last executing test programs: 11.715039812s ago: executing program 2 (id=1077): openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc1, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x20080) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000000c0)) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x7f, 0x2002}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, 0x0, 0xd0) 9.394514453s ago: executing program 0 (id=1082): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 9.135404621s ago: executing program 3 (id=1085): mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 8.374241187s ago: executing program 2 (id=1086): mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) (fail_nth: 1) 8.236417354s ago: executing program 0 (id=1089): socket(0x2, 0x80805, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sync_file_range(r0, 0xfffffffffffffffe, 0xe4, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xd, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ptrace(0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{&(0x7f0000000080)=@ieee802154, 0x80, 0x0}, 0x3ff}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000003700)=""/157, 0x9d}], 0x1}, 0x5}], 0x2, 0x20, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000140)={0x18, 0x0, {0x2, @local, 'tunl0\x00'}}, 0x1e) sendmmsg(r6, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x101}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x1000, &(0x7f00000007c0)=""/4096, 0x40f00, 0x42, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, &(0x7f00000002c0)=[r1, r1], 0x0, 0x10, 0x2}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x16, &(0x7f0000000c00)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23}, 0x94) 8.211942115s ago: executing program 3 (id=1090): socket$kcm(0x15, 0x5, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x24000840) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCFLSH(r2, 0x80044704, 0x40000020001100) bind$can_raw(r1, 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x200) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x5452, &(0x7f0000000440)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mprotect(&(0x7f000021f000/0x4000)=nil, 0x4000, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000008, 0x4ca31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) fcntl$getflags(0xffffffffffffffff, 0x1) 7.29653045s ago: executing program 2 (id=1091): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 6.99192753s ago: executing program 0 (id=1093): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="d65bc28306bfb4f706302b829ab05e7e3e6f0ea3d966da7e1add99f6d3676cc374ff5818d0baedfa73dd46961bf34a667757165b0bc30400000095c54597d6a6b9f48a74ae933ad8e81cf680d3bd195f8f168fec84f50aeec2f4a2a2d9316fb304d333a337d6ac5dfffb7d38441d0f01714b0f3a6024fd29631869a5ce8f24f4da09529b5fbf63887505cb1428010a41f818c946c6a0"], &(0x7f00000000c0)='GPL\x00', 0xfffefffd, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) read$eventfd(r5, 0x0, 0x0) 6.961313538s ago: executing program 3 (id=1095): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc131d2d670d000d4ea98bf9b13129488f651a8de213eb94cd46cf7e167181b6dc55131f4db100e36556dd38ea6c029607460229add0924000aa1c788df600"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "91c289e3a047fcac", "999e5195fdfdc0840927de6b0c9f6399975ab545d9274b41b0a5a2c45b508fd2", '\x00', "3e6f16cfcede7387"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000540)={0x84, &(0x7f000001b700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x20042) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x2, {0x2, 0x1, 0x4}, {0x1, 0xf0}, 0xfe, 0x2}], 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001800040128bd7000fddbdf251d01020008000e00", @ANYRES32=0x0, @ANYBLOB="15000100010000a0010200005543515e083f5e7302000012b57c2baf593ea94bbe7ff8a02ea99d537d633869798a62ebf879bd748e6a0dcce00a4d8a7fed1517a0126607fbeed71195634ccd66f37ff52e95d5de07fe120f03488b59642dcfd546c69d26f4dada4a15cc03c59947c8495c90a13e7a42876aee5885127c45a595b757"], 0x34}}, 0x805) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 6.05463504s ago: executing program 4 (id=1096): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x80, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x7}, {0x0, 0x0, 0xffffffffffffffff}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@empty, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406441, &(0x7f0000000280)={0x2, 0x4, 0x0, 0x52, 0x0, 0x2c, 0x0, 0x0, 0x0}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) unshare(0x2a020400) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) mkdir(0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x38, r6, 0x10ada85e65c25349, 0x70bd2d, 0xffffffff, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xfffffffd}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0xc}]}]}]}, 0x38}}, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x81, 0x0, 'queue0\x00'}) write$sndseq(r8, &(0x7f0000000380)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7, 0x9}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x4, 0x0, 0x5, 0x83, @tick, {0xfd}, {0x3}, @note={0x81}}, {0x6, 0x3, 0x9, 0xe, @tick=0x1, {0x10, 0x5}, {0xce, 0x6}, @connect={{0x10, 0x3}, {0x6, 0xb}}}, {0x3, 0x8, 0xe8, 0x4, @tick=0x80, {0x80, 0x10}, {0x2}, @quote={{0x6, 0x3}, 0xc, &(0x7f0000000000)={0xf, 0x1, 0x6, 0x8, @time={0x5, 0x1}, {0x2, 0xa}, {0x3, 0xf0}, @control={0x0, 0x8, 0x6}}}}], 0x70) 6.042451206s ago: executing program 1 (id=1097): setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x9, [@union={0xc, 0x4, 0x0, 0x5, 0x0, 0x9, [{0xc, 0x0, 0x7}, {0x10, 0x3, 0x1}, {0x7, 0x3, 0x8}, {0x3, 0x1, 0x3ff}]}]}, {0x0, [0x5f, 0x2e, 0x0, 0x61, 0x5f, 0x61, 0x30]}}, &(0x7f0000000600)=""/64, 0x5d, 0x40, 0x0, 0xc}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty20(0xc, 0x4, 0x1) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f000030e000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/233, 0xe9, 0x1, &(0x7f0000000240)=""/65, 0x41}, &(0x7f0000000300)=0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open_by_handle_at(r2, &(0x7f0000000340)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x2, 0x10001}, 0x100, 0x32e}}, 0x101040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @func={0x2, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x5f, 0x0]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) 6.040750019s ago: executing program 0 (id=1098): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (rerun: 64) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) (async) r6 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) (async) acct(&(0x7f0000000100)='./file0/bus\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f00000000c0)=[0x0]) (async, rerun: 64) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) (rerun: 64) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000280)={0x8, 0x1, 0x62f, 0x7, 0x0}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={r8, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x7f, 0xe3, 0x100, 0x6, 0x80, 0x10000, 0x3}, 0x9c) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 5.080421209s ago: executing program 1 (id=1099): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYRES64, @ANYRESDEC=r0, @ANYRES16, @ANYRES32, @ANYRES64, @ANYRESOCT]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x0, 0x5, 0x1, 0x3, 0x0, 0xfff, 0x0}) 4.371795872s ago: executing program 2 (id=1100): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 4.371258584s ago: executing program 4 (id=1101): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r3, r3, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.331077668s ago: executing program 1 (id=1102): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2204c850, &(0x7f0000000040)={0xa, 0xfefc, 0x0, @loopback={0x0, 0xac141400}}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r6, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa8, r7, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf8e1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2f}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa7e51c93}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x9b10cf149fd4fc8e}, 0x10040000) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001040)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @empty}, 0xc) (async) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110a, 0x2}) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000024c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) (async) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000000c0)) 3.590835758s ago: executing program 4 (id=1103): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x2, @loopback, 0xfffffffc}, r2, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r2, 0x1c, 0x1, @in6={0xa, 0x4e21, 0x6, @mcast2, 0x7fc}}}, 0xa0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f00000001c0)=0x2, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) write$nci(0xffffffffffffffff, 0x0, 0xfffffeea) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) syz_io_uring_setup(0x4a9, 0x0, &(0x7f0000000000), 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=@gettfilter={0x0, 0x2e, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x4}, {0x0, 0x6}}, [{0x0, 0xb, 0x40}, {0x0, 0xb, 0x8}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 3.391883746s ago: executing program 3 (id=1104): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) r4 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) fsync(r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, &(0x7f0000000180)}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') (fail_nth: 9) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x19}) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000180)="d9afedc2382ba6", 0x7}, {&(0x7f0000000280)="ff8b7fd87b29e9c512d7955b5c15d54f4284eb501dbdcca61d4c14668ae3c5a6a3c8c3044ee2bfa30ea17cfd2bbcfab0744e3e1c4778622cf216b62e4a767ebb2183fc88e76bb3c42f600da56c10deeeda744eaea62a7026c9f32fc9330525c1d08ee366309562fb359ab5cbf07fc6b55e1f561fec0c738082ec5cb9805f8091d1cb142c8a4c83e4059c8b913fe22fa5d58ece5192d509249ac78eca873dbd0b488ed1977e7b055e5a99fe934b9049e3aeeb3b7b980be587c7ecafba731ef1ae6c382e8dcab5304231b138f28506bcd6222e8110e7e8f92b2fb0688d599dc0e61ade0cea8dcff912e05cc14520a6c7", 0xef}, {&(0x7f0000000380)="a5813e6959cad5d4f3dfb64b4041e1764503b63e1d1a3f2495b768f91c7141e24740201590407f3edddf5d3c5d0420a84a35f9a0e6930d6d462766661b3e2fd181e04894896ea9a880981b033f685d06137b6b1e821cba6afd1f0dcb12c690d671484c4e663c4e01e4c305cec356029d1d25547afff9a74b588655c57d574c7b101d05ffb917a19489ef67f1354fb98500801d026fbcc9962419", 0x9a}, {&(0x7f00000010c0)="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", 0x1000}], 0x4) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) write$cgroup_int(r0, &(0x7f0000000100), 0x12) 3.391616103s ago: executing program 1 (id=1105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x17, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x0, 0x7, 0xc}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x0, 0x8, 0x1, 0x0, 0x9}, @IPSET_ATTR_NETMASK, @IPSET_ATTR_BUCKETSIZE={0x0, 0x15, 0xc}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP={0x0, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_CIDR={0x0, 0x3, 0x81}, @IPSET_ATTR_BUCKETSIZE={0x0, 0x15, 0x1}, @IPSET_ATTR_NETMASK={0x0, 0x14, 0xa}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000890}, 0x800) syz_open_dev$MSR(&(0x7f0000000080), 0x22, 0x0) 3.39129681s ago: executing program 0 (id=1106): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffff9, 0x10}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x808}, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x9, 0x610080) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0xe8, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.781708314s ago: executing program 2 (id=1107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="d65bc28306bfb4f706302b829ab05e7e3e6f0ea3d966da7e1add99f6d3676cc374ff5818d0baedfa73dd46961bf34a667757165b0bc30400000095c54597d6a6b9f48a74ae933ad8e81cf680d3bd195f8f168fec84f50aeec2f4a2a2d9316fb304d333a337d6ac5dfffb7d38441d0f01714b0f3a6024fd29631869a5ce8f24f4da09529b5fbf63887505cb1428010a41f818c946c6a0"], &(0x7f00000000c0)='GPL\x00', 0xfffefffd, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) read$eventfd(r5, 0x0, 0x0) 2.642616813s ago: executing program 4 (id=1108): syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xfc, 0x100, @val=0x80}}}}}}}, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x6, 0x8, "4b0ce1f0abfdc17608ee513a8578cd99bc51220a8359d3d09a46870a71900f29", 0x6, 0x1, 0x4, 0x2da, 0x200}) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) lseek(0xffffffffffffffff, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r6 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback={0xf5ff}, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r7}}, 0x48) 2.548002553s ago: executing program 1 (id=1109): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0x40000800, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="fd2d1a85e31ecb1f1951df78fdc53141ab604c8326a4") ptrace$ARCH_SET_GS(0x1e, r5, &(0x7f0000000500), 0x1001) openat$rtc(0xffffffffffffff9c, 0x0, 0x402, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1d, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007f000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001"], 0x1c}}, 0xc000) 803.590392ms ago: executing program 3 (id=1110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4d, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x39, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x5) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x24044801}, 0x20010814) close(r3) 582.137163ms ago: executing program 0 (id=1111): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 575.412835ms ago: executing program 4 (id=1112): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0xd, '\x00', @p_u16=0x0}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x9, 0x70bd2c, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f00000000c0)=0x3, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32=r5, @ANYBLOB="0800c300741300000800c4"], 0x2c}}, 0x40) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x48, r3, 0x101, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x1d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0xc800) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/158) 282.308394ms ago: executing program 2 (id=1113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 91.161063ms ago: executing program 1 (id=1114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) ptrace$poke(0x4, 0x0, &(0x7f0000000040), 0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='contention_end\x00', r3}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r6, 0x100000000000f7) read$watch_queue(r5, &(0x7f0000000000)=""/1, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 71.900456ms ago: executing program 3 (id=1115): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) setsockopt(0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000440), 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000480)={0x0, 0x8000, 0xa, [0x0, 0x9, 0x8, 0x7, 0x5, 0x7, 0xa, 0x40, 0x0, 0xf0e]}, 0x1c) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x800400, &(0x7f0000000040)=ANY=[]) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="898b968f9adae50e1196d292b92fa885aa577c333b", 0x15}, 0x1, 0x0, 0x0, 0x24004084}, 0x890) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xa3e8, 0x400, 0x2, 0x250}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x6}, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c00001d010101020000000000000000000006000000000000000001"], 0x1c}}, 0x4000000) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) 0s ago: executing program 4 (id=1116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x4) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6004) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, 0x0, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x589b41, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000200)=0x8000000) r5 = openat(r4, &(0x7f0000000080)='./file0\x00', 0x12400, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, 0x0, 0x25, 0x1, @val=@netfilter={0x2, 0x1, 0x2, 0x1}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r8, {0xfffffff7}}, './file0\x00'}) close_range(r7, 0xffffffffffffffff, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYRESOCT=r3], 0x0) kernel console output (not intermixed with test programs): c: denied { create } for pid=8576 comm="syz.2.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 310.008311][ T30] audit: type=1400 audit(1762496213.417:1552): avc: denied { connect } for pid=8576 comm="syz.2.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 310.178508][ T8585] netlink: 236 bytes leftover after parsing attributes in process `syz.1.692'. [ 310.722270][ T30] audit: type=1400 audit(1762496214.247:1553): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 311.481774][ T8590] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.693' sets config #1 [ 311.636655][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 311.836742][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.014714][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 312.030097][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.045600][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.063503][ T10] usb 3-1: config 0 descriptor?? [ 312.184006][ T43] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 312.382640][ T5939] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 312.390270][ T43] usb 4-1: device descriptor read/64, error -71 [ 312.416154][ T30] audit: type=1400 audit(1762496215.947:1554): avc: denied { ioctl } for pid=8604 comm="syz.4.698" path="socket:[19586]" dev="sockfs" ino=19586 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 312.557978][ T5939] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.569834][ T5939] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 312.583880][ T5939] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.604192][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.633834][ T43] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 312.668649][ T5939] usb 1-1: config 0 descriptor?? [ 312.782483][ T43] usb 4-1: device descriptor read/64, error -71 [ 312.962748][ T43] usb usb4-port1: attempt power cycle [ 313.302477][ T43] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 313.782938][ T43] usb 4-1: device descriptor read/8, error -71 [ 314.001100][ T8616] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.702'. [ 314.022594][ T43] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 314.215169][ T43] usb 4-1: device descriptor read/8, error -71 [ 314.446858][ T43] usb usb4-port1: unable to enumerate USB device [ 314.476106][ T978] usb 3-1: USB disconnect, device number 31 [ 314.800738][ T30] audit: type=1400 audit(1762496218.317:1555): avc: denied { write } for pid=8620 comm="syz.2.704" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 314.872641][ T8625] netlink: 'syz.2.704': attribute type 1 has an invalid length. [ 315.114833][ T8627] macvlan2: entered promiscuous mode [ 315.120180][ T8627] macvlan2: entered allmulticast mode [ 315.127510][ T8627] bond1: entered promiscuous mode [ 315.133480][ T8627] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 315.263872][ T8627] bond1: left promiscuous mode [ 315.633163][ T8642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.649749][ T8642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.729152][ T5820] usb 1-1: USB disconnect, device number 34 [ 316.504791][ T30] audit: type=1400 audit(1762496219.557:1556): avc: denied { write } for pid=8644 comm="syz.0.710" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 316.678412][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.692782][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.471491][ T8657] tipc: Enabled bearer , priority 0 [ 317.819442][ T8661] tipc: Disabling bearer [ 318.132509][ T1208] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 318.235670][ T8669] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.715'. [ 318.338116][ T8665] ptm ptm13: ldisc open failed (-12), clearing slot 13 [ 318.384440][ T1208] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.394803][ T1208] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 318.414178][ T1208] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.424928][ T1208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.434769][ T1208] usb 5-1: config 0 descriptor?? [ 318.449546][ T1208] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 318.621238][ T30] audit: type=1400 audit(1762496222.067:1557): avc: denied { name_bind } for pid=8673 comm="syz.2.718" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 318.793775][ T30] audit: type=1400 audit(1762496222.077:1558): avc: denied { node_bind } for pid=8673 comm="syz.2.718" saddr=::1 src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 318.818433][ T30] audit: type=1400 audit(1762496222.077:1559): avc: denied { create } for pid=8673 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 319.004051][ T980] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 319.714653][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.725907][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.771650][ T978] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 319.806994][ T980] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 319.823008][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.850412][ T980] usb 4-1: config 0 descriptor?? [ 319.933828][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 319.940602][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.024854][ T978] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 320.052502][ T30] audit: type=1400 audit(1762496223.577:1560): avc: denied { ioctl } for pid=8694 comm="syz.1.723" path="socket:[20920]" dev="sockfs" ino=20920 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 320.077298][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.112334][ T30] audit: type=1400 audit(1762496223.587:1561): avc: denied { create } for pid=8685 comm="syz.3.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 320.170875][ T978] usb 1-1: config 0 descriptor?? [ 320.227352][ T30] audit: type=1400 audit(1762496223.587:1562): avc: denied { write } for pid=8685 comm="syz.3.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 320.307951][ T30] audit: type=1400 audit(1762496223.587:1563): avc: denied { read write } for pid=8685 comm="syz.3.720" name="mouse0" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 320.393404][ T30] audit: type=1400 audit(1762496223.587:1564): avc: denied { open } for pid=8685 comm="syz.3.720" path="/dev/input/mouse0" dev="devtmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 320.413011][ T8700] tipc: Started in network mode [ 320.433152][ T8700] tipc: Node identity eeedd720d8d6, cluster identity 4711 [ 320.458424][ T980] usbhid 4-1:0.0: can't add hid device: -71 [ 320.465279][ T980] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 320.473387][ T8700] tipc: Enabled bearer , priority 0 [ 320.484401][ T980] usb 4-1: USB disconnect, device number 32 [ 320.497974][ T8701] syzkaller0: entered promiscuous mode [ 320.506864][ T978] usbhid 1-1:0.0: can't add hid device: -71 [ 320.508354][ T8701] syzkaller0: entered allmulticast mode [ 320.528875][ T978] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 320.543172][ T8700] syzkaller0: mtu greater than device maximum [ 320.549504][ T978] usb 1-1: USB disconnect, device number 35 [ 320.572339][ T8699] tipc: Resetting bearer [ 320.586958][ T8699] tipc: Disabling bearer [ 320.763259][ T8706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.726'. [ 321.887543][ T8713] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.728'. [ 322.177303][ T30] audit: type=1400 audit(1762496225.707:1565): avc: denied { create } for pid=8714 comm="syz.3.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 322.269084][ T980] usb 5-1: USB disconnect, device number 30 [ 323.308667][ T980] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 323.622482][ T980] usb 5-1: device descriptor read/64, error -71 [ 324.002498][ T980] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 324.209421][ T30] audit: type=1400 audit(1762496227.737:1566): avc: denied { write } for pid=8741 comm="syz.3.736" name="anycast6" dev="proc" ino=4026533205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 324.340087][ T30] audit: type=1400 audit(1762496227.737:1567): avc: denied { read write } for pid=8741 comm="syz.3.736" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 324.364363][ T980] usb 5-1: device descriptor read/64, error -71 [ 324.371322][ T30] audit: type=1400 audit(1762496227.737:1568): avc: denied { open } for pid=8741 comm="syz.3.736" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 324.490029][ T980] usb usb5-port1: attempt power cycle [ 325.334572][ T980] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 325.522891][ T980] usb 5-1: device descriptor read/8, error -71 [ 325.867848][ T8763] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.743'. [ 326.105465][ T8750] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.738' sets config #1 [ 326.677198][ T30] audit: type=1400 audit(1762496230.197:1569): avc: denied { ioctl } for pid=8765 comm="syz.2.744" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 326.732737][ T976] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 327.045336][ T976] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.127428][ T976] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 327.158141][ T976] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 327.198749][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.273887][ T976] usb 4-1: config 0 descriptor?? [ 327.310004][ T976] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 327.863396][ T30] audit: type=1400 audit(1762496231.397:1570): avc: denied { getopt } for pid=8784 comm="syz.1.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 327.901592][ T30] audit: type=1400 audit(1762496231.417:1571): avc: denied { bind } for pid=8784 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 327.924747][ T30] audit: type=1400 audit(1762496231.427:1572): avc: denied { ioctl } for pid=8784 comm="gtp" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 328.072834][ T30] audit: type=1400 audit(1762496231.597:1573): avc: denied { ioctl } for pid=8783 comm="syz.0.749" path="socket:[21170]" dev="sockfs" ino=21170 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 328.158397][ T8793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.751'. [ 328.302477][ T5959] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 328.432493][ T5959] usb 5-1: device descriptor read/64, error -71 [ 328.716320][ T5959] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 328.888892][ T8800] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.754'. [ 329.042833][ T5959] usb 5-1: device descriptor read/64, error -71 [ 329.158515][ T5959] usb usb5-port1: attempt power cycle [ 329.308087][ T980] usb 4-1: USB disconnect, device number 33 [ 329.542544][ T5959] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 329.763794][ T976] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 329.856482][ T5959] usb 5-1: device descriptor read/8, error -71 [ 329.875550][ T8816] input: syz0 as /devices/virtual/input/input25 [ 329.937663][ T976] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 329.960414][ T976] usb 3-1: config 0 interface 0 has no altsetting 0 [ 329.972005][ T976] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 329.985314][ T976] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 330.006077][ T976] usb 3-1: Product: syz [ 330.022476][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 330.069503][ T976] usb 3-1: Manufacturer: syz [ 330.074517][ T976] usb 3-1: SerialNumber: syz [ 330.126159][ T5959] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 330.161597][ T976] usb 3-1: config 0 descriptor?? [ 330.163514][ T5959] usb 5-1: device descriptor read/8, error -71 [ 330.210367][ T976] usb 3-1: selecting invalid altsetting 0 [ 330.229596][ T8820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.244223][ T8820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.261130][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.285467][ T5959] usb usb5-port1: unable to enumerate USB device [ 330.288351][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.450383][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 330.471216][ T5959] usb 3-1: USB disconnect, device number 32 [ 330.478492][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 330.496706][ T10] usb 1-1: SerialNumber: syz [ 330.659285][ T8824] netlink: 236 bytes leftover after parsing attributes in process `syz.1.761'. [ 332.483294][ T10] usb 1-1: 0:2 : does not exist [ 332.490493][ T10] usb 1-1: unit 5 not found! [ 332.533423][ T10] usb 1-1: USB disconnect, device number 36 [ 332.849638][ T8837] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.765'. [ 332.891258][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.766'. [ 333.336554][ T30] audit: type=1400 audit(1762496236.857:1574): avc: denied { bind } for pid=8838 comm="syz.0.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 333.398299][ T8842] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 333.408348][ T8842] SELinux: failed to load policy [ 333.547424][ T30] audit: type=1400 audit(1762496236.857:1575): avc: denied { name_bind } for pid=8838 comm="syz.0.766" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 333.707816][ T30] audit: type=1400 audit(1762496236.857:1576): avc: denied { node_bind } for pid=8838 comm="syz.0.766" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 333.728681][ T30] audit: type=1400 audit(1762496236.917:1577): avc: denied { load_policy } for pid=8838 comm="syz.0.766" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 333.748851][ T30] audit: type=1400 audit(1762496237.207:1578): avc: denied { create } for pid=8847 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 333.768499][ T30] audit: type=1400 audit(1762496237.267:1579): avc: denied { ioctl } for pid=8847 comm="syz.4.768" path="socket:[21258]" dev="sockfs" ino=21258 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 334.812512][ T978] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 335.218636][ T8869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.238659][ T8869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.455777][ T5959] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 335.961011][ T978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.972888][ T978] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 336.027026][ T978] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 336.036303][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.234156][ T8874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.247900][ T8874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.451459][ T5959] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 336.461412][ T5959] usb 3-1: config 0 interface 0 has no altsetting 0 [ 336.476316][ T5959] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 336.485669][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 336.507183][ T978] usb 4-1: config 0 descriptor?? [ 336.522269][ T5959] usb 3-1: Product: syz [ 336.566346][ T5959] usb 3-1: Manufacturer: syz [ 336.567840][ T978] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 336.570946][ T5959] usb 3-1: SerialNumber: syz [ 336.617372][ T5959] usb 3-1: config 0 descriptor?? [ 336.636855][ T5959] usb 3-1: selecting invalid altsetting 0 [ 336.755341][ T978] usb 4-1: USB disconnect, device number 34 [ 336.883298][ T8870] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.772' sets config #1 [ 336.906537][ T5959] usb 3-1: USB disconnect, device number 33 [ 336.927251][ T30] audit: type=1400 audit(1762496240.457:1580): avc: denied { create } for pid=8878 comm="syz.3.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 337.368088][ T30] audit: type=1400 audit(1762496240.507:1581): avc: denied { read append } for pid=8878 comm="syz.3.778" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 337.482169][ T30] audit: type=1400 audit(1762496240.507:1582): avc: denied { open } for pid=8878 comm="syz.3.778" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 337.594463][ T30] audit: type=1400 audit(1762496240.517:1583): avc: denied { create } for pid=8878 comm="syz.3.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 337.748483][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.780'. [ 338.298086][ T976] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 338.322469][ T978] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 338.483977][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 338.490947][ T978] usb 3-1: unable to get BOS descriptor or descriptor too short [ 338.512498][ T976] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.533424][ T978] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 338.542140][ T978] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.568118][ T976] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.577224][ T978] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.590034][ T976] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 338.600318][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 338.620288][ T976] usb 5-1: SerialNumber: syz [ 338.626030][ T978] usb 3-1: string descriptor 0 read error: -22 [ 338.632188][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 338.632197][ T30] audit: type=1400 audit(1762496242.157:1616): avc: denied { bpf } for pid=8900 comm="syz.0.785" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 338.658766][ T978] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 339.259104][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.281442][ T30] audit: type=1400 audit(1762496242.387:1617): avc: denied { perfmon } for pid=8900 comm="syz.0.785" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 339.289147][ T978] usb 3-1: 0:2 : does not exist [ 339.372690][ T30] audit: type=1400 audit(1762496242.397:1618): avc: denied { create } for pid=8900 comm="syz.0.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 339.418109][ T30] audit: type=1400 audit(1762496242.397:1619): avc: denied { write } for pid=8900 comm="syz.0.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 339.550867][ T30] audit: type=1400 audit(1762496242.407:1620): avc: denied { read } for pid=8900 comm="syz.0.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 339.577732][ T30] audit: type=1400 audit(1762496242.837:1621): avc: denied { ioctl } for pid=8904 comm="syz.1.784" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 339.729403][ T30] audit: type=1400 audit(1762496242.857:1622): avc: denied { read } for pid=8904 comm="syz.1.784" dev="nsfs" ino=4026532951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 339.751039][ T30] audit: type=1400 audit(1762496242.857:1623): avc: denied { open } for pid=8904 comm="syz.1.784" path="net:[4026532951]" dev="nsfs" ino=4026532951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 339.790400][ T30] audit: type=1400 audit(1762496242.857:1624): avc: denied { create } for pid=8904 comm="syz.1.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 340.316782][ T30] audit: type=1400 audit(1762496242.857:1625): avc: denied { getopt } for pid=8904 comm="syz.1.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 340.502482][ T978] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 340.546657][ T8914] netlink: 236 bytes leftover after parsing attributes in process `syz.2.783'. [ 340.605869][ T976] usb 5-1: 0:2 : does not exist [ 340.610789][ T976] usb 5-1: unit 5: unexpected type 0x09 [ 340.664360][ T978] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 340.684504][ T978] usb 1-1: config 0 interface 0 has no altsetting 0 [ 340.695451][ T976] usb 5-1: USB disconnect, device number 39 [ 340.707488][ T978] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 340.716841][ T978] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 340.750025][ T978] usb 1-1: Product: syz [ 340.777369][ T978] usb 1-1: Manufacturer: syz [ 340.781965][ T978] usb 1-1: SerialNumber: syz [ 340.821436][ T978] usb 1-1: config 0 descriptor?? [ 340.858063][ T8923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.868746][ T978] usb 1-1: selecting invalid altsetting 0 [ 340.895223][ T8923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.125027][ T8925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.139870][ T8925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.351779][ T7809] udevd[7809]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 341.434778][ T1208] usb 1-1: USB disconnect, device number 37 [ 343.470057][ T1208] usb 3-1: USB disconnect, device number 34 [ 344.314874][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 344.314892][ T30] audit: type=1400 audit(1762496247.527:1656): avc: denied { write } for pid=8946 comm="syz.0.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 344.343771][ T30] audit: type=1400 audit(1762496247.527:1657): avc: denied { connect } for pid=8946 comm="syz.0.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 344.367230][ T30] audit: type=1400 audit(1762496247.527:1658): avc: denied { name_connect } for pid=8946 comm="syz.0.799" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 344.665505][ T30] audit: type=1400 audit(1762496248.197:1659): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.002295][ T30] audit: type=1400 audit(1762496248.237:1660): avc: denied { open } for pid=5811 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.036822][ T30] audit: type=1400 audit(1762496248.237:1661): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.067874][ T30] audit: type=1400 audit(1762496248.267:1662): avc: denied { read } for pid=8973 comm="syz.4.805" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 345.092328][ T30] audit: type=1400 audit(1762496248.267:1663): avc: denied { open } for pid=8973 comm="syz.4.805" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 345.116948][ T30] audit: type=1400 audit(1762496248.267:1664): avc: denied { read } for pid=8967 comm="syz.2.804" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 345.141076][ T30] audit: type=1400 audit(1762496248.267:1665): avc: denied { open } for pid=8967 comm="syz.2.804" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 346.673594][ T8992] tipc: Enabled bearer , priority 0 [ 346.766165][ T8992] tipc: Disabling bearer [ 347.624357][ T9001] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.812'. [ 348.179393][ T9006] FAULT_INJECTION: forcing a failure. [ 348.179393][ T9006] name failslab, interval 1, probability 0, space 0, times 0 [ 348.545600][ T9006] CPU: 0 UID: 0 PID: 9006 Comm: syz.1.814 Not tainted syzkaller #0 PREEMPT(full) [ 348.545627][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 348.545637][ T9006] Call Trace: [ 348.545643][ T9006] [ 348.545651][ T9006] dump_stack_lvl+0x16c/0x1f0 [ 348.545683][ T9006] should_fail_ex+0x512/0x640 [ 348.545704][ T9006] ? fs_reclaim_acquire+0xae/0x150 [ 348.545727][ T9006] should_failslab+0xc2/0x120 [ 348.545746][ T9006] __kmalloc_noprof+0xdd/0x880 [ 348.545771][ T9006] ? tomoyo_encode2+0x100/0x3e0 [ 348.545796][ T9006] ? tomoyo_encode2+0x100/0x3e0 [ 348.545814][ T9006] tomoyo_encode2+0x100/0x3e0 [ 348.545837][ T9006] tomoyo_encode+0x29/0x50 [ 348.545856][ T9006] tomoyo_realpath_from_path+0x18f/0x6e0 [ 348.545879][ T9006] ? tomoyo_profile+0x47/0x60 [ 348.545905][ T9006] tomoyo_path_number_perm+0x245/0x580 [ 348.545931][ T9006] ? tomoyo_path_number_perm+0x237/0x580 [ 348.545961][ T9006] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 348.545996][ T9006] ? lockdep_hardirqs_on+0x7c/0x110 [ 348.546048][ T9006] ? find_held_lock+0x2b/0x80 [ 348.546069][ T9006] ? hook_file_ioctl_common+0x145/0x410 [ 348.546099][ T9006] ? __fget_files+0x20e/0x3c0 [ 348.546122][ T9006] security_file_ioctl+0x9b/0x240 [ 348.546145][ T9006] __x64_sys_ioctl+0xb7/0x210 [ 348.546171][ T9006] do_syscall_64+0xcd/0xfa0 [ 348.546190][ T9006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.546208][ T9006] RIP: 0033:0x7f0ab758f6c9 [ 348.546223][ T9006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.546239][ T9006] RSP: 002b:00007f0ab8511038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.546256][ T9006] RAX: ffffffffffffffda RBX: 00007f0ab77e5fa0 RCX: 00007f0ab758f6c9 [ 348.546268][ T9006] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 348.546279][ T9006] RBP: 00007f0ab8511090 R08: 0000000000000000 R09: 0000000000000000 [ 348.546289][ T9006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.546299][ T9006] R13: 00007f0ab77e6038 R14: 00007f0ab77e5fa0 R15: 00007fff2f96f378 [ 348.546324][ T9006] [ 348.546513][ T9006] ERROR: Out of memory at tomoyo_realpath_from_path. [ 348.902500][ T1208] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 349.082805][ T1208] usb 3-1: Using ep0 maxpacket: 32 [ 349.089982][ T1208] usb 3-1: unable to get BOS descriptor or descriptor too short [ 349.213948][ T1208] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 349.239434][ T1208] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.298657][ T9029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=529 sclass=netlink_route_socket pid=9029 comm=syz.3.820 [ 349.331310][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 349.331338][ T30] audit: type=1400 audit(1762496252.857:1716): avc: denied { bind } for pid=9025 comm="syz.3.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 349.676029][ T1208] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.711422][ T9028] FAULT_INJECTION: forcing a failure. [ 349.711422][ T9028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.724548][ T9028] CPU: 0 UID: 0 PID: 9028 Comm: syz.1.819 Not tainted syzkaller #0 PREEMPT(full) [ 349.724568][ T9028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 349.724577][ T9028] Call Trace: [ 349.724583][ T9028] [ 349.724589][ T9028] dump_stack_lvl+0x16c/0x1f0 [ 349.724618][ T9028] should_fail_ex+0x512/0x640 [ 349.724642][ T9028] _copy_from_user+0x2e/0xd0 [ 349.724665][ T9028] copy_msghdr_from_user+0x98/0x160 [ 349.724688][ T9028] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 349.724722][ T9028] ___sys_sendmsg+0xfe/0x1d0 [ 349.724746][ T9028] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.724767][ T9028] ? __lock_acquire+0x622/0x1c90 [ 349.724825][ T9028] __sys_sendmsg+0x16d/0x220 [ 349.724848][ T9028] ? __pfx___sys_sendmsg+0x10/0x10 [ 349.724887][ T9028] do_syscall_64+0xcd/0xfa0 [ 349.724906][ T9028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.724923][ T9028] RIP: 0033:0x7f0ab758f6c9 [ 349.724936][ T9028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.724953][ T9028] RSP: 002b:00007f0ab84ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.724969][ T9028] RAX: ffffffffffffffda RBX: 00007f0ab77e6090 RCX: 00007f0ab758f6c9 [ 349.724986][ T9028] RDX: 0000000004044080 RSI: 00002000000001c0 RDI: 0000000000000004 [ 349.724997][ T9028] RBP: 00007f0ab84ef090 R08: 0000000000000000 R09: 0000000000000000 [ 349.725007][ T9028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.725016][ T9028] R13: 00007f0ab77e6128 R14: 00007f0ab77e6090 R15: 00007fff2f96f378 [ 349.725041][ T9028] [ 349.725565][ T1208] usb 3-1: string descriptor 0 read error: -22 [ 350.003005][ T1208] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.012276][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.029823][ T1208] usb 3-1: 0:2 : does not exist [ 350.193129][ T9031] netlink: 'syz.3.821': attribute type 25 has an invalid length. [ 350.767182][ T30] audit: type=1400 audit(1762496254.147:1717): avc: denied { listen } for pid=9036 comm="syz.4.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 350.880157][ T9043] fuse: Bad value for 'fd' [ 350.887080][ T30] audit: type=1400 audit(1762496254.407:1718): avc: denied { mounton } for pid=9038 comm="syz.0.824" path="/155/file0" dev="tmpfs" ino=855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 351.412042][ T9048] netlink: 236 bytes leftover after parsing attributes in process `syz.2.815'. [ 352.030289][ T30] audit: type=1400 audit(1762496255.557:1719): avc: denied { write } for pid=9044 comm="syz.1.825" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 352.053154][ T978] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 352.352451][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 352.782682][ T978] usb 1-1: config 84 has too many interfaces: 146, using maximum allowed: 32 [ 352.810948][ T978] usb 1-1: config 84 descriptor has 1 excess byte, ignoring [ 352.842487][ T978] usb 1-1: config 84 has 1 interface, different from the descriptor's value: 146 [ 352.857719][ T978] usb 1-1: config 84 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.872250][ T978] usb 1-1: New USB device found, idVendor=04d0, idProduct=00dd, bcdDevice= 0.00 [ 352.927338][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.014524][ T978] usbhid 1-1:84.0: can't add hid device: -22 [ 353.027074][ T978] usbhid 1-1:84.0: probe with driver usbhid failed with error -22 [ 353.065735][ T30] audit: type=1400 audit(1762496256.597:1720): avc: denied { create } for pid=9063 comm="syz.3.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 353.101257][ T30] audit: type=1400 audit(1762496256.627:1721): avc: denied { ioctl } for pid=9063 comm="syz.3.829" path="socket:[22576]" dev="sockfs" ino=22576 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 353.126414][ T30] audit: type=1400 audit(1762496256.627:1722): avc: denied { setopt } for pid=9063 comm="syz.3.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 353.150623][ T30] audit: type=1400 audit(1762496256.627:1723): avc: denied { write } for pid=9063 comm="syz.3.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 353.181563][ T30] audit: type=1400 audit(1762496256.707:1724): avc: denied { ioctl } for pid=9063 comm="syz.3.829" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 353.310200][ T9067] netlink: 'syz.3.829': attribute type 39 has an invalid length. [ 353.421541][ T9064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9064 comm=syz.3.829 [ 353.492892][ T1208] usb 3-1: USB disconnect, device number 35 [ 353.877104][ T30] audit: type=1400 audit(1762496257.407:1725): avc: denied { bind } for pid=9079 comm="syz.2.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 353.937316][ T9081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.956184][ T9082] fuse: Bad value for 'fd' [ 354.008766][ T9081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.032534][ T5820] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 354.109444][ T5832] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 354.162575][ T9081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.208551][ T5820] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 354.290403][ T5820] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 354.320960][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.342679][ T5820] usb 4-1: Product: syz [ 354.346890][ T5820] usb 4-1: Manufacturer: syz [ 354.351535][ T5820] usb 4-1: SerialNumber: syz [ 354.363347][ T5820] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 354.622781][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 354.622795][ T30] audit: type=1400 audit(1762496258.147:1731): avc: denied { append } for pid=9090 comm="syz.1.837" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 354.654379][ T5820] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 354.667457][ T30] audit: type=1400 audit(1762496258.147:1732): avc: denied { read write } for pid=9090 comm="syz.1.837" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 354.742777][ T5820] usb 4-1: USB disconnect, device number 35 [ 354.803793][ T30] audit: type=1400 audit(1762496258.147:1733): avc: denied { open } for pid=9090 comm="syz.1.837" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 354.922802][ T30] audit: type=1400 audit(1762496258.147:1734): avc: denied { mount } for pid=9090 comm="syz.1.837" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 354.987693][ T30] audit: type=1400 audit(1762496258.317:1735): avc: denied { name_bind } for pid=9094 comm="syz.4.838" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 355.100861][ T30] audit: type=1400 audit(1762496258.317:1736): avc: denied { node_bind } for pid=9094 comm="syz.4.838" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 355.123717][ T30] audit: type=1400 audit(1762496258.317:1737): avc: denied { write } for pid=9094 comm="syz.4.838" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 355.142931][ T30] audit: type=1400 audit(1762496258.317:1738): avc: denied { view } for pid=9094 comm="syz.4.838" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 355.695993][ T30] audit: type=1400 audit(1762496258.367:1739): avc: denied { read } for pid=9094 comm="syz.4.838" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 355.741348][ T5820] usb 1-1: USB disconnect, device number 38 [ 355.747348][ T30] audit: type=1400 audit(1762496258.367:1740): avc: denied { ioctl } for pid=9094 comm="syz.4.838" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 355.879279][ T9108] netlink: 52 bytes leftover after parsing attributes in process `syz.0.840'. [ 355.954196][ T9111] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 357.085626][ T9125] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 357.093231][ T9125] UDF-fs: Scanning with blocksize 512 failed [ 357.099523][ T9125] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 357.106992][ T9125] UDF-fs: Scanning with blocksize 1024 failed [ 357.113207][ T9125] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 357.120633][ T9125] UDF-fs: Scanning with blocksize 2048 failed [ 357.126829][ T9125] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 357.134290][ T9125] UDF-fs: Scanning with blocksize 4096 failed [ 358.050332][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.849'. [ 358.059664][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.849'. [ 360.717083][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 361.200393][ T9169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.209254][ T9169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.326444][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 361.326454][ T30] audit: type=1400 audit(1762496264.857:1753): avc: denied { create } for pid=9174 comm="syz.2.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 361.359915][ T30] audit: type=1400 audit(1762496264.887:1754): avc: denied { listen } for pid=9174 comm="syz.2.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 361.525494][ T30] audit: type=1400 audit(1762496264.887:1755): avc: denied { accept } for pid=9174 comm="syz.2.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 361.548659][ T9178] netlink: 132 bytes leftover after parsing attributes in process `syz.4.859'. [ 361.566504][ T9178] block device autoloading is deprecated and will be removed. [ 361.583989][ T30] audit: type=1400 audit(1762496265.107:1756): avc: denied { unlink } for pid=9177 comm="syz.4.859" name="#1b" dev="tmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 361.618246][ T30] audit: type=1400 audit(1762496265.107:1757): avc: denied { mount } for pid=9177 comm="syz.4.859" name="/" dev="overlay" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 361.715592][ T30] audit: type=1400 audit(1762496265.247:1758): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 362.421328][ T30] audit: type=1400 audit(1762496265.517:1759): avc: denied { read } for pid=9182 comm="syz.4.861" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 362.552586][ T30] audit: type=1400 audit(1762496265.517:1760): avc: denied { open } for pid=9182 comm="syz.4.861" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 362.804628][ T30] audit: type=1400 audit(1762496266.337:1761): avc: denied { write } for pid=9186 comm="syz.1.863" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 362.809755][ T9187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.876903][ T30] audit: type=1400 audit(1762496266.337:1762): avc: denied { open } for pid=9186 comm="syz.1.863" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 362.900829][ T9187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.683054][ T978] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 363.772066][ T9211] tmpfs: Bad value for 'mpol' [ 363.838468][ T978] usb 3-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 363.850635][ T978] usb 3-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 363.858687][ T978] usb 3-1: Product: syz [ 363.863596][ T978] usb 3-1: Manufacturer: syz [ 363.868190][ T978] usb 3-1: SerialNumber: syz [ 363.883206][ T978] usb 3-1: config 0 descriptor?? [ 363.897673][ T978] usb 3-1: selecting invalid altsetting 1 [ 363.903855][ T978] comedi comedi5: could not switch to alternate setting 1 [ 363.910993][ T978] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 364.173089][ T1208] usb 3-1: USB disconnect, device number 36 [ 364.985920][ T9230] netlink: 'syz.2.877': attribute type 1 has an invalid length. [ 365.026494][ T9230] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.362521][ T1208] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 365.589354][ T9236] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.601542][ T9236] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 365.642962][ T9236] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 365.652494][ T1208] usb 5-1: Using ep0 maxpacket: 32 [ 365.667358][ T1208] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 365.689212][ T1208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 365.794432][ T1208] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 365.805975][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.814509][ T1208] usb 5-1: Product: syz [ 365.819092][ T1208] usb 5-1: Manufacturer: syz [ 365.832448][ T1208] usb 5-1: SerialNumber: syz [ 365.848146][ T1208] usb 5-1: config 0 descriptor?? [ 365.905329][ T1208] usb 5-1: no audio or video endpoints found [ 365.981111][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.995088][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.046649][ T9248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.056016][ T9236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.067010][ T9248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.076678][ T9248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.085428][ T9248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.388969][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 366.388984][ T30] audit: type=1400 audit(1762496269.917:1775): avc: denied { create } for pid=9247 comm="syz.1.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 367.762639][ T976] usb 5-1: USB disconnect, device number 40 [ 367.984537][ T1208] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 368.214392][ T1208] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 368.855035][ T1208] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 368.864419][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.876967][ T1208] usb 3-1: config 0 descriptor?? [ 368.884281][ T1208] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 369.585117][ T30] audit: type=1400 audit(1762496273.077:1776): avc: denied { read } for pid=9282 comm="syz.3.890" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 370.000271][ T30] audit: type=1400 audit(1762496273.077:1777): avc: denied { ioctl } for pid=9282 comm="syz.3.890" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 371.478286][ T1208] usb 3-1: USB disconnect, device number 37 [ 371.604676][ T30] audit: type=1400 audit(1762496275.127:1778): avc: denied { create } for pid=9303 comm="syz.2.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 371.785702][ T9308] sp0: Synchronizing with TNC [ 371.796620][ T9308] sp0: Found TNC [ 371.822564][ T30] audit: type=1400 audit(1762496275.337:1779): avc: denied { module_request } for pid=9303 comm="syz.2.896" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 371.897503][ T30] audit: type=1400 audit(1762496275.377:1780): avc: denied { ioctl } for pid=9310 comm="syz.3.897" path="socket:[22449]" dev="sockfs" ino=22449 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 372.059760][ T30] audit: type=1400 audit(1762496275.457:1781): avc: denied { ioctl } for pid=9303 comm="syz.2.896" path="socket:[22446]" dev="sockfs" ino=22446 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 372.342478][ T10] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 372.513133][ T10] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 372.523342][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 372.563210][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 372.598146][ T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 372.616834][ T10] usb 5-1: Product: syz [ 372.621032][ T10] usb 5-1: Manufacturer: syz [ 372.626196][ T10] usb 5-1: SerialNumber: syz [ 372.647740][ T10] usb 5-1: config 0 descriptor?? [ 372.658497][ T10] usb 5-1: selecting invalid altsetting 0 [ 372.886218][ T10] usb 5-1: USB disconnect, device number 41 [ 373.098878][ T30] audit: type=1400 audit(1762496276.617:1782): avc: denied { read } for pid=9328 comm="syz.2.901" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 373.258634][ T30] audit: type=1400 audit(1762496276.617:1783): avc: denied { open } for pid=9328 comm="syz.2.901" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 373.840616][ T30] audit: type=1400 audit(1762496276.707:1784): avc: denied { ioctl } for pid=9326 comm="syz.1.902" path="socket:[23175]" dev="sockfs" ino=23175 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 374.052601][ T30] audit: type=1400 audit(1762496277.557:1785): avc: denied { create } for pid=9328 comm="syz.2.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 374.134485][ T30] audit: type=1400 audit(1762496277.557:1786): avc: denied { shutdown } for pid=9328 comm="syz.2.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 374.332652][ T1208] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 374.569350][ T30] audit: type=1400 audit(1762496277.627:1787): avc: denied { read write } for pid=9328 comm="syz.2.901" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 374.685714][ T1208] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.976807][ T5820] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 374.984533][ T1208] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 375.246869][ T9352] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.907' sets config #1 [ 375.284733][ T1208] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 375.298704][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 375.307449][ T1208] usb 3-1: SerialNumber: syz [ 375.444806][ T5820] usb 4-1: config index 0 descriptor too short (expected 117, got 102) [ 375.505225][ T5820] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.640388][ T5820] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 375.652840][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.688205][ T5820] usb 4-1: Product: syz [ 375.717194][ T5820] usb 4-1: Manufacturer: syz [ 375.721853][ T5820] usb 4-1: SerialNumber: syz [ 375.736165][ T5820] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 375.809588][ T5939] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 376.109388][ T9364] FAULT_INJECTION: forcing a failure. [ 376.109388][ T9364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.122778][ T9364] CPU: 1 UID: 0 PID: 9364 Comm: syz.4.911 Not tainted syzkaller #0 PREEMPT(full) [ 376.122792][ T9364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 376.122798][ T9364] Call Trace: [ 376.122801][ T9364] [ 376.122805][ T9364] dump_stack_lvl+0x16c/0x1f0 [ 376.122825][ T9364] should_fail_ex+0x512/0x640 [ 376.122839][ T9364] _copy_to_user+0x32/0xd0 [ 376.122854][ T9364] simple_read_from_buffer+0xcb/0x170 [ 376.122871][ T9364] proc_fail_nth_read+0x197/0x240 [ 376.122884][ T9364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 376.122900][ T9364] ? rw_verify_area+0xcf/0x6c0 [ 376.122915][ T9364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 376.122927][ T9364] vfs_read+0x1e4/0xcf0 [ 376.122938][ T9364] ? __pfx___mutex_lock+0x10/0x10 [ 376.122950][ T9364] ? __pfx_vfs_read+0x10/0x10 [ 376.122962][ T9364] ? __fget_files+0x20e/0x3c0 [ 376.122977][ T9364] ksys_read+0x12a/0x250 [ 376.122986][ T9364] ? __pfx_ksys_read+0x10/0x10 [ 376.122999][ T9364] do_syscall_64+0xcd/0xfa0 [ 376.123009][ T9364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.123020][ T9364] RIP: 0033:0x7f6110f8e0dc [ 376.123029][ T9364] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 376.123039][ T9364] RSP: 002b:00007f6111e8e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 376.123049][ T9364] RAX: ffffffffffffffda RBX: 00007f61111e6180 RCX: 00007f6110f8e0dc [ 376.123055][ T9364] RDX: 000000000000000f RSI: 00007f6111e8e0a0 RDI: 0000000000000003 [ 376.123061][ T9364] RBP: 00007f6111e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 376.123067][ T9364] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 376.123072][ T9364] R13: 00007f61111e6218 R14: 00007f61111e6180 R15: 00007fff33c49498 [ 376.123086][ T9364] [ 376.434075][ T9370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.913'. [ 376.538170][ T5820] usb 4-1: USB disconnect, device number 36 [ 376.738351][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 376.738361][ T30] audit: type=1400 audit(1762496280.267:1828): avc: denied { read } for pid=9360 comm="syz.0.912" dev="nsfs" ino=4026532801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 376.860531][ T30] audit: type=1400 audit(1762496280.267:1829): avc: denied { open } for pid=9360 comm="syz.0.912" path="net:[4026532801]" dev="nsfs" ino=4026532801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 376.883863][ T30] audit: type=1400 audit(1762496280.267:1830): avc: denied { create } for pid=9360 comm="syz.0.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 376.908828][ T5939] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 376.916293][ T5939] ath9k_htc: Failed to initialize the device [ 376.924416][ T5820] usb 4-1: ath9k_htc: USB layer deinitialized [ 376.930581][ T30] audit: type=1400 audit(1762496280.437:1831): avc: denied { create } for pid=9371 comm="syz.4.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 377.048490][ T30] audit: type=1400 audit(1762496280.437:1832): avc: denied { setopt } for pid=9371 comm="syz.4.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 377.269318][ T30] audit: type=1400 audit(1762496280.627:1833): avc: denied { append } for pid=9376 comm="syz.1.915" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 377.366645][ T30] audit: type=1400 audit(1762496280.627:1834): avc: denied { open } for pid=9376 comm="syz.1.915" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 377.383561][ T1208] usb 3-1: 0:2 : does not exist [ 377.407817][ T1208] usb 3-1: unit 5: unexpected type 0x09 [ 377.431929][ T30] audit: type=1400 audit(1762496280.627:1835): avc: denied { read } for pid=9376 comm="syz.1.915" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 377.751251][ T1208] usb 3-1: USB disconnect, device number 38 [ 377.769739][ T30] audit: type=1400 audit(1762496280.627:1836): avc: denied { ioctl } for pid=9376 comm="syz.1.915" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 377.819076][ T7809] udevd[7809]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.877061][ T30] audit: type=1400 audit(1762496280.737:1837): avc: denied { read } for pid=9378 comm="syz.4.916" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 377.923020][ T9393] Invalid logical block size (51711) [ 378.095210][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.101686][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.209146][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.920'. [ 378.382844][ T5832] Bluetooth: hci2: SCO packet for unknown connection handle 3584 [ 379.450177][ T9406] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.922' sets config #1 [ 380.517588][ T9418] veth1_to_bond: entered allmulticast mode [ 380.540468][ T9415] veth1_to_bond: left allmulticast mode [ 380.596666][ T9419] tipc: Started in network mode [ 380.611916][ T9419] tipc: Node identity 82157161d4e4, cluster identity 4711 [ 380.635816][ T9419] tipc: Enabled bearer , priority 0 [ 380.654233][ T9421] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 380.686663][ T9419] tipc: Disabling bearer [ 381.393495][ T9431] gfs2: gfs2 mount does not exist [ 381.792528][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 381.820446][ T30] audit: type=1400 audit(1762496285.267:1895): avc: denied { prog_load } for pid=9429 comm="syz.4.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 381.839392][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.959886][ T30] audit: type=1400 audit(1762496285.267:1896): avc: denied { bpf } for pid=9429 comm="syz.4.930" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 382.113806][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.931'. [ 382.134681][ T30] audit: type=1400 audit(1762496285.267:1897): avc: denied { perfmon } for pid=9429 comm="syz.4.930" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 382.177506][ T30] audit: type=1400 audit(1762496285.287:1898): avc: denied { read write } for pid=9429 comm="syz.4.930" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 382.312705][ T30] audit: type=1400 audit(1762496285.287:1899): avc: denied { open } for pid=9429 comm="syz.4.930" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 382.778592][ T30] audit: type=1400 audit(1762496285.417:1900): avc: denied { read write } for pid=5810 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 382.846798][ T30] audit: type=1400 audit(1762496285.417:1901): avc: denied { open } for pid=5810 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 382.902552][ T1208] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 382.933188][ T30] audit: type=1400 audit(1762496285.417:1902): avc: denied { ioctl } for pid=5810 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 383.117063][ T30] audit: type=1400 audit(1762496285.437:1903): avc: denied { create } for pid=9436 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 383.682542][ T30] audit: type=1400 audit(1762496285.437:1904): avc: denied { setopt } for pid=9436 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 383.726620][ T1208] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 383.739738][ T1208] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 383.778756][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.810305][ T1208] usb 4-1: config 0 descriptor?? [ 384.295411][ T1208] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 384.719158][ T9467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.558010][ T9459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.592763][ T9459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.654541][ T976] usb 4-1: USB disconnect, device number 37 [ 385.668930][ T9459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.679073][ T9476] netlink: 36 bytes leftover after parsing attributes in process `syz.3.942'. [ 385.693333][ T9470] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.939' sets config #1 [ 385.703209][ T9473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.713608][ T9473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.806574][ T9459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.938432][ T9483] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 385.946223][ T9483] netlink: 224 bytes leftover after parsing attributes in process `syz.3.942'. [ 386.042628][ T1208] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 386.069007][ T9473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.112813][ T9473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.153007][ T9459] ip6t_srh: unknown srh invflags 4000 [ 386.168233][ T9459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.277720][ T9459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.776926][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.944'. [ 386.891568][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 386.891596][ T30] audit: type=1326 audit(1762496290.417:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9486 comm="syz.4.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6110f8f6c9 code=0x7ffc0000 [ 386.953826][ T30] audit: type=1400 audit(1762496290.457:1967): avc: denied { read } for pid=9491 comm="syz.0.945" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 387.143320][ T30] audit: type=1326 audit(1762496290.457:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9486 comm="syz.4.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6110f8f6c9 code=0x7ffc0000 [ 387.167090][ T30] audit: type=1400 audit(1762496290.457:1969): avc: denied { ioctl } for pid=9491 comm="syz.0.945" path="/dev/input/event1" dev="devtmpfs" ino=919 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 387.193265][ T30] audit: type=1326 audit(1762496290.507:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9486 comm="syz.4.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6110f8f6c9 code=0x7ffc0000 [ 387.202608][ T5820] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 387.216850][ T30] audit: type=1326 audit(1762496290.507:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9486 comm="syz.4.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6110f8f6c9 code=0x7ffc0000 [ 387.689874][ T30] audit: type=1326 audit(1762496290.507:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9486 comm="syz.4.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6110f8f6c9 code=0x7ffc0000 [ 387.713251][ T30] audit: type=1326 audit(1762496290.507:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9486 comm="syz.4.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6110f8f6c9 code=0x7ffc0000 [ 387.745013][ T30] audit: type=1326 audit(1762496290.507:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9486 comm="syz.4.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6110f8f6c9 code=0x7ffc0000 [ 387.775398][ T30] audit: type=1326 audit(1762496290.507:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9486 comm="syz.4.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6110f8f6c9 code=0x7ffc0000 [ 387.942465][ T5820] usb 1-1: Using ep0 maxpacket: 8 [ 387.949357][ T5820] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 388.015136][ T5820] usb 1-1: config 0 has no interface number 0 [ 388.021278][ T5820] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 388.591962][ T5820] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 388.603667][ T5820] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 388.614934][ T5820] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 388.627964][ T5820] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 388.639596][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.689249][ T5820] usb 1-1: config 0 descriptor?? [ 388.701629][ T5820] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 388.837067][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 388.849008][ T9508] netlink: 16 bytes leftover after parsing attributes in process `syz.3.948'. [ 389.102529][ T976] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 389.131928][ T5820] usb 1-1: USB disconnect, device number 39 [ 389.177636][ T5820] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 389.181888][ T9511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.233806][ T9511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.282481][ T976] usb 4-1: Using ep0 maxpacket: 16 [ 389.369275][ T976] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.474856][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.949'. [ 389.550751][ T9518] netlink: 14 bytes leftover after parsing attributes in process `syz.1.949'. [ 390.129569][ T976] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 390.139112][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.148122][ T976] usb 4-1: Product: syz [ 390.152285][ T976] usb 4-1: Manufacturer: syz [ 390.158353][ T976] usb 4-1: SerialNumber: syz [ 390.193625][ T976] usb 4-1: config 0 descriptor?? [ 390.688387][ T976] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 391.550059][ T69] usb 4-1: Failed to submit usb control message: -71 [ 391.601878][ T69] usb 4-1: unable to send the bmi data to the device: -71 [ 391.687221][ T69] usb 4-1: unable to get target info from device [ 391.702061][ T69] usb 4-1: could not get target info (-71) [ 391.715374][ T976] usb 4-1: USB disconnect, device number 38 [ 391.802693][ T69] usb 4-1: could not probe fw (-71) [ 391.835890][ T9518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.875044][ T9518] bond_slave_0: left allmulticast mode [ 391.883801][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 391.930838][ T9518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.940703][ T9518] bond_slave_1: left allmulticast mode [ 391.952650][ T9518] bond0 (unregistering): Released all slaves [ 392.213600][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.259593][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 392.303701][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 392.319798][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 392.335388][ T10] usb 1-1: SerialNumber: syz [ 392.342475][ T976] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 392.758437][ T976] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.771493][ T976] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.780858][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.793357][ T976] usb 4-1: Product: syz [ 392.798133][ T976] usb 4-1: Manufacturer: syz [ 392.854756][ T976] usb 4-1: SerialNumber: syz [ 392.937458][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 392.937472][ T30] audit: type=1400 audit(1762496296.467:1995): avc: denied { create } for pid=9553 comm="syz.1.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 393.020606][ T30] audit: type=1400 audit(1762496296.477:1996): avc: denied { setopt } for pid=9553 comm="syz.1.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 393.062503][ T30] audit: type=1400 audit(1762496296.477:1997): avc: denied { read } for pid=9553 comm="syz.1.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 393.084898][ T30] audit: type=1400 audit(1762496296.547:1998): avc: denied { write } for pid=9553 comm="syz.1.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 393.142527][ T30] audit: type=1400 audit(1762496296.667:1999): avc: denied { read write } for pid=9557 comm="syz.2.960" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 393.302690][ T30] audit: type=1400 audit(1762496296.697:2000): avc: denied { open } for pid=9557 comm="syz.2.960" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 393.327717][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.517152][ T30] audit: type=1400 audit(1762496296.967:2001): avc: denied { write } for pid=9559 comm="syz.2.961" name="ptype" dev="proc" ino=4026533148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 393.568738][ T976] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 393.577668][ T976] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 393.774742][ T976] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 393.803504][ T30] audit: type=1400 audit(1762496296.977:2002): avc: denied { ioctl } for pid=9559 comm="syz.2.961" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 393.829053][ T976] cdc_ncm 4-1:1.0: setting tx_max = 136 [ 393.838293][ T976] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 393.850267][ T30] audit: type=1400 audit(1762496297.007:2003): avc: denied { sqpoll } for pid=9559 comm="syz.2.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 393.899563][ T30] audit: type=1400 audit(1762496297.027:2004): avc: denied { name_bind } for pid=9559 comm="syz.2.961" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 394.033195][ T976] usb 4-1: USB disconnect, device number 39 [ 394.102029][ T976] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 394.262064][ T10] usb 1-1: 0:2 : does not exist [ 394.267141][ T10] usb 1-1: unit 5: unexpected type 0x0a [ 394.513671][ T10] usb 1-1: USB disconnect, device number 40 [ 394.785864][ T1208] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 395.492649][ T1208] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 395.505615][ T1208] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 395.532602][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.176585][ T9576] netlink: 'syz.3.964': attribute type 20 has an invalid length. [ 396.187546][ T1208] usb 3-1: config 0 descriptor?? [ 396.200791][ T1208] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 396.208234][ T9576] IPv6: NLM_F_CREATE should be specified when creating new route [ 396.217105][ T9576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 396.224564][ T9576] IPv6: NLM_F_CREATE should be set when creating new route [ 398.009609][ T10] usb 3-1: USB disconnect, device number 40 [ 398.022337][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 398.022350][ T30] audit: type=1400 audit(1762496301.547:2023): avc: denied { write } for pid=9602 comm="syz.0.972" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 399.180999][ T30] audit: type=1400 audit(1762496301.557:2024): avc: denied { open } for pid=9602 comm="syz.0.972" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 399.207823][ T30] audit: type=1400 audit(1762496301.587:2025): avc: denied { execmem } for pid=9602 comm="syz.0.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 400.379017][ T30] audit: type=1400 audit(1762496301.807:2026): avc: denied { prog_load } for pid=9602 comm="syz.0.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 400.458460][ T9611] x_tables: ip_tables: osf match: only valid for protocol 6 [ 400.721108][ T30] audit: type=1400 audit(1762496301.807:2027): avc: denied { bpf } for pid=9602 comm="syz.0.972" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 400.762533][ T30] audit: type=1400 audit(1762496301.817:2028): avc: denied { create } for pid=9602 comm="syz.0.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 400.812709][ T30] audit: type=1400 audit(1762496301.827:2029): avc: denied { create } for pid=9602 comm="syz.0.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 400.823813][ T9613] futex_wake_op: syz.1.974 tries to shift op by -1; fix this program [ 400.898324][ T30] audit: type=1400 audit(1762496301.877:2030): avc: denied { write } for pid=9602 comm="syz.0.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 402.135965][ T9629] fuse: Bad value for 'fd' [ 402.141068][ T9630] fuse: Bad value for 'fd' [ 402.259389][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.974'. [ 402.287640][ T30] audit: type=1400 audit(1762496301.897:2031): avc: denied { nlmsg_write } for pid=9602 comm="syz.0.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 402.368787][ T30] audit: type=1400 audit(1762496303.717:2032): avc: denied { perfmon } for pid=9601 comm="syz.3.973" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 403.097240][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 403.097276][ T30] audit: type=1400 audit(1762496306.627:2064): avc: denied { map } for pid=9635 comm="syz.3.980" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 403.333689][ T9636] binder: BINDER_SET_CONTEXT_MGR already set [ 403.336433][ T30] audit: type=1400 audit(1762496306.857:2065): avc: denied { read } for pid=9628 comm="syz.4.978" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 403.383846][ T9636] binder: 9635:9636 ioctl 4018620d 200000004a80 returned -16 [ 403.411561][ T30] audit: type=1400 audit(1762496306.857:2066): avc: denied { open } for pid=9628 comm="syz.4.978" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 403.887021][ T9651] loop6: detected capacity change from 0 to 524287999 [ 403.895943][ T9651] Buffer I/O error on dev loop6, logical block 0, async page read [ 403.903991][ T9651] Buffer I/O error on dev loop6, logical block 0, async page read [ 403.911884][ T9651] Buffer I/O error on dev loop6, logical block 0, async page read [ 403.919770][ T9651] Buffer I/O error on dev loop6, logical block 0, async page read [ 403.927677][ T9651] Buffer I/O error on dev loop6, logical block 0, async page read [ 403.962555][ T9651] Buffer I/O error on dev loop6, logical block 0, async page read [ 404.542052][ T9651] Buffer I/O error on dev loop6, logical block 0, async page read [ 404.577755][ T9651] Buffer I/O error on dev loop6, logical block 0, async page read [ 404.588006][ T9651] ldm_validate_partition_table(): Disk read failed. [ 404.594916][ T9651] Buffer I/O error on dev loop6, logical block 0, async page read [ 404.603405][ T9651] Buffer I/O error on dev loop6, logical block 0, async page read [ 404.612634][ T9651] Dev loop6: unable to read RDB block 0 [ 404.622540][ T9651] loop6: unable to read partition table [ 404.628623][ T9651] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 404.689494][ T30] audit: type=1400 audit(1762496307.267:2067): avc: denied { read write } for pid=9649 comm="syz.3.983" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 404.731106][ T30] audit: type=1400 audit(1762496307.267:2068): avc: denied { open } for pid=9649 comm="syz.3.983" path="/dev/video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 405.392590][ T30] audit: type=1400 audit(1762496307.267:2069): avc: denied { ioctl } for pid=9649 comm="syz.3.983" path="/dev/video2" dev="devtmpfs" ino=932 ioctlcmd=0x5624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 405.482337][ T30] audit: type=1400 audit(1762496307.407:2070): avc: denied { create } for pid=9646 comm="syz.2.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 405.882615][ T30] audit: type=1400 audit(1762496307.407:2071): avc: denied { write } for pid=9646 comm="syz.2.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 405.939783][ T30] audit: type=1400 audit(1762496307.417:2072): avc: denied { read write } for pid=9646 comm="syz.2.981" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 405.984089][ T30] audit: type=1400 audit(1762496307.417:2073): avc: denied { open } for pid=9646 comm="syz.2.981" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 406.157435][ T9669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.986'. [ 406.392437][ T978] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 406.673213][ T978] usb 1-1: Using ep0 maxpacket: 8 [ 406.702331][ T978] usb 1-1: config 0 has an invalid interface number: 235 but max is 2 [ 406.711629][ T978] usb 1-1: config 0 has an invalid interface number: 143 but max is 2 [ 406.762435][ T978] usb 1-1: config 0 has an invalid interface number: 141 but max is 2 [ 406.770608][ T978] usb 1-1: config 0 has no interface number 0 [ 406.822294][ T978] usb 1-1: config 0 has no interface number 1 [ 406.833042][ T978] usb 1-1: config 0 has no interface number 2 [ 406.849452][ T978] usb 1-1: config 0 interface 235 altsetting 255 bulk endpoint 0xC has invalid maxpacket 64 [ 406.863812][ T978] usb 1-1: config 0 interface 235 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 406.883808][ T978] usb 1-1: config 0 interface 235 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 406.913347][ T978] usb 1-1: config 0 interface 235 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 406.936348][ T978] usb 1-1: config 0 interface 235 altsetting 255 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 406.957434][ T978] usb 1-1: config 0 interface 235 altsetting 255 has a duplicate endpoint with address 0x8D, skipping [ 407.016178][ T978] usb 1-1: config 0 interface 235 altsetting 255 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 407.132737][ T978] usb 1-1: config 0 interface 143 altsetting 226 has a duplicate endpoint with address 0xD, skipping [ 407.157392][ T978] usb 1-1: config 0 interface 143 altsetting 226 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 407.168607][ T978] usb 1-1: config 0 interface 141 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 407.179771][ T978] usb 1-1: config 0 interface 141 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 407.191654][ T978] usb 1-1: config 0 interface 141 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 407.202871][ T978] usb 1-1: config 0 interface 141 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 407.213892][ T978] usb 1-1: config 0 interface 141 altsetting 8 endpoint 0xE has an invalid bInterval 99, changing to 7 [ 407.224994][ T978] usb 1-1: config 0 interface 235 has no altsetting 0 [ 407.231753][ T978] usb 1-1: config 0 interface 143 has no altsetting 0 [ 407.312946][ T978] usb 1-1: config 0 interface 141 has no altsetting 0 [ 407.440654][ T978] usb 1-1: New USB device found, idVendor=0af0, idProduct=d057, bcdDevice=82.89 [ 407.450472][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.458712][ T978] usb 1-1: Product: 箤톿ϐ彵⁥헵叅ݥ糌尻䣘嗐⶷窆䣔̯韒蟯뺞蒓쑰发벽妢ꦄ嫾₹㸝뷒㓮閰썘虠ྩ䔻䎜 [ 407.474173][ T978] usb 1-1: Manufacturer: ѕ [ 407.479133][ T978] usb 1-1: SerialNumber: ৙崉ᙛ몷衝睧䤫윓擂籚㍹䜻맽Ꮶ㓒ᙓ课效ࢪ䔿뀚損뵨솢哆鼵莛興멂녂序瀂䕛Ủ軽ﵽ૔꫆贲謷䈅紓볪⩉읇ᶌݕ园䆱亲鴴ꠥ編巡鶃諓碄쎖⭊癝脮퉉䂛Ꝡꉶ舶췸娚陘絙쇻䐺ꂍⵋ [ 407.973663][ T978] usb 1-1: config 0 descriptor?? [ 408.033248][ T9667] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 408.041022][ T9667] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 408.176131][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 408.176156][ T30] audit: type=1400 audit(1762496311.707:2096): avc: denied { setopt } for pid=9688 comm="syz.2.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 408.224114][ T30] audit: type=1400 audit(1762496311.737:2097): avc: denied { read } for pid=9688 comm="syz.2.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 408.255722][ T30] audit: type=1400 audit(1762496311.777:2098): avc: denied { create } for pid=9666 comm="syz.0.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 408.275011][ C0] vkms_vblank_simulate: vblank timer overrun [ 408.357843][ T30] audit: type=1400 audit(1762496311.787:2099): avc: denied { bind } for pid=9666 comm="syz.0.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 408.474995][ T30] audit: type=1400 audit(1762496311.787:2100): avc: denied { write } for pid=9666 comm="syz.0.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 408.512459][ T30] audit: type=1400 audit(1762496311.787:2101): avc: denied { setopt } for pid=9666 comm="syz.0.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 408.542133][ T30] audit: type=1400 audit(1762496311.787:2102): avc: denied { accept } for pid=9666 comm="syz.0.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 408.616571][ T978] hso 1-1:0.235: Not our interface [ 408.622482][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 408.639596][ T978] hso 1-1:0.141: Not our interface [ 408.645413][ T30] audit: type=1400 audit(1762496311.817:2103): avc: denied { write } for pid=9688 comm="syz.2.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 409.116951][ T978] usb 1-1: USB disconnect, device number 41 [ 409.144923][ T30] audit: type=1400 audit(1762496311.847:2104): avc: denied { read } for pid=9666 comm="syz.0.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 409.192754][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 409.204167][ T30] audit: type=1400 audit(1762496311.867:2105): avc: denied { ioctl } for pid=9666 comm="syz.0.988" path="socket:[24176]" dev="sockfs" ino=24176 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 409.235844][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 409.247499][ T10] usb 3-1: config 179 has no interface number 0 [ 409.274363][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 409.368940][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 409.449126][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 409.461988][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 409.473729][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 409.489114][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 409.489134][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.965274][ T9690] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 410.317117][ T976] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input27 [ 410.553898][ T1208] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 410.976341][ T1208] usb 5-1: Using ep0 maxpacket: 32 [ 411.053995][ T5939] usb 3-1: USB disconnect, device number 41 [ 411.054001][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 411.054133][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 411.072718][ T1208] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 411.126737][ T1208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.160361][ T1208] usb 5-1: config 0 descriptor?? [ 411.258102][ T1208] gspca_main: sunplus-2.14.0 probing 041e:400b [ 411.282478][ T9718] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1002'. [ 411.697721][ T9724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1003'. [ 411.892459][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 412.023615][ T1208] gspca_sunplus: reg_r err -71 [ 412.028718][ T1208] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 412.047414][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 412.047619][ T1208] usb 5-1: USB disconnect, device number 42 [ 412.079278][ T10] usb 1-1: config 0 has no interface number 0 [ 412.087453][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.099735][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.109720][ T10] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 412.119572][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.135220][ T10] usb 1-1: config 0 descriptor?? [ 412.849664][ T9734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.860111][ T9734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.083268][ T9735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.116714][ T9735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.814273][ T10] usbhid 1-1:0.1: can't add hid device: -71 [ 413.884466][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 413.884492][ T30] audit: type=1400 audit(1762496316.887:2170): avc: denied { map_read map_write } for pid=9737 comm="syz.3.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 413.923213][ T10] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 413.947532][ T10] usb 1-1: USB disconnect, device number 42 [ 414.653183][ T30] audit: type=1400 audit(1762496317.727:2171): avc: denied { create } for pid=9742 comm="syz.4.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 414.677309][ T30] audit: type=1400 audit(1762496317.737:2172): avc: denied { prog_load } for pid=9742 comm="syz.4.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 414.696955][ T30] audit: type=1400 audit(1762496317.737:2173): avc: denied { bpf } for pid=9742 comm="syz.4.1009" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 414.720001][ T30] audit: type=1400 audit(1762496317.747:2174): avc: denied { perfmon } for pid=9742 comm="syz.4.1009" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 414.792856][ T30] audit: type=1400 audit(1762496318.207:2175): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 415.078806][ T30] audit: type=1400 audit(1762496318.207:2176): avc: denied { open } for pid=5821 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 415.319872][ T30] audit: type=1400 audit(1762496318.207:2177): avc: denied { ioctl } for pid=5821 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 416.001118][ T30] audit: type=1400 audit(1762496318.227:2178): avc: denied { read } for pid=9745 comm="syz.3.1010" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 416.024147][ T30] audit: type=1400 audit(1762496318.227:2179): avc: denied { open } for pid=9745 comm="syz.3.1010" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 416.205550][ T9766] tipc: Enabling of bearer rejected, failed to enable media [ 416.258216][ T978] IPVS: starting estimator thread 0... [ 416.362531][ T5959] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 416.462133][ T9770] IPVS: using max 73 ests per chain, 175200 per kthread [ 416.495675][ T9777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1017'. [ 416.901459][ T5820] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 417.016058][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.054819][ T5959] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 417.072898][ T5959] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 417.198544][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.206883][ T5820] usb 3-1: Using ep0 maxpacket: 8 [ 417.733824][ T5959] usb 5-1: config 0 descriptor?? [ 418.012098][ T5959] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 419.472516][ T5820] usb 3-1: unable to get BOS descriptor or descriptor too short [ 419.511670][ T5820] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 419.531064][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 419.531078][ T30] audit: type=1400 audit(1762496323.057:2228): avc: denied { create } for pid=9808 comm="syz.2.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 419.562753][ T5820] usb 3-1: can't read configurations, error -71 [ 419.609498][ T30] audit: type=1400 audit(1762496323.057:2229): avc: denied { create } for pid=9808 comm="syz.2.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 419.822566][ T9813] fuse: Bad value for 'fd' [ 420.282457][ T5820] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 420.282493][ T30] audit: type=1400 audit(1762496323.057:2230): avc: denied { connect } for pid=9808 comm="syz.2.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 420.514032][ T10] usb 5-1: USB disconnect, device number 43 [ 420.622915][ T30] audit: type=1400 audit(1762496323.347:2231): avc: denied { mounton } for pid=9810 comm="syz.3.1027" path="/220/file0" dev="tmpfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 420.630798][ T9816] tipc: Enabling of bearer rejected, failed to enable media [ 420.755153][ T30] audit: type=1400 audit(1762496323.937:2232): avc: denied { create } for pid=9798 comm="syz.0.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 420.849176][ T5820] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 420.859422][ T30] audit: type=1400 audit(1762496323.937:2233): avc: denied { write } for pid=9798 comm="syz.0.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 420.881317][ T5820] usb 3-1: config 9 has no interfaces? [ 420.893751][ T5820] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 420.903124][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.911110][ T5820] usb 3-1: Product: syz [ 420.925167][ T5820] usb 3-1: Manufacturer: syz [ 420.931824][ T5820] usb 3-1: SerialNumber: syz [ 421.992506][ T30] audit: type=1400 audit(1762496324.807:2234): avc: denied { map_create } for pid=9819 comm="syz.3.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 422.336374][ T30] audit: type=1400 audit(1762496324.807:2235): avc: denied { map_read map_write } for pid=9819 comm="syz.3.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 422.502512][ T30] audit: type=1400 audit(1762496324.887:2236): avc: denied { create } for pid=9831 comm="syz.4.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 422.648681][ T9839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.658745][ T9839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.896487][ T30] audit: type=1400 audit(1762496324.897:2237): avc: denied { write } for pid=9831 comm="syz.4.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 423.262347][ T5820] usb 3-1: USB disconnect, device number 43 [ 423.480833][ T9855] tipc: Enabling of bearer rejected, failed to enable media [ 423.759073][ T9860] fuse: Bad value for 'fd' [ 425.226628][ T9867] vlan0: entered allmulticast mode [ 425.632535][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 425.632563][ T30] audit: type=1400 audit(1762496328.817:2264): avc: denied { create } for pid=9864 comm="syz.2.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 425.673290][ T9867] veth0_vlan: entered allmulticast mode [ 425.764727][ T30] audit: type=1400 audit(1762496329.277:2265): avc: denied { create } for pid=9874 comm="syz.3.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 425.812459][ T980] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 425.820052][ T30] audit: type=1400 audit(1762496329.297:2266): avc: denied { write } for pid=9874 comm="syz.3.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 426.111426][ T30] audit: type=1400 audit(1762496329.407:2267): avc: denied { create } for pid=9880 comm="syz.3.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 426.131309][ T30] audit: type=1400 audit(1762496329.427:2268): avc: denied { read } for pid=9866 comm="syz.4.1043" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 426.640155][ T30] audit: type=1400 audit(1762496329.427:2269): avc: denied { open } for pid=9866 comm="syz.4.1043" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 426.672568][ T30] audit: type=1400 audit(1762496329.427:2270): avc: denied { read write } for pid=9866 comm="syz.4.1043" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 426.696960][ T980] usb 3-1: Invalid ep0 maxpacket: 64 [ 426.722456][ T30] audit: type=1400 audit(1762496329.427:2271): avc: denied { open } for pid=9866 comm="syz.4.1043" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 426.774796][ T30] audit: type=1400 audit(1762496329.627:2272): avc: denied { connect } for pid=9880 comm="syz.3.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 426.797922][ T30] audit: type=1400 audit(1762496329.627:2273): avc: denied { name_bind } for pid=9880 comm="syz.3.1047" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 426.912448][ T980] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 426.942261][ T9895] FAULT_INJECTION: forcing a failure. [ 426.942261][ T9895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.946636][ T9891] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1049'. [ 427.042936][ T9895] CPU: 1 UID: 0 PID: 9895 Comm: syz.1.1050 Not tainted syzkaller #0 PREEMPT(full) [ 427.042959][ T9895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 427.042968][ T9895] Call Trace: [ 427.042974][ T9895] [ 427.042981][ T9895] dump_stack_lvl+0x16c/0x1f0 [ 427.043011][ T9895] should_fail_ex+0x512/0x640 [ 427.043035][ T9895] _copy_from_user+0x2e/0xd0 [ 427.043060][ T9895] wext_handle_ioctl+0xc2/0x2a0 [ 427.043077][ T9895] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 427.043098][ T9895] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 427.043123][ T9895] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 427.043147][ T9895] sock_ioctl+0x3a1/0x6b0 [ 427.043166][ T9895] ? __pfx_sock_ioctl+0x10/0x10 [ 427.043180][ T9895] ? hook_file_ioctl_common+0x145/0x410 [ 427.043209][ T9895] ? selinux_file_ioctl+0x180/0x270 [ 427.043225][ T9895] ? selinux_file_ioctl+0xb4/0x270 [ 427.043245][ T9895] ? __pfx_sock_ioctl+0x10/0x10 [ 427.043263][ T9895] __x64_sys_ioctl+0x18e/0x210 [ 427.043288][ T9895] do_syscall_64+0xcd/0xfa0 [ 427.043306][ T9895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.043323][ T9895] RIP: 0033:0x7f0ab758f6c9 [ 427.043337][ T9895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.043352][ T9895] RSP: 002b:00007f0ab8511038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.043369][ T9895] RAX: ffffffffffffffda RBX: 00007f0ab77e5fa0 RCX: 00007f0ab758f6c9 [ 427.043379][ T9895] RDX: 0000200000000000 RSI: 0000000000008b32 RDI: 0000000000000003 [ 427.043390][ T9895] RBP: 00007f0ab8511090 R08: 0000000000000000 R09: 0000000000000000 [ 427.043400][ T9895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.043410][ T9895] R13: 00007f0ab77e6038 R14: 00007f0ab77e5fa0 R15: 00007fff2f96f378 [ 427.043435][ T9895] [ 427.252872][ T980] usb 3-1: Invalid ep0 maxpacket: 64 [ 427.374161][ T980] usb usb3-port1: attempt power cycle [ 427.498071][ T9889] 9pnet_fd: Insufficient options for proto=fd [ 427.514961][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'. [ 427.802810][ T5959] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 428.036156][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 428.272819][ T5959] usb 4-1: device descriptor read/64, error -32 [ 428.308085][ T9912] fuse: Bad value for 'fd' [ 428.522773][ T5959] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 428.951280][ T5959] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 428.974630][ T5959] usb 4-1: config 9 has no interfaces? [ 428.982643][ T5959] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 428.991677][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.000673][ T5959] usb 4-1: Product: syz [ 429.011615][ T5959] usb 4-1: Manufacturer: syz [ 429.512880][ T5959] usb 4-1: SerialNumber: syz [ 429.797208][ T9925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.807306][ T9925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.519562][ T5959] usb 4-1: USB disconnect, device number 41 [ 430.744816][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 430.744832][ T30] audit: type=1400 audit(1762496334.277:2313): avc: denied { read write } for pid=9929 comm="syz.4.1060" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 430.858193][ T30] audit: type=1400 audit(1762496334.277:2314): avc: denied { open } for pid=9929 comm="syz.4.1060" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 431.642453][ T30] audit: type=1400 audit(1762496335.157:2315): avc: denied { create } for pid=9937 comm="syz.1.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 431.806929][ T9951] tipc: Disabling bearer [ 431.849872][ T9943] vim2m vim2m.0: vidioc_s_fmt queue busy [ 431.921110][ T30] audit: type=1400 audit(1762496335.157:2316): avc: denied { create } for pid=9937 comm="syz.1.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 431.921155][ T30] audit: type=1400 audit(1762496335.247:2317): avc: denied { create } for pid=9932 comm="syz.0.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 431.921191][ T30] audit: type=1400 audit(1762496335.247:2318): avc: denied { setopt } for pid=9932 comm="syz.0.1058" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 431.921228][ T30] audit: type=1400 audit(1762496335.257:2319): avc: denied { module_request } for pid=9932 comm="syz.0.1058" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 431.921314][ T30] audit: type=1400 audit(1762496335.257:2320): avc: denied { create } for pid=9945 comm="syz.4.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 431.921351][ T30] audit: type=1400 audit(1762496335.257:2321): avc: denied { ioctl } for pid=9945 comm="syz.4.1063" path="socket:[25399]" dev="sockfs" ino=25399 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 431.921390][ T30] audit: type=1400 audit(1762496335.287:2322): avc: denied { sys_module } for pid=9932 comm="syz.0.1058" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 432.416947][ T9955] tipc: Enabled bearer , priority 0 [ 432.467681][ T9953] loop2: detected capacity change from 0 to 7 [ 432.592104][ T9955] tipc: Disabling bearer [ 432.635873][ T7809] Dev loop2: unable to read RDB block 7 [ 432.643081][ T7809] loop2: unable to read partition table [ 432.658628][ T7809] loop2: partition table beyond EOD, truncated [ 433.300224][ T9964] binder_alloc: 9963: binder_alloc_buf, no vma [ 435.923787][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 435.923802][ T30] audit: type=1400 audit(1762496339.437:2349): avc: denied { write } for pid=9992 comm="syz.0.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 435.988065][ T5959] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 435.991825][ T30] audit: type=1400 audit(1762496339.437:2350): avc: denied { connect } for pid=9992 comm="syz.0.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 435.998772][ T5939] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 436.015859][ T30] audit: type=1400 audit(1762496339.437:2351): avc: denied { name_connect } for pid=9992 comm="syz.0.1076" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 436.045975][ T30] audit: type=1400 audit(1762496339.487:2352): avc: denied { create } for pid=9992 comm="syz.0.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 436.066740][ T30] audit: type=1400 audit(1762496339.487:2353): avc: denied { write } for pid=9992 comm="syz.0.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 436.087129][ T30] audit: type=1400 audit(1762496339.487:2354): avc: denied { nlmsg_write } for pid=9992 comm="syz.0.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 436.200982][ T5959] usb 5-1: unable to get BOS descriptor or descriptor too short [ 436.289259][ T30] audit: type=1400 audit(1762496339.817:2355): avc: denied { execute } for pid=10000 comm="syz.2.1077" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 436.303814][ T5939] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 436.321613][ T30] audit: type=1400 audit(1762496339.837:2356): avc: denied { nosuid_transition } for pid=10000 comm="syz.2.1077" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 436.345010][ T5959] usb 5-1: config 0 has an invalid interface number: 242 but max is 0 [ 436.361664][ T30] audit: type=1400 audit(1762496339.837:2357): avc: denied { transition } for pid=10000 comm="syz.2.1077" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 436.364656][ T5939] usb 4-1: config 9 has no interfaces? [ 436.397761][ T30] audit: type=1400 audit(1762496339.837:2358): avc: denied { entrypoint } for pid=10000 comm="syz.2.1077" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=133 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 436.398816][ T5959] usb 5-1: config 0 has no interface number 0 [ 436.567534][ T5959] usb 5-1: config 0 interface 242 altsetting 64 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 436.580775][ T5959] usb 5-1: config 0 interface 242 has no altsetting 0 [ 436.589030][ T5939] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 436.592459][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 436.598363][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.614338][ T5959] usb 5-1: New USB device found, idVendor=15eb, idProduct=0001, bcdDevice=36.02 [ 436.623419][ T5939] usb 4-1: Product: syz [ 436.627571][ T5939] usb 4-1: Manufacturer: syz [ 436.693785][ T5939] usb 4-1: SerialNumber: syz [ 436.702472][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.717685][ T5959] usb 5-1: Product: syz [ 436.721960][ T5959] usb 5-1: Manufacturer: syz [ 436.738675][ T5959] usb 5-1: SerialNumber: syz [ 436.745890][T10010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1079'. [ 436.833495][ T5959] usb 5-1: config 0 descriptor?? [ 436.842954][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 436.860321][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 436.879616][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 436.898396][ T10] usb 3-1: can't read configurations, error -61 [ 437.025304][T10013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.034052][T10013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.112062][T10015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.121940][T10015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.145775][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 437.447832][ T5959] option 5-1:0.242: GSM modem (1-port) converter detected [ 437.487191][ T5939] usb 4-1: USB disconnect, device number 42 [ 437.531031][ T5959] usb 5-1: USB disconnect, device number 44 [ 437.552788][ T5959] option 5-1:0.242: device disconnected [ 437.592670][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 437.606565][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 437.617218][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 437.631286][ T10] usb 3-1: can't read configurations, error -61 [ 437.646754][ T10] usb usb3-port1: attempt power cycle [ 438.552529][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 438.583444][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 438.593818][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 438.623052][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 438.635997][ T10] usb 3-1: can't read configurations, error -61 [ 438.792533][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 439.545923][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.592799][ T10] usb 3-1: device descriptor read/8, error -71 [ 439.634205][T10034] FAULT_INJECTION: forcing a failure. [ 439.634205][T10034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.712537][T10034] CPU: 1 UID: 0 PID: 10034 Comm: syz.2.1086 Not tainted syzkaller #0 PREEMPT(full) [ 439.712562][T10034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 439.712572][T10034] Call Trace: [ 439.712578][T10034] [ 439.712584][T10034] dump_stack_lvl+0x16c/0x1f0 [ 439.712616][T10034] should_fail_ex+0x512/0x640 [ 439.712640][T10034] _copy_from_user+0x2e/0xd0 [ 439.712663][T10034] copy_msghdr_from_user+0x98/0x160 [ 439.712687][T10034] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 439.712722][T10034] ___sys_sendmsg+0xfe/0x1d0 [ 439.712751][T10034] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.712772][T10034] ? __lock_acquire+0x622/0x1c90 [ 439.712830][T10034] __sys_sendmsg+0x16d/0x220 [ 439.712852][T10034] ? __pfx___sys_sendmsg+0x10/0x10 [ 439.712891][T10034] do_syscall_64+0xcd/0xfa0 [ 439.712914][T10034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.712931][T10034] RIP: 0033:0x7ff5a618f6c9 [ 439.712945][T10034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.712961][T10034] RSP: 002b:00007ff5a6f71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.712979][T10034] RAX: ffffffffffffffda RBX: 00007ff5a63e5fa0 RCX: 00007ff5a618f6c9 [ 439.712990][T10034] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 439.713000][T10034] RBP: 00007ff5a6f71090 R08: 0000000000000000 R09: 0000000000000000 [ 439.713011][T10034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.713021][T10034] R13: 00007ff5a63e6038 R14: 00007ff5a63e5fa0 R15: 00007ffde8dfc848 [ 439.713046][T10034] [ 439.725635][ T10] usb usb3-port1: unable to enumerate USB device [ 440.554291][T10044] usb usb3: usbfs: interface 0 claimed by hub while 'syz.0.1089' sets config #0 [ 440.567052][T10044] usb usb3: usbfs: interface 0 claimed by hub while 'syz.0.1089' sets config #1 [ 441.567675][T10064] FAULT_INJECTION: forcing a failure. [ 441.567675][T10064] name failslab, interval 1, probability 0, space 0, times 0 [ 441.586165][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 441.594900][T10064] CPU: 1 UID: 0 PID: 10064 Comm: syz.1.1094 Not tainted syzkaller #0 PREEMPT(full) [ 441.594921][T10064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 441.594930][T10064] Call Trace: [ 441.594935][T10064] [ 441.594942][T10064] dump_stack_lvl+0x16c/0x1f0 [ 441.594974][T10064] should_fail_ex+0x512/0x640 [ 441.594994][T10064] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 441.595018][T10064] should_failslab+0xc2/0x120 [ 441.595031][T10064] kmem_cache_alloc_node_noprof+0x78/0x770 [ 441.595046][T10064] ? __alloc_skb+0x2b2/0x380 [ 441.595070][T10064] ? __alloc_skb+0x2b2/0x380 [ 441.595086][T10064] ? __pfx_netlink_insert+0x10/0x10 [ 441.595107][T10064] __alloc_skb+0x2b2/0x380 [ 441.595126][T10064] ? __pfx___alloc_skb+0x10/0x10 [ 441.595145][T10064] ? netlink_autobind.isra.0+0x158/0x370 [ 441.595174][T10064] netlink_alloc_large_skb+0x69/0x140 [ 441.595198][T10064] netlink_sendmsg+0x698/0xdd0 [ 441.595225][T10064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.595257][T10064] ____sys_sendmsg+0xa98/0xc70 [ 441.595275][T10064] ? copy_msghdr_from_user+0x10a/0x160 [ 441.595295][T10064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.595325][T10064] ___sys_sendmsg+0x134/0x1d0 [ 441.595350][T10064] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.595370][T10064] ? __lock_acquire+0x622/0x1c90 [ 441.595431][T10064] __sys_sendmsg+0x16d/0x220 [ 441.595456][T10064] ? __pfx___sys_sendmsg+0x10/0x10 [ 441.595490][T10064] do_syscall_64+0xcd/0xfa0 [ 441.595507][T10064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.595523][T10064] RIP: 0033:0x7f0ab758f6c9 [ 441.595536][T10064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.595551][T10064] RSP: 002b:00007f0ab8511038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.595566][T10064] RAX: ffffffffffffffda RBX: 00007f0ab77e5fa0 RCX: 00007f0ab758f6c9 [ 441.595576][T10064] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 441.595586][T10064] RBP: 00007f0ab8511090 R08: 0000000000000000 R09: 0000000000000000 [ 441.595596][T10064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.595606][T10064] R13: 00007f0ab77e6038 R14: 00007f0ab77e5fa0 R15: 00007fff2f96f378 [ 441.595631][T10064] [ 442.026202][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 442.075543][T10063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1091'. [ 442.611622][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.625965][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 442.644451][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.679731][ T10] usb 4-1: config 0 descriptor?? [ 442.689030][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 442.689043][ T30] audit: type=1400 audit(1762496346.217:2370): avc: denied { read } for pid=10068 comm="syz.4.1096" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 442.729031][ T30] audit: type=1400 audit(1762496346.257:2371): avc: denied { open } for pid=10068 comm="syz.4.1096" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 442.778832][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 442.811281][ T30] audit: type=1400 audit(1762496346.317:2372): avc: denied { ioctl } for pid=10068 comm="syz.4.1096" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x6441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 442.984774][T10060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.995727][T10060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.038519][T10082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.051810][T10082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.072708][ T30] audit: type=1400 audit(1762496346.597:2373): avc: denied { setopt } for pid=10059 comm="syz.3.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 443.377608][ T10] gspca_vc032x: reg_r err -110 [ 443.387703][ T10] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 443.428458][ T10] usb 4-1: USB disconnect, device number 43 [ 443.648016][ T30] audit: type=1400 audit(1762496347.177:2374): avc: denied { create } for pid=10084 comm="syz.4.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 443.670185][T10087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1101'. [ 443.862490][ T30] audit: type=1400 audit(1762496347.227:2375): avc: denied { ioctl } for pid=10084 comm="syz.4.1101" path="socket:[26028]" dev="sockfs" ino=26028 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 445.087031][T10101] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1105'. [ 445.342692][ T30] audit: type=1400 audit(1762496348.797:2376): avc: denied { setopt } for pid=10104 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 445.405796][ T30] audit: type=1400 audit(1762496348.797:2377): avc: denied { getopt } for pid=10104 comm="syz.3.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 445.641145][T10113] FAULT_INJECTION: forcing a failure. [ 445.641145][T10113] name failslab, interval 1, probability 0, space 0, times 0 [ 445.654435][T10113] CPU: 0 UID: 0 PID: 10113 Comm: syz.3.1104 Not tainted syzkaller #0 PREEMPT(full) [ 445.654459][T10113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 445.654469][T10113] Call Trace: [ 445.654476][T10113] [ 445.654482][T10113] dump_stack_lvl+0x16c/0x1f0 [ 445.654514][T10113] should_fail_ex+0x512/0x640 [ 445.654535][T10113] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 445.654565][T10113] should_failslab+0xc2/0x120 [ 445.654585][T10113] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 445.654618][T10113] ? __d_alloc+0x32/0xae0 [ 445.654643][T10113] ? __d_alloc+0x32/0xae0 [ 445.654661][T10113] __d_alloc+0x32/0xae0 [ 445.654684][T10113] d_alloc_parallel+0x111/0x1510 [ 445.654717][T10113] ? find_held_lock+0x2b/0x80 [ 445.654740][T10113] ? __pfx_d_alloc_parallel+0x10/0x10 [ 445.654769][T10113] ? __d_lookup+0x266/0x4a0 [ 445.654800][T10113] lookup_open.isra.0+0x665/0x1580 [ 445.654832][T10113] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 445.654874][T10113] ? mnt_get_write_access+0x1e9/0x2f0 [ 445.654902][T10113] path_openat+0x893/0x2cb0 [ 445.654929][T10113] ? __pfx_path_openat+0x10/0x10 [ 445.654949][T10113] ? __lock_acquire+0xb8a/0x1c90 [ 445.654979][T10113] do_filp_open+0x20b/0x470 [ 445.654997][T10113] ? __pfx_do_filp_open+0x10/0x10 [ 445.655025][T10113] ? __pfx_kfree_link+0x10/0x10 [ 445.655057][T10113] ? alloc_fd+0x471/0x7d0 [ 445.655082][T10113] do_sys_openat2+0x11b/0x1d0 [ 445.655104][T10113] ? __pfx_do_sys_openat2+0x10/0x10 [ 445.655129][T10113] ? __fget_files+0x20e/0x3c0 [ 445.655152][T10113] __x64_sys_openat+0x174/0x210 [ 445.655173][T10113] ? __pfx___x64_sys_openat+0x10/0x10 [ 445.655193][T10113] ? ksys_write+0x1ac/0x250 [ 445.655216][T10113] do_syscall_64+0xcd/0xfa0 [ 445.655233][T10113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.655248][T10113] RIP: 0033:0x7f512098df10 [ 445.655261][T10113] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 445.655276][T10113] RSP: 002b:00007f5121752f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 445.655291][T10113] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f512098df10 [ 445.655300][T10113] RDX: 0000000000000002 RSI: 00007f5121752fa0 RDI: 00000000ffffff9c [ 445.655309][T10113] RBP: 00007f5121752fa0 R08: 0000000000000000 R09: 0000000000000000 [ 445.655320][T10113] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 445.655330][T10113] R13: 00007f5120be6218 R14: 00007f5120be6180 R15: 00007ffdf6b490b8 [ 445.655354][T10113] [ 447.211095][T10121] tipc: Enabled bearer , priority 0 [ 447.452760][T10121] tipc: Disabling bearer [ 447.718178][ T30] audit: type=1400 audit(1762496351.247:2378): avc: denied { ioctl } for pid=10123 comm="syz.4.1112" path="socket:[26672]" dev="sockfs" ino=26672 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 447.744266][T10127] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=10127 comm=syz.4.1112 [ 447.919548][T10132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1111'. [ 447.952969][ T30] audit: type=1400 audit(1762496351.487:2379): avc: denied { create } for pid=10133 comm="syz.3.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 447.975673][T10134] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.228350][ T30] audit: type=1400 audit(1762496351.507:2380): avc: denied { write } for pid=10133 comm="syz.3.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 448.492590][ T31] INFO: task kworker/0:8:5930 blocked for more than 143 seconds. [ 448.710386][ T31] Not tainted syzkaller #0 [ 448.732561][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 448.741592][ T31] task:kworker/0:8 state:D stack:22680 pid:5930 tgid:5930 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 448.758268][ T30] audit: type=1400 audit(1762496351.837:2381): avc: denied { map } for pid=10133 comm="syz.3.1115" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 448.799772][ T31] Workqueue: usb_hub_wq hub_event [ 448.968121][ T31] Call Trace: [ 449.058764][ T30] audit: type=1400 audit(1762496351.837:2382): avc: denied { read write } for pid=10133 comm="syz.3.1115" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 449.098386][ T31] [ 449.109695][ T31] __schedule+0x1190/0x5de0 [ 449.118485][ T31] ? device_del+0x64e/0x9f0 [ 449.126136][ T31] ? device_unregister+0x1d/0xc0 [ 449.145841][ T31] ? i2c_del_adapter+0x53e/0x6f0 [ 449.166929][ T31] ? dvb_usbv2_exit.isra.0+0x45b/0x9f0 [ 449.197088][ T31] ? __lock_acquire+0x622/0x1c90 [ 449.220995][ T31] ? __pfx___schedule+0x10/0x10 [ 449.271459][ T31] ? find_held_lock+0x2b/0x80 [ 449.294883][ T31] ? schedule+0x2d7/0x3a0 [ 449.307020][ T31] schedule+0xe7/0x3a0 [ 449.319098][ T31] schedule_timeout+0x257/0x290 [ 449.325769][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 449.331477][ T31] ? mark_held_locks+0x49/0x80 [ 449.336477][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 449.341762][ T31] __wait_for_common+0x2fc/0x4e0 [ 449.346799][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 449.352263][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 449.358099][ T31] ? __pfx_device_del+0x10/0x10 [ 449.363243][ T31] ? kobject_put+0xab/0x5a0 [ 449.363921][ T30] audit: type=1400 audit(1762496352.897:2383): avc: denied { write } for pid=10135 comm="syz.1.1114" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 449.374646][ T31] i2c_del_adapter+0x546/0x6f0 [ 449.391796][ T30] audit: type=1400 audit(1762496352.897:2384): avc: denied { open } for pid=10135 comm="syz.1.1114" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 449.398729][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 449.425674][ T31] ? kfree+0x2b8/0x6d0 [ 449.429746][ T31] ? dvb_usbv2_exit.isra.0+0x3c6/0x9f0 [ 449.435367][ T31] dvb_usbv2_exit.isra.0+0x45b/0x9f0 [ 449.440659][ T31] dvb_usbv2_probe+0x1f61/0x3e50 [ 449.446163][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 449.451507][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 449.457741][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 449.463441][ T31] usb_probe_interface+0x303/0xa40 [ 449.468630][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 449.474344][ T31] really_probe+0x241/0xa90 [ 449.478889][ T31] __driver_probe_device+0x1de/0x440 [ 449.484223][ T31] driver_probe_device+0x4c/0x1b0 [ 449.489270][ T31] __device_attach_driver+0x1df/0x310 [ 449.494714][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 449.500627][ T31] bus_for_each_drv+0x159/0x1e0 [ 449.505645][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 449.511025][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 449.516261][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 449.522104][ T31] __device_attach+0x1e4/0x4b0 [ 449.526924][ T31] ? __pfx___device_attach+0x10/0x10 [ 449.532245][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 449.537624][ T31] bus_probe_device+0x17f/0x1c0 [ 449.542655][ T31] device_add+0x1148/0x1aa0 [ 449.547201][ T31] ? __pfx_device_add+0x10/0x10 [ 449.552073][ T31] ? mark_held_locks+0x49/0x80 [ 449.556914][ T31] usb_set_configuration+0x1187/0x1e20 [ 449.579171][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 449.586413][ T31] usb_generic_driver_probe+0xb1/0x110 [ 449.592149][ T31] usb_probe_device+0xef/0x3e0 [ 449.597562][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 449.603189][ T31] really_probe+0x241/0xa90 [ 449.607828][ T31] __driver_probe_device+0x1de/0x440 [ 449.613525][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 449.619112][ T31] driver_probe_device+0x4c/0x1b0 [ 449.624755][ T31] __device_attach_driver+0x1df/0x310 [ 449.630260][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 449.637676][ T31] bus_for_each_drv+0x159/0x1e0 [ 449.643640][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 449.649079][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 449.655585][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 449.661432][ T31] __device_attach+0x1e4/0x4b0 [ 449.666365][ T31] ? __pfx___device_attach+0x10/0x10 [ 449.671659][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 449.677054][ T31] bus_probe_device+0x17f/0x1c0 [ 449.681929][ T31] device_add+0x1148/0x1aa0 [ 449.686535][ T31] ? __pfx_device_add+0x10/0x10 [ 449.691565][ T31] ? add_device_randomness+0xb7/0xf0 [ 449.696987][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 449.703174][ T31] usb_new_device+0xd07/0x1a60 [ 449.707951][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 449.712994][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 449.718202][ T31] ? mark_held_locks+0x49/0x80 [ 449.723075][ T31] hub_event+0x2f34/0x4fe0 [ 449.727514][ T31] ? __pfx_hub_event+0x10/0x10 [ 449.732280][ T31] ? assoc_array_apply_edit+0x110/0x6c0 [ 449.737942][ T31] ? rcu_is_watching+0x12/0xc0 [ 449.742868][ T31] process_one_work+0x9cf/0x1b70 [ 449.747803][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 449.753127][ T31] ? __pfx_process_one_work+0x10/0x10 [ 449.758499][ T31] ? assign_work+0x1a0/0x250 [ 449.763094][ T31] worker_thread+0x6c8/0xf10 [ 449.767706][ T31] ? __kthread_parkme+0x19e/0x250 [ 449.773018][ T31] ? __pfx_worker_thread+0x10/0x10 [ 449.778149][ T31] kthread+0x3c5/0x780 [ 449.782218][ T31] ? __pfx_kthread+0x10/0x10 [ 449.786808][ T31] ? rcu_is_watching+0x12/0xc0 [ 449.791568][ T31] ? __pfx_kthread+0x10/0x10 [ 449.796174][ T31] ret_from_fork+0x675/0x7d0 [ 449.800769][ T31] ? __pfx_kthread+0x10/0x10 [ 449.805816][ T31] ret_from_fork_asm+0x1a/0x30 [ 449.810601][ T31] [ 449.813703][ T31] [ 449.813703][ T31] Showing all locks held in the system: [ 449.821568][ T31] 1 lock held by khungtaskd/31: [ 449.826692][ T31] #0: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 449.836571][ T31] 2 locks held by getty/5573: [ 449.841229][ T31] #0: ffff888035e040a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 449.851175][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 449.861370][ T31] 5 locks held by kworker/0:8/5930: [ 449.866589][ T31] #0: ffff88801bbb1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 449.877378][ T31] #1: ffffc900033d7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 449.888621][ T31] #2: ffff888144b15198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 449.897568][ T31] #3: ffff888034765198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 449.906822][ T31] #4: ffff88802941c160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 449.916044][ T31] 4 locks held by udevd/6029: [ 449.920700][ T31] #0: ffff8880337c89e0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 449.929583][ T31] #1: ffff88805651ec88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 449.939081][ T31] #2: ffff88807c2632d8 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 449.948675][ T31] #3: ffff888034765198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 449.958159][ T31] 1 lock held by syz.2.1113/10129: [ 449.963265][ T31] #0: ffffffff8e3cfbc0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 449.973248][ T31] [ 449.975562][ T31] ============================================= [ 449.975562][ T31] [ 449.984071][ T31] NMI backtrace for cpu 0 [ 449.984083][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 449.984102][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 449.984111][ T31] Call Trace: [ 449.984117][ T31] [ 449.984124][ T31] dump_stack_lvl+0x116/0x1f0 [ 449.984156][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 449.984179][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 449.984205][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 449.984228][ T31] watchdog+0xf3f/0x1170 [ 449.984254][ T31] ? rcu_is_watching+0x12/0xc0 [ 449.984276][ T31] ? __pfx_watchdog+0x10/0x10 [ 449.984294][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 449.984321][ T31] ? __kthread_parkme+0x19e/0x250 [ 449.984348][ T31] ? __pfx_watchdog+0x10/0x10 [ 449.984368][ T31] kthread+0x3c5/0x780 [ 449.984385][ T31] ? __pfx_kthread+0x10/0x10 [ 449.984403][ T31] ? rcu_is_watching+0x12/0xc0 [ 449.984425][ T31] ? __pfx_kthread+0x10/0x10 [ 449.984442][ T31] ret_from_fork+0x675/0x7d0 [ 449.984456][ T31] ? __pfx_kthread+0x10/0x10 [ 449.984473][ T31] ret_from_fork_asm+0x1a/0x30 [ 449.984510][ T31] [ 449.984516][ T31] Sending NMI from CPU 0 to CPUs 1: [ 450.104208][ C1] NMI backtrace for cpu 1 [ 450.104222][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 450.104238][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 450.104246][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 450.104273][ C1] Code: d7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 86 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 450.104291][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 450.104304][ C1] RAX: 000000000210ef29 RBX: 0000000000000001 RCX: ffffffff8b60a2a9 [ 450.104313][ C1] RDX: 0000000000000000 RSI: ffffffff8da2b754 RDI: ffffffff8bf07040 [ 450.104321][ C1] RBP: ffffed1003adb490 R08: 0000000000000001 R09: ffffed10170a6655 [ 450.104330][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 450.104338][ C1] R13: ffff88801d6da480 R14: ffffffff90820cd0 R15: 0000000000000000 [ 450.104347][ C1] FS: 0000000000000000(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 450.104360][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 450.104369][ C1] CR2: 00007f0ab7573360 CR3: 000000006f6d4000 CR4: 00000000003526f0 [ 450.104378][ C1] Call Trace: [ 450.104382][ C1] [ 450.104387][ C1] default_idle+0x13/0x20 [ 450.104401][ C1] default_idle_call+0x6c/0xb0 [ 450.104415][ C1] do_idle+0x38d/0x500 [ 450.104434][ C1] ? __pfx_do_idle+0x10/0x10 [ 450.104450][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 450.104467][ C1] cpu_startup_entry+0x4f/0x60 [ 450.104482][ C1] start_secondary+0x21d/0x2b0 [ 450.104501][ C1] ? __pfx_start_secondary+0x10/0x10 [ 450.104521][ C1] common_startup_64+0x13e/0x148 [ 450.104540][ C1] [ 453.315962][ T5187] udevd[5187]: worker [6029] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time