][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 456.081848][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 456.088010][ C0] unwind_next_frame+0xd1/0x20a0 [ 456.092963][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 456.098082][ C0] ? exit_to_user_mode_loop+0x84/0x110 [ 456.103532][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 456.109683][ C0] arch_stack_walk+0x94/0x100 [ 456.114355][ C0] ? exit_to_user_mode_loop+0x84/0x110 [ 456.119815][ C0] stack_trace_save+0x8e/0xc0 [ 456.124486][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 456.129858][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 456.134796][ C0] kasan_save_stack+0x33/0x60 [ 456.139460][ C0] ? kasan_save_stack+0x33/0x60 [ 456.144298][ C0] ? kasan_save_track+0x14/0x30 [ 456.149156][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 456.153932][ C0] ? kmem_cache_free+0x142/0x4d0 [ 456.158872][ C0] ? exit_mmap+0x511/0xb90 [ 456.163277][ C0] ? __mmput+0x12a/0x410 [ 456.167536][ C0] ? mmput+0x62/0x70 [ 456.171456][ C0] ? do_exit+0x7c7/0x2bf0 [ 456.175795][ C0] ? do_group_exit+0xd3/0x2a0 [ 456.180503][ C0] ? get_signal+0x2673/0x26d0 [ 456.185170][ C0] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 456.190897][ C0] ? exit_to_user_mode_loop+0x84/0x110 [ 456.196412][ C0] kasan_save_track+0x14/0x30 [ 456.201088][ C0] __kasan_kmalloc+0xaa/0xb0 [ 456.205669][ C0] kmem_cache_free+0x142/0x4d0 [ 456.210684][ C0] ? exit_mmap+0x511/0xb90 [ 456.215100][ C0] exit_mmap+0x511/0xb90 [ 456.219341][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 456.224104][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 456.229055][ C0] __mmput+0x12a/0x410 [ 456.233115][ C0] mmput+0x62/0x70 [ 456.236846][ C0] do_exit+0x7c7/0x2bf0 [ 456.241019][ C0] ? __pfx_do_exit+0x10/0x10 [ 456.245607][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 456.250621][ C0] ? find_held_lock+0x2b/0x80 [ 456.255290][ C0] do_group_exit+0xd3/0x2a0 [ 456.259787][ C0] get_signal+0x2673/0x26d0 [ 456.264293][ C0] ? __pfx_get_signal+0x10/0x10 [ 456.269134][ C0] ? do_futex+0x122/0x350 [ 456.273459][ C0] ? __pfx_do_futex+0x10/0x10 [ 456.278145][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 456.283705][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 456.289872][ C0] ? xfd_validate_state+0x61/0x180 [ 456.294990][ C0] exit_to_user_mode_loop+0x84/0x110 [ 456.300278][ C0] do_syscall_64+0x3f6/0x4c0 [ 456.305063][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.310959][ C0] RIP: 0033:0x7f136578ebe9 [ 456.315362][ C0] RSP: 002b:00007f13665620e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 456.323853][ C0] RAX: fffffffffffffe00 RBX: 00007f13659b6098 RCX: 00007f136578ebe9 [ 456.331811][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f13659b6098 [ 456.339768][ C0] RBP: 00007f13659b6090 R08: 0000000000000000 R09: 0000000000000000 [ 456.347726][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.355682][ C0] R13: 00007f13659b6128 R14: 00007fffee14dbd0 R15: 00007fffee14dcb8 [ 456.363688][ C0] [ 456.366712][ C0] task:udevd state:R running task stack:26376 pid:8265 tgid:8265 ppid:5219 task_flags:0x400140 flags:0x00004002 [ 456.380191][ C0] Call Trace: [ 456.383460][ C0] [ 456.386381][ C0] __schedule+0x1190/0x5de0 [ 456.390889][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 456.395828][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 456.400765][ C0] ? __pfx___schedule+0x10/0x10 [ 456.405635][ C0] ? mark_held_locks+0x49/0x80 [ 456.410400][ C0] preempt_schedule_irq+0x51/0x90 [ 456.415414][ C0] irqentry_exit+0x36/0x90 [ 456.419820][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 456.425793][ C0] RIP: 0010:lock_release+0x183/0x2f0 [ 456.431077][ C0] Code: 0f c1 05 38 be 3e 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 4d 7c 3e 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 456.450673][ C0] RSP: 0018:ffffc90003617320 EFLAGS: 00000206 [ 456.456749][ C0] RAX: 56784bbf56212600 RBX: ffffffff8e5c11e0 RCX: ffffc9000361732c [ 456.464715][ C0] RDX: 0000000000000001 RSI: ffffffff8de29d40 RDI: ffffffff8c162580 [ 456.472680][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 456.480640][ C0] R10: 0000000000000001 R11: 00000000000138f4 R12: ffffffff816ae8a4 [ 456.488598][ C0] R13: 0000000000000202 R14: ffff888030ba2440 R15: 0000000000000002 [ 456.496565][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 456.501771][ C0] unwind_next_frame+0x3f9/0x20a0 [ 456.506784][ C0] ? path_openat+0x1de4/0x2cb0 [ 456.511542][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 456.517692][ C0] arch_stack_walk+0x94/0x100 [ 456.522364][ C0] ? do_filp_open+0x20b/0x470 [ 456.527041][ C0] stack_trace_save+0x8e/0xc0 [ 456.531710][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 456.537071][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 456.542007][ C0] kasan_save_stack+0x33/0x60 [ 456.546691][ C0] ? kasan_save_stack+0x33/0x60 [ 456.551528][ C0] ? kasan_save_track+0x14/0x30 [ 456.556378][ C0] ? kasan_save_free_info+0x3b/0x60 [ 456.561565][ C0] ? __kasan_slab_free+0x60/0x70 [ 456.566495][ C0] ? kfree+0x2b4/0x4d0 [ 456.570554][ C0] ? tomoyo_check_open_permission+0x19f/0x3c0 [ 456.576609][ C0] ? tomoyo_file_open+0x6b/0x90 [ 456.581446][ C0] ? security_file_open+0x84/0x1e0 [ 456.586549][ C0] ? do_dentry_open+0x596/0x1530 [ 456.591475][ C0] ? vfs_open+0x82/0x3f0 [ 456.595710][ C0] ? path_openat+0x1de4/0x2cb0 [ 456.600494][ C0] kasan_save_track+0x14/0x30 [ 456.605169][ C0] kasan_save_free_info+0x3b/0x60 [ 456.610183][ C0] __kasan_slab_free+0x60/0x70 [ 456.614933][ C0] kfree+0x2b4/0x4d0 [ 456.618818][ C0] ? tomoyo_check_open_permission+0x19f/0x3c0 [ 456.624881][ C0] tomoyo_check_open_permission+0x19f/0x3c0 [ 456.630768][ C0] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 456.637200][ C0] ? find_held_lock+0x2b/0x80 [ 456.641891][ C0] tomoyo_file_open+0x6b/0x90 [ 456.646574][ C0] security_file_open+0x84/0x1e0 [ 456.651510][ C0] do_dentry_open+0x596/0x1530 [ 456.656287][ C0] vfs_open+0x82/0x3f0 [ 456.660351][ C0] path_openat+0x1de4/0x2cb0 [ 456.664940][ C0] ? __pfx_path_openat+0x10/0x10 [ 456.669871][ C0] do_filp_open+0x20b/0x470 [ 456.674361][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 456.679392][ C0] ? alloc_fd+0x471/0x7d0 [ 456.683718][ C0] do_sys_openat2+0x11b/0x1d0 [ 456.688389][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 456.693596][ C0] __x64_sys_openat+0x174/0x210 [ 456.698438][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 456.703815][ C0] do_syscall_64+0xcd/0x4c0 [ 456.708310][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.714191][ C0] RIP: 0033:0x7f39d0ca7407 [ 456.718594][ C0] RSP: 002b:00007ffee90f2790 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 456.726993][ C0] RAX: ffffffffffffffda RBX: 00007f39d13d7880 RCX: 00007f39d0ca7407 [ 456.734952][ C0] RDX: 0000000000080241 RSI: 00007ffee90f2cf0 RDI: ffffffffffffff9c [ 456.742910][ C0] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 456.751213][ C0] R10: 00000000000001b6 R11: 0000000000000202 R12: 000055e94998edfc [ 456.759169][ C0] R13: 000055e94998edfc R14: 0000000000000001 R15: 000055e9499a9140 [ 456.767138][ C0] [ 456.770143][ C0] task:udevd state:R running task stack:24712 pid:5219 tgid:5219 ppid:1 task_flags:0x400140 flags:0x00004002 [ 456.783617][ C0] Call Trace: [ 456.786880][ C0] [ 456.789801][ C0] __schedule+0x1190/0x5de0 [ 456.794312][ C0] ? ep_autoremove_wake_function+0xe4/0x180 [ 456.800193][ C0] ? find_held_lock+0x2b/0x80 [ 456.804864][ C0] ? __pfx___schedule+0x10/0x10 [ 456.809706][ C0] ? do_raw_read_unlock+0x44/0xe0 [ 456.814726][ C0] ? __pfx_ep_poll_callback+0x10/0x10 [ 456.820096][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 456.825466][ C0] preempt_schedule_common+0x44/0xc0 [ 456.830752][ C0] preempt_schedule_thunk+0x16/0x30 [ 456.835949][ C0] _raw_spin_unlock_irqrestore+0x61/0x80 [ 456.841578][ C0] sock_def_readable+0x15b/0x600 [ 456.846514][ C0] netlink_unicast+0x75c/0x870 [ 456.851265][ C0] ? e1000_setup_link_ich8lan+0x341/0x420 [ 456.856975][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 456.862246][ C0] ? cap_capable+0xb3/0x250 [ 456.866749][ C0] netlink_sendmsg+0x8d1/0xdd0 [ 456.871511][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.876798][ C0] ____sys_sendmsg+0xa98/0xc70 [ 456.881556][ C0] ? copy_msghdr_from_user+0x10a/0x160 [ 456.886999][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.892289][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 456.897568][ C0] ___sys_sendmsg+0x134/0x1d0 [ 456.902230][ C0] ? rcu_is_watching+0x12/0xc0 [ 456.906985][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.912191][ C0] ? find_held_lock+0x2b/0x80 [ 456.916858][ C0] ? timespec64_add_safe+0x18c/0x210 [ 456.922137][ C0] __sys_sendmsg+0x16d/0x220 [ 456.926713][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 456.931824][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 456.937200][ C0] do_syscall_64+0xcd/0x4c0 [ 456.941698][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.947578][ C0] RIP: 0033:0x7f39d0ca7407 [ 456.951980][ C0] RSP: 002b:00007ffee90f3260 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 456.960380][ C0] RAX: ffffffffffffffda RBX: 00007f39d13d7880 RCX: 00007f39d0ca7407 [ 456.968340][ C0] RDX: 0000000000000000 RSI: 00007ffee90f32c0 RDI: 0000000000000004 [ 456.976297][ C0] RBP: 000055e967fda4e0 R08: 0000000000000000 R09: 0000000000000000 [ 456.984443][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000b3 [ 456.992412][ C0] R13: 000055e967d75d80 R14: 0000000000000000 R15: 0000000000000000 [ 457.000389][ C0] [ 457.003420][ C0] rcu: rcu_preempt kthread starved for 9803 jiffies! g28605 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 457.014517][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 457.024466][ C0] rcu: RCU grace-period kthread stack dump: [ 457.030334][ C0] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 457.043815][ C0] Call Trace: [ 457.047086][ C0] [ 457.050009][ C0] __schedule+0x1190/0x5de0 [ 457.054536][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 457.059479][ C0] ? __pfx___schedule+0x10/0x10 [ 457.064331][ C0] ? find_held_lock+0x2b/0x80 [ 457.068998][ C0] ? schedule+0x2d7/0x3a0 [ 457.073323][ C0] schedule+0xe7/0x3a0 [ 457.077399][ C0] schedule_timeout+0x123/0x290 [ 457.082265][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 457.087630][ C0] ? __pfx_process_timeout+0x10/0x10 [ 457.092909][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 457.098711][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 457.104191][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 457.108961][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 457.114235][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 457.119422][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 457.124371][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 457.129212][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 457.135033][ C0] rcu_gp_kthread+0x270/0x380 [ 457.139726][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 457.144927][ C0] ? rcu_is_watching+0x12/0xc0 [ 457.149693][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 457.154905][ C0] ? __kthread_parkme+0x19e/0x250 [ 457.159950][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 457.165143][ C0] kthread+0x3c5/0x780 [ 457.169209][ C0] ? __pfx_kthread+0x10/0x10 [ 457.173789][ C0] ? rcu_is_watching+0x12/0xc0 [ 457.178543][ C0] ? __pfx_kthread+0x10/0x10 [ 457.183122][ C0] ret_from_fork+0x5d7/0x6f0 [ 457.187701][ C0] ? __pfx_kthread+0x10/0x10 [ 457.192278][ C0] ret_from_fork_asm+0x1a/0x30 [ 457.197046][ C0] [ 457.200049][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 457.206371][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 457.217985][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.228024][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 457.233646][ C0] Code: 9c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 b2 16 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 457.253246][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 457.259314][ C0] RAX: 000000000149eecb RBX: 0000000000000000 RCX: ffffffff8b935c29 [ 457.267276][ C0] RDX: 0000000000000000 RSI: ffffffff8de4f235 RDI: ffffffff8c162580 [ 457.275321][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 457.283364][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 457.291323][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab3590 R15: 0000000000000000 [ 457.299283][ C0] FS: 0000000000000000(0000) GS:ffff8881246bc000(0000) knlGS:0000000000000000 [ 457.308202][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.314775][ C0] CR2: 00007f721563c633 CR3: 000000007521c000 CR4: 00000000003526f0 [ 457.322736][ C0] Call Trace: [ 457.326003][ C0] [ 457.328920][ C0] default_idle+0x13/0x20 [ 457.333243][ C0] default_idle_call+0x6d/0xb0 [ 457.337998][ C0] do_idle+0x391/0x510 [ 457.342066][ C0] ? __pfx_do_idle+0x10/0x10 [ 457.346655][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 457.351848][ C0] cpu_startup_entry+0x4f/0x60 [ 457.356607][ C0] rest_init+0x16b/0x2b0 [ 457.360838][ C0] ? acpi_subsystem_init+0x133/0x180 [ 457.366115][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 457.371656][ C0] start_kernel+0x3ee/0x4d0 [ 457.376154][ C0] x86_64_start_reservations+0x18/0x30 [ 457.381605][ C0] x86_64_start_kernel+0x130/0x190 [ 457.386722][ C0] common_startup_64+0x13e/0x148 [ 457.391658][ C0] [ 457.394983][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.900994][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.907317][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 457.916106][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.922419][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.328083][ T9166] FAULT_INJECTION: forcing a failure. [ 458.328083][ T9166] name failslab, interval 1, probability 0, space 0, times 0 SYZFAIL: failed to send rpc fd=3 want=168 sent=0 n=-1 (errno 32: Broken pipe) [ 458.685991][ T9166] CPU: 0 UID: 0 PID: 9166 Comm: syz.1.719 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 458.686020][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 458.686031][ T9166] Call Trace: [ 458.686037][ T9166] [ 458.686044][ T9166] dump_stack_lvl+0x16c/0x1f0 [ 458.686068][ T9166] should_fail_ex+0x512/0x640 [ 458.686087][ T9166] ? fs_reclaim_acquire+0xae/0x150 [ 458.686112][ T9166] ? tomoyo_encode2+0x100/0x3e0 [ 458.686137][ T9166] should_failslab+0xc2/0x120 [ 458.686157][ T9166] __kmalloc_noprof+0xd2/0x510 [ 458.686174][ T9166] ? d_absolute_path+0x136/0x1a0 [ 458.686203][ T9166] tomoyo_encode2+0x100/0x3e0 [ 458.686231][ T9166] tomoyo_encode+0x29/0x50 [ 458.686255][ T9166] tomoyo_realpath_from_path+0x18f/0x6e0 [ 458.686288][ T9166] tomoyo_path_number_perm+0x245/0x580 [ 458.686308][ T9166] ? tomoyo_path_number_perm+0x237/0x580 [ 458.686339][ T9166] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 458.686363][ T9166] ? find_held_lock+0x2b/0x80 [ 458.686408][ T9166] ? find_held_lock+0x2b/0x80 [ 458.686427][ T9166] ? hook_file_ioctl_common+0x145/0x410 [ 458.686451][ T9166] ? __fget_files+0x20e/0x3c0 [ 458.686473][ T9166] security_file_ioctl+0x9b/0x240 [ 458.686503][ T9166] __x64_sys_ioctl+0xb7/0x210 [ 458.686531][ T9166] do_syscall_64+0xcd/0x4c0 [ 458.686552][ T9166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.686569][ T9166] RIP: 0033:0x7f690278ebe9 [ 458.686583][ T9166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.686599][ T9166] RSP: 002b:00007f69036a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 458.686617][ T9166] RAX: ffffffffffffffda RBX: 00007f69029b5fa0 RCX: 00007f690278ebe9 [ 458.686629][ T9166] RDX: 0000200000000040 RSI: 0000000000001269 RDI: 0000000000000003 [ 458.686639][ T9166] RBP: 00007f69036a6090 R08: 0000000000000000 R09: 0000000000000000 [ 458.686651][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.686662][ T9166] R13: 00007f69029b6038 R14: 00007f69029b5fa0 R15: 00007ffe6646d638 [ 458.686687][ T9166] [ 458.686704][ T9166] ERROR: Out of memory at tomoyo_realpath_from_path. [ 458.725954][ T30] audit: type=1400 audit(1755215465.659:2065): avc: denied { write } for pid=5832 comm="syz-executor" path="pipe:[3782]" dev="pipefs" ino=3782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 459.868447][ T9157] syz_tun (unregistering): left allmulticast mode [ 460.435327][ T1213] bridge_slave_1: left allmulticast mode [ 460.444411][ T1213] bridge_slave_1: left promiscuous mode [ 460.450215][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.459303][ T1213] bridge_slave_0: left allmulticast mode [ 460.469262][ T1213] bridge_slave_0: left promiscuous mode [ 460.475066][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.727219][ T1213] : left promiscuous mode [ 460.794364][ T1213] tipc: Disabling bearer [ 460.807442][ T1213] tipc: Left network mode [ 460.963853][ T1213] hsr_slave_0: left promiscuous mode [ 460.969869][ T1213] hsr_slave_1: left promiscuous mode [ 460.979074][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.987972][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.296193][ T1213] team0 (unregistering): Port device team_slave_1 removed [ 461.329228][ T1213] team0 (unregistering): Port device team_slave_0 removed [ 462.116115][ T1213] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.206219][ T1213] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.314902][ T1213] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.362452][ T1213] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.569177][ T1213] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.647743][ T1213] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.757762][ T1213] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.823715][ T1213] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.038609][ T1213] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.127683][ T1213] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.219094][ T1213] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.276012][ T1213] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.462920][ T1213] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.558608][ T1213] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.640353][ T1213] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.712599][ T1213] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.888273][ T1213] bridge_slave_1: left allmulticast mode [ 463.894890][ T1213] bridge_slave_1: left promiscuous mode [ 463.901446][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.913275][ T1213] bridge_slave_0: left allmulticast mode [ 463.918956][ T1213] bridge_slave_0: left promiscuous mode [ 463.929516][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.945863][ T1213] bridge_slave_1: left allmulticast mode [ 463.952146][ T1213] bridge_slave_1: left promiscuous mode [ 463.957899][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.967746][ T1213] bridge_slave_0: left allmulticast mode [ 463.974334][ T1213] bridge_slave_0: left promiscuous mode [ 463.980060][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.991875][ T1213] bridge_slave_1: left allmulticast mode [ 463.998834][ T1213] bridge_slave_1: left promiscuous mode [ 464.006013][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.017063][ T1213] bridge_slave_0: left allmulticast mode [ 464.023965][ T1213] bridge_slave_0: left promiscuous mode [ 464.029683][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.607133][ T1213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.618893][ T1213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.628640][ T1213] bond0 (unregistering): Released all slaves [ 464.724351][ T1213] bond1 (unregistering): Released all slaves [ 464.988102][ T1213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.998038][ T1213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.007848][ T1213] bond0 (unregistering): Released all slaves [ 465.361818][ T1213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.372379][ T1213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.382021][ T1213] bond0 (unregistering): Released all slaves [ 465.393890][ T1213] bond1 (unregistering): Released all slaves [ 465.404653][ T1213] bond2 (unregistering): Released all slaves [ 465.864315][ T1213] batman_adv: batadv0: Interface deactivated: wlan0 [ 465.887742][ T1213] batman_adv: batadv0: Removing interface: wlan0