last executing test programs: 7.636290131s ago: executing program 3 (id=1795): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x5, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc8f0}, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) io_uring_setup(0x1dde, 0x0) syz_io_uring_setup(0x16e, &(0x7f0000000b00)={0x0, 0xfffffffd, 0x10100, 0x0, 0x4}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={0x0}) 7.386375597s ago: executing program 2 (id=1796): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)) ioctl$PIO_SCRNMAP(r1, 0x4b41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="800002000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = dup(0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)={0x14, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x102}]}, 0x14}], 0x1}, 0x0) ioctl$EVIOCGABS0(r5, 0x80184540, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b"], 0x0) 7.038306601s ago: executing program 3 (id=1798): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f80), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x2, 0x25dfdbfc, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf2510000000050010000400000005000f000300000008000100bb22eb"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) 6.811944159s ago: executing program 3 (id=1801): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f0000000380)='trusted\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x45, 0x2, 0xfffff00c}, {0x20, 0x4, 0x0, 0xa570}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff0000000200"/20, @ANYRES32=0x0, @ANYRESHEX=r3, @ANYBLOB="fdffffff000000000400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r8) setgroups(0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, r6, r8, r6, r8, r8]) setxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="6f73782a28e62600"], &(0x7f0000000480)='keyring\x00', 0x8, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r8], 0x48) r9 = socket$inet6(0xa, 0x2, 0x0) clock_nanosleep(0xb5cff20c011b82d2, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r11, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) write$FUSE_BMAP(r5, &(0x7f00000004c0)={0x18, 0x0, r11, {0x2}}, 0x18) r12 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000370400000000f8541549b670c46a", @ANYRES32=r13, @ANYBLOB="83040500000000001c0012800e00010069703665727370616e00000008000280040012"], 0x3c}}, 0x0) sched_setscheduler(r3, 0x3, &(0x7f0000000080)=0x9) sendmmsg$inet(r9, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @empty, @private=0xa010100}}}], 0x20}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 6.114191471s ago: executing program 3 (id=1802): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xf8) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-avx\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000180)='devtmpfs\x00', 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x61, 0x5, 0x0, 0x7a, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x3504, 0x0, 0x0, 0xb7, 0xfffffffe, 0x5}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={0x0, 0xa8}}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="738d63757269747900000040004100000000000000000000000000000000000004"], 0x68) 4.676531225s ago: executing program 1 (id=1811): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f00000000c0)="95003724090000ce", 0xffffffffffffffbd, 0x20008005, &(0x7f0000000180)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x4}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0xb3a5, 0x7, 0x5, 0x80, 0xffffce4f, 0x0, 0xf7d, 0x7210, 0x0}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x7, 0x0, 0x1, 0x9, r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000280)="dd"}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) 4.535094375s ago: executing program 4 (id=1812): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044810) r6 = syz_pidfd_open(r1, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xff}, {}, @raw32={[0x0, 0x0, 0x7f]}}], 0x1c) poll(&(0x7f0000000380)=[{r6, 0x22c3}, {r7, 0x30}, {r3, 0x2692}], 0x3, 0xfff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r6, 0xffffffffffffffff, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="9194b0adf66c2e14adc5f78a6f502969bc361926567aa2ed725085ab546798bbccfdd4046a6b9e158acffd6628119723b47d28d88d8b7b81676a27fef553616ee9ab9d9e4f41a3b175359b8da8ab9cfd9552a5968824725daeffd451400866e0abbee46072e2ebd85055716354e9fd986ee001dfe883411090464cdb3dc376532943ef5a2126799572185f4e81baf07ba7e79717d83630d83aa5eb61452370c58c55b59cc281c2e3f5e02b9f8b5a09f8249a984db4b43e926f50b7c1edfa6e569a1c88775b4f334b4b7927825da309441e0b0c10b105880c490caea6761b020b70b0241837423b93ed905a3ab5e5be2a9ebed72cda302303264d", @ANYBLOB, @ANYRESHEX=r9, @ANYBLOB='\x00'/10, @ANYRES16=r0], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYRESOCT=r4, @ANYRESHEX, @ANYRES32=r10, @ANYRESHEX=r5], 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 4.212002421s ago: executing program 2 (id=1813): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x280000, 0x0) write$cgroup_int(r6, &(0x7f0000000540)=0x4e8d, 0x12) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r7) sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xf4, r8, 0x2, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0xf4}}, 0x40000085) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r10) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r9, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x20}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "cfb6dab520"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "3b8c832bcde3b36c242126c5ce"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000000}, 0xc080) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, 0x0, &(0x7f0000000000)) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x240}}) 4.163876771s ago: executing program 4 (id=1814): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x145100) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) socketpair(0x1, 0x1, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x24}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.161227541s ago: executing program 1 (id=1815): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = epoll_create(0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, 0x0}) sendmsg$netlink(r2, &(0x7f00000004c0)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x201200}, 0xc, &(0x7f00000008c0)=[{&(0x7f0000000200)={0x10, 0x26, 0x1, 0x70bd27, 0x25dfdbfd}, 0x10}, {&(0x7f0000000380)={0xf8, 0x25, 0x100, 0x70bd2b, 0x25dfdbff, "", [@generic="c088672fbce33051948c9dae593c62d38cd229ad467cea150e5247718602cec7a7181cc235ac04ad846ba0bf7424cf9dce8eea056eb0320c271dbeae83b84bad3a7d6ec08e130444a78e6532a3a013e326507afe552ba4ef5ad3801735301cfcfe30e569f072f922610b0899813a3ebbbbfcf66434bd9409ffc5cbdec3dd80861d7353ba0fd20383d54296a66696e90c0eaac774d71a9c79db53c21d48847e918937454141c5c7353133764a78766c1dce437966d3b7c339a37464495ba5d1d363058e976976087760deb85999124d4f43a0110296e7b1d2dda8993e58924f726f9943e2", @generic="b2"]}, 0xf8}, {&(0x7f0000000540)={0x208, 0x1e, 0x800, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x41, 0x0, 0x0, @fd=r2}, @typed={0x30, 0xf3, 0x0, 0x0, @binary="9039adb219ac4049bcbee512076cda0f381d8784db4740220c45f84ac20e65a6cbadd6bf8e2572c87cdbf176"}, @nested={0xf8, 0x1b, 0x0, 0x1, [@generic="2711b50728dfe632469d28bb993b5d2340b61f884c2a02e319749f25e73c5534be83db1bc8fd8c", @generic, @generic="85e698127e764895f2323fd6a400b9fff29139841cbda5d8f608b7bbafad3e790b94442a28d8e09c5909736a5536b4a1d6b8694c13566d944f9e5ad23ea5bcbf26a19244790a9d78f37e57cb6575e75b337b732d986906385be28f6510622bb7fd8d002b5d5bfeb9d8420bc1ebe01059fde00c52bf7e9f4ec772353dd800f25c590a3e94bf97823fe2fd7ad0c081cc5f9f2e328b547a01402b45242350224b0c5e5e23dea35b70a36f3f9daf9044d377832fae2816df54ad69c05715950cb922463e1d88ad5dae0025", @typed={0x4, 0x11d}]}, @typed={0x4, 0x10e}, @generic="883ec9ec82cfa94285e6306446c418c5794caa52dd14a8e25278e956e792d2f56a4020e643951bcbca24821261f2ceeaa944618e57c3dc2530a1cb2870060de7539c994c8bab795a45d4dfcc3e7263dc4f5916adde51ea875211299045028e90d2afbb85f27f5521f991baeb4639679d68f9bc9dc921d9c4817615e32257677faddc070bc0aa48afdbed88f01e844c86b215428c742b85c82c9b6e9141d809f49b3a96d1be549a3a916be6447094e446c9f82c3d5887cc9ea2ca45e13c47ba0a01f4"]}, 0x208}, {&(0x7f0000000480)={0x18, 0x1c, 0x2, 0x70bd2a, 0x25dfdbff, "", [@typed={0x8, 0xd9, 0x0, 0x0, @pid=r3}]}, 0x18}, {&(0x7f0000000780)={0x10c, 0x1a, 0x0, 0x70bd28, 0x25dfdbfb, "", [@generic="1f4deccba05f069b59ef4b28d6b648f944962da721f86732bdfcd7ba3284666ba08522cb1f58e7c8ebc4b57fd5922c5880b25ab6a435a2ecd8f770cb6198e391ffe2b058e7030236966be29cd5c6a31a0eb6f48a3ac2889c34a21d05fdcc698f83ec2b1dde675768eb4dd64d3e96695a6c1d9ade0614be26e79b50ead321907746916489d9833b54ecfaf6c13edb36c1eb0ceb14", @typed={0x4, 0x86}, @nested={0x63, 0xa8, 0x0, 0x1, [@nested={0x4, 0xf9}, @nested={0x4, 0xc2}, @typed={0x6, 0x1a, 0x0, 0x0, @str='^\x00'}, @nested={0x4, 0x142}, @nested={0x4, 0x11a}, @generic="f271580b73fe6ffc04b32be2d5642811596c584bf2f87a542a36faabb66bcbfedfa50161ac1829e1980cd3d53365491e134f3b", @typed={0xe, 0x6e, 0x0, 0x0, @str='syzkaller\x00'}, @nested={0x4, 0x86}]}]}, 0x10c}], 0x5, 0x0, 0x0, 0x4004015}, 0x4048880) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f00000001c0)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000180)) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000000}) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000150081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffc, @empty, 0x7f}, 0x1c) 3.360536358s ago: executing program 1 (id=1817): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f0000000100)="8b13ca5ceca377ae09508b0a994822bcd5aa1aaba11a3cd6d6ad9cb0280178d7cff6732c46a57872525bf2bf4d297f553e6a9171dbcafd312b93540be13e5d5ac8", 0x41, 0x6, 0x0, 0x2}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141000010880020010000000000000000000000000000fe8000000000000000000000000000aa000000000007"], 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000060054000000060a0b040000000000000000027fcff7d700000028000480240001800b00010065787468647200001400028008000640000000040800074070cc00010000010073797a30000000000900020073797a320000780000140000001100010000000000000000000000000a292806f2e47bb928927066e3591cfc31dac9e8"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="ee6c392755760ade9e22da8217c55f545f175f70946273740a6afa1b3141c8a88ed9c463e279b6ab033a817f5548419f882c00cd4e17d51727d8e10f2886d0b02f2a8578a9d1a185868e404ef8dfc8db88a28336607abb8b232ded51bd54952ada8d7688192f2dfc31276e798bc76b1c549f52f7317bfd09198e1200f3f548e1e92ade9781555fc367a1cfb8a829dcb24a142d5af93444de43fca52cf374b5427e733ca4558f0caad657047226"}, {&(0x7f0000000080)="7e9bc345077a693eb25a108a1cb9"}, {&(0x7f0000000740)="4fcc9b23286f4f7d916d90a6a1193aa5df670666fdf96108d0b1cf53ef4d18e4c2e3071785977c989f61457285b833f2d2f504facc871c2f0ea593a14b902c55ef764ddca19c4aa7d37eb76a75cc8ac537d3b720d897520416722d75402740da9925ef50c6054003a46fd6dc3352dc099426a9245d82738796184d8e4b578802e628f3cb8867a67b04adb8835c83f612f28186cbfc78fd7df688cba95ba08408f1781cd0e6b54574bd91c1b2da9ef8fe5e8debc69e65c60716e14388dfca090e864c8553d3e91b2347a973e9bc8efbe236fba79fad54c12029be399e8a76"}, {&(0x7f0000000980)="407d6bcd4efacefbd9d5bafd6d73a5e5dd798afa4db08f753907d96a495395f1530eabe28ae55042d271682bade8accbc948ff71232ac274f695b27d14908429fd6b1ac26da38a08437e849b64c1645427a59b4cb9529cfd9b2b6ab291c0d27f2fef29ed06152fa1cf89bdb3a14e169ae67effba6942c980db38e0927bbf6f41f0fc49913e7bac2113a3073e28423ffc6744a05e3aa3bfd39b47cdf598d3238114c7722de3fead5a00605129ffe8f87ddb46"}], 0x3, &(0x7f0000000840)=[@op={0xc, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18}], 0x48}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/91, 0x5b}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) socket$inet6(0xa, 0x80002, 0x88) r4 = syz_open_dev$admmidi(&(0x7f0000000280), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f00000001c0)={0x1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x200000000000001) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x4000000, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x0, 0x81, 0x4, 0x80000}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.351074132s ago: executing program 4 (id=1818): r0 = io_uring_setup(0x875, &(0x7f0000000080)={0x0, 0xcb29, 0x2, 0x3, 0x1f7}) r1 = io_uring_setup(0xe8b, &(0x7f0000000340)={0x0, 0x896d, 0x8000, 0x0, 0x259, 0x0, r0}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000001800)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x1a}, @ioring_restriction_sqe_op={0x1, 0x22}, @ioring_restriction_sqe_flags_required={0x3, 0x22}], 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='nilfs2_segment_usage_freed\x00', 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000cb3200"/20, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r3}, &(0x7f0000000a00), &(0x7f0000000ac0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91524fc60", 0x14}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) 3.214970917s ago: executing program 2 (id=1820): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'macvlan0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x9, 0x55}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, 0x0) read$FUSE(r5, 0x0, 0x0) preadv(r5, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000001fd8), &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x64cc0}, [@IFLA_PHYS_SWITCH_ID={0x9, 0x24, "50d22efcf4"}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xa}, @IFLA_TXQLEN={0x8, 0xd, 0x415}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x4c}}, 0x40005) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='smb3\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000240)=0x1) 2.573631796s ago: executing program 3 (id=1821): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x5, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc8f0}, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) io_uring_setup(0x1dde, 0x0) syz_io_uring_setup(0x16e, &(0x7f0000000b00)={0x0, 0xfffffffd, 0x10100, 0x0, 0x4}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={0x0}) 1.986364441s ago: executing program 0 (id=1822): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x68040200) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r3, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x38, r0, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x38}}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="de", 0x1}, {&(0x7f0000000280)="940577268fe271f795a8a01ab587541df96ded95660ea8fc52e2d9ad4994f165059c666ee7c95d83501bf814fe0846aedb006ed868a773bfe00daf5778b68d69c7ce6185822224caf6eee5b09ef53e5b3aa7c2bfa79abb5e7dc664398a4ff252493e6d57b9098a2a3e61c073a9b5d652e3b4835fba2f1873b765b44b153fa6238d775d143179e2f91675c152a938c415990bfd4e7baeed8f8a31cfefd6f0ceddb843b32804e8ed2384d0babab3060fd2674a0664baeb47d4d72641512b2b7684a092a39525bc90cbd823a137abf365c7f0b3e6040a6c9e8508f51fffb9463024f8bc34847e", 0xe5}], 0x2, 0x72, 0x0) 1.985537032s ago: executing program 3 (id=1823): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)) ioctl$PIO_SCRNMAP(r1, 0x4b41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="800002000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = dup(0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)={0x14, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x102}]}, 0x14}], 0x1}, 0x0) ioctl$EVIOCGABS0(r5, 0x80184540, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b"], 0x0) 1.916859667s ago: executing program 1 (id=1824): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0xf17e, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp6=r2}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4) r4 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x109041) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x6, 0xfb, 0x0, 0x81, 0xa5, 0x5, 0x9, 0x1, 0x4, 0x8, 0x3}, 0xe) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000040)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x200000000, 0x0, 0x12, 0x0, 0x1c, "fee8a2a978fc179fd1f8a0e91ddaace7e2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac00", "90be8b38559265406c09306003d8002000", [0x0, 0xffffffffffffffff]}}) close_range(r0, 0xffffffffffffffff, 0x0) 1.85840824s ago: executing program 2 (id=1825): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000000c0)={'batadv0\x00', 0x800}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x35e}) (fail_nth: 3) 1.771413177s ago: executing program 1 (id=1826): syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x2103, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r3, 0x200000002, 0x0) pread64(r2, &(0x7f0000000040)=""/103, 0x67, 0x67) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) syz_clone(0x20000400, &(0x7f0000000280)="44b063a667d143aca67c80f82a747e0a4e3bfe8bd5863da3e98741434f8ee0df87ed6cdb205bcfc03ed6b073fd84a76269a2720d3f725f866f03da2e449a0e710842c83b0aff06d26c78aa5f589aeaa71a30765e989a96017e941bfc1c24d5a12ff45b6cf5bb08771676d4007ac96a970839dc873cdcfda6028d616fdd8ee3d6a1e7d5bff3e59b9387fee73dfee25924570aa83d7e9083fa080c6b953364b544d993624fb97989717dda27b5995a3f877ae84ccdd86c75e700059b24f025c714dedb0cc6ea34", 0xc6, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240)="e4a8c9012389ab6b4b1df4747d43f701ac42e2a3c7fd92f283c14385e680426ef3ca9bd28f07925af1d8e6e611515acf898f3041c7c485") 1.725731482s ago: executing program 4 (id=1827): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.4455463s ago: executing program 0 (id=1828): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000000c0)={'batadv0\x00', 0x800}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x35e}) 1.384717835s ago: executing program 4 (id=1829): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x100}) socket$kcm(0x2, 0xa, 0x2) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_delroute={0xac, 0x19, 0x100, 0x70bd2d, 0x25dfdbfb, {0xa, 0x20, 0x10, 0xa, 0xff, 0x1, 0xfe, 0x3, 0x2800}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}}, @RTA_IIF={0x8}, @RTA_UID={0x8}, @RTA_METRICS={0x72, 0x8, 0x0, 0x1, "914acea9ffd1d64cab4428c0bf4fd2237ee4839a5e855f55cf56ea88a5537c80b5bdb9a5ba3fdc9bb7cf30ecac237db25288b4506fee6d63b94d7e43a4248a2fb4c0862b6eeb4bd42f657ea431a65aabb1d1cf1975e2ff132c05cb12de7f6d383ae89988277e6537371be6e27db8"}]}, 0xac}, 0x1, 0x0, 0x0, 0x40890}, 0x2404c851) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.312340324s ago: executing program 2 (id=1830): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f0000000000)=[{0x3, 0xfffd}], 0x1, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dc4a) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x2000000, [{0x9, 0x4}, {0x0, 0x10000}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = fsopen(0x0, 0x0) fsmount(r6, 0x0, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f00000002c0)={0x20, 0x3, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x20}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x2, r8, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 1.291176202s ago: executing program 0 (id=1831): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYBLOB="f3a3fc7d9ff37f8cbe26290e01a2e3e984493ddf0a0fc017ade4c5743c48862389904c661086c9cdd9a6a94c57725eebe339c13f305788ca57d1764f97cf3f244e57992db921d3afc7a0b0ae19a4c2acd1d0629f4a74b1637d0efafa7a7cd23c0c369ef68ec3fbdd6fe1f54f753f444707819951b9a52b9df026f3d02a5eab1133e01711848cfb08575c57517f60"], 0x1c}}, 0x40000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = dup3(r3, r1, 0x80000) getsockname$packet(r4, 0x0, 0x0) r5 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) tkill(r5, 0x12) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000001f0001"], 0x90}, 0x1, 0x0, 0x0, 0x44}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x5, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xd}, {0xf, 0xd}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r7, &(0x7f0000005100)=[{{0x0, 0x0, 0x0}, 0x17f0b592}, {{0x0, 0x0, 0x0}, 0x3bf}], 0x2, 0x40008120, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={0x0, r4, 0x4000, r6}, 0x18) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9f, 0xe, 0x5b, 0x40, 0x1235, 0x18, 0xf0ee, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa7, 0xdd, 0x2d}}]}}]}}, 0x0) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000100)={r8}) write$bt_hci(r9, &(0x7f0000000040)=ANY=[], 0xffffffffffffff44) r10 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) accept4(r10, 0x0, 0x0, 0x80000) 1.068795264s ago: executing program 4 (id=1832): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014935d1071042c03e9ba0102cc3c0902120001000000000904"], 0x0) sched_rr_get_interval(0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0x98f909, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), r9) sendmsg$GTP_CMD_GETPDP(r9, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r10, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c040) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fddbae24b80127c93d3518ea", @ANYRES32=r4, @ANYBLOB="1400550091b2d68ec6904507b6a7170409acb4630a0006009a83629c00bc0000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000094}, 0x20000004) 539.1096ms ago: executing program 0 (id=1833): r0 = socket$netlink(0x10, 0x3, 0x8000000004) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r3, 0x0, 0xa0028000}, 0x38) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000100)={0x6}, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa005e850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f00000002c0)="88", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) r6 = io_uring_setup(0x7404, &(0x7f0000000000)={0x0, 0xcb94, 0x41446e2d353b833d, 0x1, 0x2e1}) syz_io_uring_setup(0x6ff7, &(0x7f0000000400)={0x0, 0xe4e2, 0x4002, 0x2, 0x204, 0x0, r6}, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000006000000000000", 0x58}], 0x1) 360.225716ms ago: executing program 0 (id=1834): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe79) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010027bd7000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f0000000480)='./file0\x00', 0x143522, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='cachefiles_write\x00', r2, 0x0, 0x4}, 0xfffffc89) 235.687068ms ago: executing program 0 (id=1835): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000a40)={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000672e0000000000000000000a5c000000060a0b04000000000000000002000001300004802c0001800b0001006e756d67656e00001c000280080003400000000008000240fffffffc080001400000000a0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000a00000a"], 0x84}, 0x1, 0x0, 0x0, 0x880}, 0x0) close(r2) getsockopt$inet_buf(r1, 0x0, 0x30, 0x0, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030000010000000000000000010000000900010073797a30000000000900030073797a320000000058000000060a010400000000000000000100000008000b40000000003000048010000180090001006d617371000000001c0001800a00010072656469720000000c000280080001400000000b0900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}}, 0x0) 878.746µs ago: executing program 1 (id=1836): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000280)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0xf0, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x7f}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "93e4a7212eefead36bf5f137991b6e4be4db5eded16fbf41"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "000e13a5921eb33b9851a4af7bc09dd399dda7e1e90a73ea"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "889b22811da26317d0ab3d9606599029b05dd225b635c3c9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bf1113e09a25c52dcdf3011a635a710cd167b8d988dff0f4"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8adf6e2f2f9af6ed794add2f93015139d33501a7171d9f8e"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fbfed6b39dead4b69aa9e8ddeda1eb88620a508473bd9470"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_batadv\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x91}, 0x24044844) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1837): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x92}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7300, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x30, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r4, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0xbe8166cf3703f1da, 0x6, 0x8, 0x8a3, 0x40, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x8, 0xffff, 0x4}}) r7 = socket(0x2a, 0x2, 0xffffffff) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8001}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0xfffffffffffffe57, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x7}}]}}]}, 0x3c}}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040010}, 0x8080) sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000680)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) kernel console output (not intermixed with test programs): il, usb_ep_enable returned -22 [ 536.048975][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 536.061441][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.125954][ T24] usb 5-1: config 0 descriptor?? [ 536.259094][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 536.259111][ T30] audit: type=1400 audit(1743676451.147:4018): avc: denied { create } for pid=11852 comm="syz.1.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 536.476580][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.485586][ T30] audit: type=1400 audit(1743676451.347:4019): avc: denied { connect } for pid=11852 comm="syz.1.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 536.543746][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.572491][ T30] audit: type=1400 audit(1743676451.347:4020): avc: denied { ioctl } for pid=11852 comm="syz.1.1407" path="socket:[27767]" dev="sockfs" ino=27767 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.604153][ T30] audit: type=1400 audit(1743676451.347:4021): avc: denied { read write } for pid=11852 comm="syz.1.1407" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 536.629572][ T30] audit: type=1400 audit(1743676451.347:4022): avc: denied { open } for pid=11852 comm="syz.1.1407" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 536.887813][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'. [ 536.947349][T11836] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 536.975804][T11836] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 537.150644][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 537.156918][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 537.382532][ T5139] Bluetooth: hci4: command 0x0406 tx timeout [ 537.504670][ T24] usb 5-1: USB disconnect, device number 48 [ 537.517074][T11836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.585427][T11836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.631782][T11836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.652796][T11836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.698592][T11836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.739724][T11836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.102108][ T5906] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 539.146033][ T5906] usb 3-1: USB disconnect, device number 40 [ 539.322651][ T30] audit: type=1400 audit(1743676454.197:4023): avc: denied { read } for pid=11895 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.420491][ T30] audit: type=1400 audit(1743676454.247:4024): avc: denied { open } for pid=11895 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.489747][T11904] mkiss: ax0: crc mode is auto. [ 539.499145][ T30] audit: type=1400 audit(1743676454.247:4025): avc: denied { getattr } for pid=11895 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.592586][ T5906] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 539.624660][ T30] audit: type=1400 audit(1743676454.507:4026): avc: denied { bind } for pid=11887 comm="syz.3.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 539.742393][ T30] audit: type=1400 audit(1743676454.507:4027): avc: denied { getopt } for pid=11887 comm="syz.3.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 539.842586][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.875621][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.920261][ T5906] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 539.961854][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.002247][ T5906] usb 3-1: config 0 descriptor?? [ 540.222636][T11925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1419'. [ 540.313761][T11927] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) [ 540.369312][T11930] exFAT-fs (nullb0): invalid boot record signature [ 540.430038][T11930] exFAT-fs (nullb0): failed to read boot sector [ 540.480277][T11930] exFAT-fs (nullb0): failed to recognize exfat type [ 540.672847][ T5906] usbhid 3-1:0.0: can't add hid device: -71 [ 540.678861][ T5906] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 540.736175][ T5906] usb 3-1: USB disconnect, device number 41 [ 540.798891][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.072736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.081115][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.512284][T11964] mkiss: ax0: crc mode is auto. [ 542.775694][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 542.776180][ T30] audit: type=1400 audit(1743676457.667:4040): avc: denied { bind } for pid=11968 comm="syz.2.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 543.056498][ T30] audit: type=1400 audit(1743676457.697:4041): avc: denied { write } for pid=11968 comm="syz.2.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 543.110311][ T30] audit: type=1400 audit(1743676457.917:4042): avc: denied { create } for pid=11963 comm="syz.1.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 543.174325][ T30] audit: type=1400 audit(1743676457.937:4043): avc: denied { write } for pid=11963 comm="syz.1.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 543.328636][ T5874] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 543.613842][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.689242][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.723899][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 543.746194][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1431'. [ 543.763688][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1431'. [ 543.811639][ T5874] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 543.897324][ T30] audit: type=1400 audit(1743676458.727:4044): avc: denied { create } for pid=11963 comm="syz.1.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 543.924946][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.707434][ T5874] usb 5-1: config 0 descriptor?? [ 545.744409][ T30] audit: type=1400 audit(1743676458.737:4045): avc: denied { connect } for pid=11963 comm="syz.1.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 546.160460][ T24] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 546.161380][T12002] mkiss: ax0: crc mode is auto. [ 546.255364][ T30] audit: type=1400 audit(1743676461.137:4046): avc: denied { ioctl } for pid=11998 comm="syz.3.1435" path="socket:[27941]" dev="sockfs" ino=27941 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 546.383511][ T30] audit: type=1400 audit(1743676461.277:4047): avc: denied { ioctl } for pid=11998 comm="syz.3.1435" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 546.421661][ T5874] usbhid 5-1:0.0: can't add hid device: -71 [ 546.433445][T12007] mkiss: ax1: crc mode is auto. [ 546.446252][ T5874] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 546.489955][ T5874] usb 5-1: USB disconnect, device number 49 [ 546.664491][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 546.676440][ T24] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 546.697104][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.719931][ T24] usb 3-1: config 0 descriptor?? [ 546.873741][T11995] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 547.220295][ T30] audit: type=1400 audit(1743676462.107:4048): avc: denied { create } for pid=12014 comm="syz.0.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 547.250717][T12015] PKCS7: Unknown OID: [5] 0.0 [ 547.255509][T12015] PKCS7: Only support pkcs7_signedData type [ 547.342509][ T5874] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 547.537426][ T5874] usb 5-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 547.751149][ T24] elan 0003:04F3:0755.001C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 547.802839][ T30] audit: type=1400 audit(1743676462.187:4049): avc: denied { read write } for pid=12014 comm="syz.0.1440" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 547.837312][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.033944][ T5870] usb 3-1: USB disconnect, device number 42 [ 548.043895][ T30] audit: type=1400 audit(1743676462.187:4050): avc: denied { open } for pid=12014 comm="syz.0.1440" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 548.073949][ T5874] usb 5-1: config 0 descriptor?? [ 548.094177][ T30] audit: type=1400 audit(1743676462.817:4051): avc: denied { ioctl } for pid=12019 comm="syz.0.1441" path="/dev/video37" dev="devtmpfs" ino=1050 ioctlcmd=0x5619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 548.811878][T12009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.822223][ T5874] logitech-djreceiver 0003:046D:C71C.001D: hidraw0: USB HID v0.00 Device [HID 046d:c71c] on usb-dummy_hcd.4-1/input0 [ 548.862761][T12009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.895492][T12009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.918904][T12009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.003685][T12009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.012306][T12009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.089214][T12030] SELinux: ebitmap: truncated map [ 549.093963][ T5874] usb 5-1: USB disconnect, device number 50 [ 549.142423][ T30] audit: type=1400 audit(1743676464.017:4052): avc: denied { name_bind } for pid=12037 comm="syz.0.1447" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 549.168435][T12030] SELinux: failed to load policy [ 549.316855][ T30] audit: type=1400 audit(1743676464.017:4053): avc: denied { node_bind } for pid=12037 comm="syz.0.1447" saddr=fe88::1 src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 549.510914][T12042] netlink: 'syz.2.1446': attribute type 1 has an invalid length. [ 549.518770][T12042] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1446'. [ 549.561659][ T30] audit: type=1400 audit(1743676464.357:4054): avc: denied { create } for pid=12039 comm="syz.2.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 549.802289][ T30] audit: type=1400 audit(1743676464.367:4055): avc: denied { bind } for pid=12039 comm="syz.2.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 549.821982][ T30] audit: type=1400 audit(1743676464.367:4056): avc: denied { listen } for pid=12039 comm="syz.2.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 549.855849][ T30] audit: type=1400 audit(1743676464.377:4057): avc: denied { connect } for pid=12039 comm="syz.2.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 549.901666][T12046] fuse: Unknown parameter 'grou00000000000000000000' [ 549.942783][ T30] audit: type=1400 audit(1743676464.377:4058): avc: denied { write } for pid=12039 comm="syz.2.1446" path="socket:[28946]" dev="sockfs" ino=28946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 550.234237][T12043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.384580][T12061] IPVS: length: 127 != 8 [ 550.396357][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.913038][T12067] mkiss: ax0: crc mode is auto. [ 552.337719][T12081] fuse: Unknown parameter 'gr' [ 552.664313][T12083] SELinux: ebitmap: truncated map [ 552.676552][T12083] SELinux: failed to load policy [ 552.857287][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 552.857302][ T30] audit: type=1400 audit(1743676467.747:4075): avc: denied { write } for pid=12080 comm="syz.4.1458" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 552.893334][ T30] audit: type=1400 audit(1743676467.777:4076): avc: denied { create } for pid=12080 comm="syz.4.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 552.947951][ T30] audit: type=1400 audit(1743676467.787:4077): avc: denied { read append } for pid=12080 comm="syz.4.1458" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 552.979294][ T30] audit: type=1400 audit(1743676467.787:4078): avc: denied { open } for pid=12080 comm="syz.4.1458" path="/dev/sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 553.172512][ T24] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 553.393979][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 553.406049][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.439976][ T24] usb 2-1: config 0 descriptor?? [ 553.574262][ T30] audit: type=1400 audit(1743676468.467:4079): avc: denied { write } for pid=12102 comm="syz.0.1466" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 553.577940][T12105] netlink: 'syz.0.1466': attribute type 13 has an invalid length. [ 553.935193][ T5870] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 554.081971][T12105] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.089334][T12105] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.145719][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 554.147237][ T24] logitech-djreceiver 0003:046D:C71C.001E: hidraw0: USB HID v0.00 Device [HID 046d:c71c] on usb-dummy_hcd.1-1/input0 [ 554.179910][ T5870] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 554.189413][ T5870] usb 5-1: config 0 has no interface number 0 [ 554.210198][ T5870] usb 5-1: config 0 interface 184 has no altsetting 0 [ 554.258817][ T5870] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 554.272800][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.302282][T12105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.312481][ T5870] usb 5-1: Product: syz [ 554.316669][ T5870] usb 5-1: Manufacturer: syz [ 554.330119][ T5870] usb 5-1: SerialNumber: syz [ 554.347373][T12089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.360599][ T5870] usb 5-1: config 0 descriptor?? [ 554.366185][T12089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.366295][T12105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.377932][T12089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.391376][T12089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.426451][ T5870] smsc75xx v1.0.0 [ 554.442802][T12089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.455692][T12089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.497064][ T5834] usb 2-1: USB disconnect, device number 42 [ 554.591873][ T30] audit: type=1400 audit(1743676469.477:4080): avc: denied { create } for pid=12110 comm="syz.3.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 554.625661][T12105] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.642849][T12105] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.658599][T12105] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.691426][ T5870] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 554.728382][T12105] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.732930][ T5870] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 554.792633][ T5870] usb 5-1: USB disconnect, device number 51 [ 554.862587][ T30] audit: type=1400 audit(1743676469.737:4081): avc: denied { create } for pid=12110 comm="syz.3.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 555.703802][T12123] loop6: detected capacity change from 0 to 524287999 [ 556.704747][ T5870] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 556.804050][T12138] mkiss: ax0: crc mode is auto. [ 556.902627][ T5870] usb 5-1: Invalid ep0 maxpacket: 64 [ 556.914616][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1473'. [ 557.062498][ T5870] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 557.252528][ T5870] usb 5-1: Invalid ep0 maxpacket: 64 [ 557.276585][ T5870] usb usb5-port1: attempt power cycle [ 557.522962][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.531168][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.848317][ T30] audit: type=1400 audit(1743676472.737:4082): avc: denied { create } for pid=12152 comm="syz.0.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 557.919504][ T5870] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 558.709000][T12159] FAULT_INJECTION: forcing a failure. [ 558.709000][T12159] name failslab, interval 1, probability 0, space 0, times 0 [ 558.722005][T12159] CPU: 1 UID: 0 PID: 12159 Comm: syz.0.1479 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 558.722028][T12159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 558.722039][T12159] Call Trace: [ 558.722044][T12159] [ 558.722051][T12159] dump_stack_lvl+0x16c/0x1f0 [ 558.722076][T12159] should_fail_ex+0x512/0x640 [ 558.722093][T12159] ? __kvmalloc_node_noprof+0x122/0x600 [ 558.722112][T12159] should_failslab+0xc2/0x120 [ 558.722132][T12159] __kvmalloc_node_noprof+0x135/0x600 [ 558.722149][T12159] ? alloc_netdev_mqs+0xb5b/0x1570 [ 558.722174][T12159] ? alloc_netdev_mqs+0xb5b/0x1570 [ 558.722191][T12159] alloc_netdev_mqs+0xb5b/0x1570 [ 558.722216][T12159] ip6_tnl_locate+0x3d1/0x7a0 [ 558.722231][T12159] ? __might_fault+0xe3/0x190 [ 558.722252][T12159] ? __pfx_ip6_tnl_locate+0x10/0x10 [ 558.722275][T12159] ip6_tnl_siocdevprivate+0x339/0x720 [ 558.722291][T12159] ? __pfx___schedule+0x10/0x10 [ 558.722314][T12159] ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10 [ 558.722349][T12159] ? dev_ifsioc+0xe1/0x1f70 [ 558.722370][T12159] dev_ifsioc+0x8eb/0x1f70 [ 558.722389][T12159] ? __pfx_dev_ifsioc+0x10/0x10 [ 558.722405][T12159] ? __pfx___mutex_lock+0x10/0x10 [ 558.722424][T12159] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 558.722441][T12159] ? rcu_preempt_deferred_qs_irqrestore+0x4f5/0xbc0 [ 558.722473][T12159] dev_ioctl+0x1b2/0x10e0 [ 558.722492][T12159] sock_ioctl+0x5b3/0x6b0 [ 558.722517][T12159] ? __pfx_sock_ioctl+0x10/0x10 [ 558.722539][T12159] ? lockdep_hardirqs_on+0x51/0x110 [ 558.722565][T12159] ? __x64_sys_ioctl+0x12c/0x200 [ 558.722589][T12159] ? __pfx_sock_ioctl+0x10/0x10 [ 558.722613][T12159] __x64_sys_ioctl+0x190/0x200 [ 558.722638][T12159] do_syscall_64+0xcd/0x260 [ 558.722659][T12159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.722676][T12159] RIP: 0033:0x7fee8998d169 [ 558.722689][T12159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.722705][T12159] RSP: 002b:00007fee877d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 558.722720][T12159] RAX: ffffffffffffffda RBX: 00007fee89ba6160 RCX: 00007fee8998d169 [ 558.722730][T12159] RDX: 00002000000000c0 RSI: 00000000000089f1 RDI: 0000000000000008 [ 558.722739][T12159] RBP: 00007fee877d5090 R08: 0000000000000000 R09: 0000000000000000 [ 558.722748][T12159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.722757][T12159] R13: 0000000000000000 R14: 00007fee89ba6160 R15: 00007ffc9f320638 [ 558.722794][T12159] [ 559.493265][ T5870] usb 5-1: device descriptor read/8, error -71 [ 559.782476][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 560.293969][ T30] audit: type=1400 audit(1743676475.177:4083): avc: denied { write } for pid=12173 comm="syz.2.1484" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 560.355169][ T30] audit: type=1400 audit(1743676475.187:4084): avc: denied { open } for pid=12173 comm="syz.2.1484" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 560.378921][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 560.451763][T12168] SELinux: ebitmap: truncated map [ 560.493855][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 560.530063][T12168] SELinux: failed to load policy [ 560.535488][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 560.704959][T12185] No control pipe specified [ 560.706852][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 560.776149][T12186] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 560.853567][ T30] audit: type=1400 audit(1743676475.657:4085): avc: denied { mount } for pid=12181 comm="syz.0.1485" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 561.013417][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.190027][ T24] usb 4-1: Product: syz [ 561.194673][ T24] usb 4-1: Manufacturer: syz [ 561.200342][ T24] usb 4-1: SerialNumber: syz [ 561.215426][ T30] audit: type=1400 audit(1743676475.667:4086): avc: denied { unlink } for pid=12181 comm="syz.0.1485" name="#5b" dev="tmpfs" ino=1728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 561.217555][ T24] usb 4-1: config 0 descriptor?? [ 561.240094][ T30] audit: type=1400 audit(1743676475.677:4087): avc: denied { mount } for pid=12181 comm="syz.0.1485" name="/" dev="overlay" ino=1723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 561.420099][ T30] audit: type=1400 audit(1743676476.307:4088): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 561.442549][ T24] usb 4-1: can't set config #0, error -71 [ 561.563766][ T24] usb 4-1: USB disconnect, device number 46 [ 561.579771][ T30] audit: type=1400 audit(1743676476.467:4089): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 561.694475][ T30] audit: type=1400 audit(1743676476.587:4090): avc: denied { setopt } for pid=12189 comm="syz.4.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 562.102014][T12199] mkiss: ax0: crc mode is auto. [ 562.309376][T12206] fuse: Unknown parameter 'gr' [ 562.555424][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.561893][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.568371][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.576527][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.594847][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'. [ 562.612542][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1484'. [ 562.632919][T12174] netlink: 'syz.2.1484': attribute type 7 has an invalid length. [ 562.712986][ T5139] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 562.722434][ T30] audit: type=1400 audit(1743676477.607:4091): avc: denied { write } for pid=12173 comm="syz.2.1484" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 562.762370][T12207] mkiss: ax0: crc mode is auto. [ 563.980428][ T30] audit: type=1400 audit(1743676478.867:4092): avc: denied { ioctl } for pid=12220 comm="syz.0.1496" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x64b1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 564.035096][T12222] qrtr: Invalid version 0 [ 564.118515][T12229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1494'. [ 564.444191][T12234] SELinux: ebitmap: truncated map [ 564.466506][T12234] SELinux: failed to load policy [ 565.627667][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 565.627682][ T30] audit: type=1326 audit(1743676480.017:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fee8998d169 code=0x7ffc0000 [ 565.669117][ T30] audit: type=1326 audit(1743676480.017:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8998d169 code=0x7ffc0000 [ 565.702837][ T30] audit: type=1326 audit(1743676480.017:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fee8998d169 code=0x7ffc0000 [ 565.817287][ T30] audit: type=1326 audit(1743676480.017:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8998d169 code=0x7ffc0000 [ 565.844132][ T30] audit: type=1326 audit(1743676480.017:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8998d169 code=0x7ffc0000 [ 565.870408][ T30] audit: type=1326 audit(1743676480.017:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fee8998d169 code=0x7ffc0000 [ 565.922495][ T30] audit: type=1326 audit(1743676480.017:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8998d169 code=0x7ffc0000 [ 565.955494][ T5874] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 566.063009][ T30] audit: type=1326 audit(1743676480.017:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8998d169 code=0x7ffc0000 [ 566.095066][ T30] audit: type=1326 audit(1743676480.017:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee8998bad0 code=0x7ffc0000 [ 566.165690][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 566.168439][T12266] SELinux: ebitmap: truncated map [ 566.177679][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.192269][ T30] audit: type=1326 audit(1743676480.017:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8998d169 code=0x7ffc0000 [ 566.219811][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.233944][T12266] SELinux: failed to load policy [ 566.252419][ T5870] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 566.261622][ T5874] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 566.293611][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.330485][ T5874] usb 4-1: config 0 descriptor?? [ 566.442433][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 566.451292][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 566.464699][ T5870] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 566.494621][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.523579][ T5870] usb 5-1: config 0 descriptor?? [ 566.673588][ T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 566.858219][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.860512][ T5874] appleir 0003:05AC:8241.001F: unknown main item tag 0x0 [ 566.942129][ T5874] appleir 0003:05AC:8241.001F: unknown main item tag 0x0 [ 566.950543][ T5874] appleir 0003:05AC:8241.001F: unknown main item tag 0x0 [ 566.952146][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.957792][ T5874] appleir 0003:05AC:8241.001F: unknown main item tag 0x0 [ 566.997305][ T5874] appleir 0003:05AC:8241.001F: unknown main item tag 0x0 [ 567.013064][ T5874] appleir 0003:05AC:8241.001F: No inputs registered, leaving [ 567.024796][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 567.040716][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 567.051211][ T5874] appleir 0003:05AC:8241.001F: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 567.073366][ T24] usb 1-1: SerialNumber: syz [ 567.129462][T12268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.143223][T12262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1507'. [ 567.155669][ T5874] usb 4-1: USB disconnect, device number 47 [ 567.159524][T12268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.425222][ T24] usb 1-1: 0:2 : does not exist [ 567.458305][ T24] usb 1-1: unit 5: unexpected type 0x09 [ 567.656992][ T5870] usbhid 5-1:0.0: can't add hid device: -71 [ 567.663877][ T5870] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 567.692646][ T5870] usb 5-1: USB disconnect, device number 56 [ 567.818260][T12294] loop6: detected capacity change from 0 to 524287999 [ 567.911419][T12298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1515'. [ 568.012632][ T24] usb 1-1: USB disconnect, device number 41 [ 568.325250][T12307] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 568.354929][T12307] FAULT_INJECTION: forcing a failure. [ 568.354929][T12307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.390862][T12307] CPU: 1 UID: 0 PID: 12307 Comm: syz.4.1519 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 568.390889][T12307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 568.390899][T12307] Call Trace: [ 568.390905][T12307] [ 568.390912][T12307] dump_stack_lvl+0x16c/0x1f0 [ 568.390940][T12307] should_fail_ex+0x512/0x640 [ 568.390961][T12307] _copy_from_user+0x2e/0xd0 [ 568.390981][T12307] kstrtouint_from_user+0xd6/0x1d0 [ 568.391005][T12307] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 568.391027][T12307] ? __lock_acquire+0xaa4/0x1ba0 [ 568.391056][T12307] proc_fail_nth_write+0x83/0x250 [ 568.391083][T12307] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 568.391115][T12307] vfs_write+0x25c/0x1180 [ 568.391130][T12307] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 568.391159][T12307] ? __pfx___mutex_lock+0x10/0x10 [ 568.391178][T12307] ? __pfx_vfs_write+0x10/0x10 [ 568.391201][T12307] ? __fget_files+0x20e/0x3c0 [ 568.391225][T12307] ksys_write+0x12a/0x240 [ 568.391239][T12307] ? __pfx_ksys_write+0x10/0x10 [ 568.391253][T12307] ? rcu_is_watching+0x12/0xc0 [ 568.391285][T12307] do_syscall_64+0xcd/0x260 [ 568.391308][T12307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.391324][T12307] RIP: 0033:0x7ff09d18bc1f [ 568.391339][T12307] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 568.391355][T12307] RSP: 002b:00007ff09dfc5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 568.391371][T12307] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff09d18bc1f [ 568.391382][T12307] RDX: 0000000000000001 RSI: 00007ff09dfc50a0 RDI: 0000000000000003 [ 568.391392][T12307] RBP: 00007ff09dfc5090 R08: 0000000000000000 R09: 0000000000000000 [ 568.391402][T12307] R10: 000000000000007a R11: 0000000000000293 R12: 0000000000000001 [ 568.391411][T12307] R13: 0000000000000001 R14: 00007ff09d3a5fa0 R15: 00007ffe27ad8b28 [ 568.391435][T12307] [ 568.394344][ T5870] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 568.543455][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.605565][T12305] tmpfs: Bad value for 'huge' [ 568.793043][ T5870] usb 4-1: device descriptor read/64, error -71 [ 568.949588][T12320] mkiss: ax0: crc mode is auto. [ 569.032562][ T5870] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 569.044336][T12325] Malformed UNC in devname [ 569.044336][T12325] [ 569.067382][T12325] CIFS: VFS: Malformed UNC in devname [ 569.267357][ T5870] usb 4-1: device descriptor read/64, error -71 [ 569.354777][T12329] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 569.392701][ T5870] usb usb4-port1: attempt power cycle [ 569.563919][ T970] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 569.595842][T12337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1527'. [ 569.745633][ T5870] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 569.757068][ T970] usb 3-1: Using ep0 maxpacket: 8 [ 569.767426][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 569.786478][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 569.798887][ T970] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 569.813327][ T5870] usb 4-1: device descriptor read/8, error -71 [ 569.820207][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 569.830606][ T970] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 569.839957][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.899761][ T970] usb 3-1: config 0 descriptor?? [ 570.052498][ T5870] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 570.095311][ T5870] usb 4-1: device descriptor read/8, error -71 [ 570.238421][ T5870] usb usb4-port1: unable to enumerate USB device [ 570.585567][T12379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1535'. [ 570.624751][T12379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1535'. [ 570.967408][T12383] sit0: entered promiscuous mode [ 570.983703][T12383] netlink: 'syz.0.1537': attribute type 1 has an invalid length. [ 571.006397][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 571.006412][ T30] audit: type=1400 audit(1743676938.899:4297): avc: denied { read } for pid=12385 comm="syz.1.1536" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 571.044510][T12383] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1537'. [ 571.067109][ T30] audit: type=1400 audit(1743676938.939:4298): avc: denied { open } for pid=12385 comm="syz.1.1536" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 571.880739][T12401] Malformed UNC in devname [ 571.880739][T12401] [ 571.905380][ T30] audit: type=1400 audit(1743676939.789:4299): avc: denied { ioctl } for pid=12392 comm="syz.0.1538" path="socket:[29602]" dev="sockfs" ino=29602 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 571.952363][T12401] CIFS: VFS: Malformed UNC in devname [ 572.177589][ T5906] usb 3-1: USB disconnect, device number 43 [ 572.223178][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.334660][ T30] audit: type=1400 audit(1743676940.219:4300): avc: denied { getopt } for pid=12407 comm="syz.2.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 572.354392][ T5872] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 572.525603][ T5872] usb 2-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 572.551800][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.600445][ T5872] usb 2-1: config 0 descriptor?? [ 573.019327][T12431] block nbd3: NBD_DISCONNECT [ 573.024680][ T5874] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 573.042286][T12431] block nbd3: Disconnected due to user request. [ 573.051264][ T5872] logitech-djreceiver 0003:046D:C71C.0020: hidraw0: USB HID v0.00 Device [HID 046d:c71c] on usb-dummy_hcd.1-1/input0 [ 573.066497][T12431] block nbd3: shutting down sockets [ 573.195509][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 573.227442][ T5874] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 573.263278][T12405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.263734][ T5874] usb 1-1: config 6 has an invalid descriptor of length 255, skipping remainder of the config [ 573.304546][T12440] netlink: 'syz.2.1544': attribute type 11 has an invalid length. [ 573.352499][ T5874] usb 1-1: config 6 has no interface number 0 [ 573.369047][ T5874] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 573.392619][T12405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.417067][ T5874] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 573.451627][T12405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.457871][ T30] audit: type=1400 audit(1743676941.349:4301): avc: denied { bind } for pid=12442 comm="syz.2.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 573.492960][ T5874] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 573.503877][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.511925][ T5874] usb 1-1: Product: syz [ 573.516746][T12405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.524807][ T30] audit: type=1400 audit(1743676941.349:4302): avc: denied { name_bind } for pid=12442 comm="syz.2.1545" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 573.525356][ T5874] usb 1-1: Manufacturer: syz [ 573.594958][T12405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.599115][ T30] audit: type=1400 audit(1743676941.349:4303): avc: denied { node_bind } for pid=12442 comm="syz.2.1545" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 573.604444][ T5874] usb 1-1: SerialNumber: syz [ 573.692156][T12405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.863626][ T5874] hso 1-1:6.2: Failed to find INT IN ep [ 573.923673][ T5834] usb 2-1: USB disconnect, device number 43 [ 574.251545][ T5834] usb 1-1: USB disconnect, device number 42 [ 574.281203][ T30] audit: type=1400 audit(1743676942.169:4304): avc: denied { read } for pid=12427 comm="syz.3.1543" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 574.406668][ T30] audit: type=1400 audit(1743676942.169:4305): avc: denied { open } for pid=12427 comm="syz.3.1543" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 574.459115][ T30] audit: type=1400 audit(1743676942.349:4306): avc: denied { read } for pid=12454 comm="syz.4.1547" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 574.567521][T12457] lo speed is unknown, defaulting to 1000 [ 574.582486][T12457] lo speed is unknown, defaulting to 1000 [ 574.600710][T12457] lo speed is unknown, defaulting to 1000 [ 574.628011][T12457] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 574.683696][T12459] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 574.748808][T12457] lo speed is unknown, defaulting to 1000 [ 574.794334][T12457] lo speed is unknown, defaulting to 1000 [ 574.801473][T12457] lo speed is unknown, defaulting to 1000 [ 574.864012][T12457] lo speed is unknown, defaulting to 1000 [ 574.875539][T12457] lo speed is unknown, defaulting to 1000 [ 575.432668][ T5906] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 575.642553][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 575.651352][T12481] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 575.686212][ T5906] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 575.705667][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.720072][T12481] SELinux: failed to load policy [ 575.731483][ T5906] usb 5-1: Product: syz [ 575.745286][ T5906] usb 5-1: Manufacturer: syz [ 575.760570][ T5906] usb 5-1: SerialNumber: syz [ 575.781274][ T5906] usb 5-1: config 0 descriptor?? [ 575.825533][T12483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1555'. [ 576.001444][T12478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.049365][T12478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.108067][ T5906] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 576.128945][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 576.128962][ T30] audit: type=1400 audit(1743676944.019:4324): avc: denied { unmount } for pid=12484 comm="syz.0.1556" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 576.138924][ T5906] usb 5-1: USB disconnect, device number 57 [ 576.224686][ T30] audit: type=1400 audit(1743676944.119:4325): avc: denied { mount } for pid=12486 comm="syz.1.1557" name="/" dev="hugetlbfs" ino=29842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 576.239047][T12487] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 576.278388][ T30] audit: type=1400 audit(1743676944.119:4326): avc: denied { mounton } for pid=12486 comm="syz.1.1557" path="/302/file1/bus" dev="hugetlbfs" ino=29845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 576.327822][T12487] overlayfs: failed to set xattr on upper [ 576.344032][T12487] overlayfs: ...falling back to redirect_dir=nofollow. [ 576.354815][ T30] audit: type=1400 audit(1743676944.249:4327): avc: denied { ioctl } for pid=12490 comm="syz.0.1559" path="socket:[29851]" dev="sockfs" ino=29851 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 576.388354][T12487] overlayfs: ...falling back to index=off. [ 576.395229][T12487] overlayfs: ...falling back to uuid=null. [ 576.401174][T12487] overlayfs: maximum fs stacking depth exceeded [ 576.452809][ T30] audit: type=1400 audit(1743676944.339:4328): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 576.709823][ T30] audit: type=1400 audit(1743676944.599:4329): avc: denied { create } for pid=12506 comm="syz.1.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 577.177148][ T30] audit: type=1400 audit(1743676944.889:4330): avc: denied { connect } for pid=12504 comm="syz.4.1563" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 577.471848][T12514] fuse: Bad value for 'fd' [ 578.094791][T12525] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1566'. [ 578.349639][T12520] lo speed is unknown, defaulting to 1000 [ 578.643446][T12530] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 578.759365][T12530] SELinux: failed to load policy [ 578.969045][ T30] audit: type=1400 audit(1743676946.849:4331): avc: denied { write } for pid=12513 comm="syz.0.1565" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 579.064411][ T30] audit: type=1400 audit(1743676946.889:4332): avc: denied { create } for pid=12513 comm="syz.0.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 579.184863][ T30] audit: type=1800 audit(1743676946.889:4333): pid=12539 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1570" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 579.602559][ T5834] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 579.622468][ T5874] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 580.284265][ T5874] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 580.300397][ T5834] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 211, changing to 11 [ 580.311772][ T5874] usb 4-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 580.332382][ T5834] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 580.345540][ T5874] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 580.354879][ T5874] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 166, changing to 11 [ 580.366634][ T5834] usb 3-1: config 0 interface 0 has no altsetting 0 [ 580.376775][ T5834] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 580.392845][ T5874] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2033, setting to 1024 [ 580.404009][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.427571][ T5874] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 580.443433][ T5834] usb 3-1: config 0 descriptor?? [ 580.463106][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 580.483182][ T5874] usb 4-1: Product: syz [ 580.506867][ T5874] usb 4-1: Manufacturer: syz [ 580.523482][T12543] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 580.543336][ T5874] cdc_wdm 4-1:1.0: skipping garbage [ 580.548584][ T5874] cdc_wdm 4-1:1.0: skipping garbage [ 580.574431][ T5874] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 580.580386][ T5874] cdc_wdm 4-1:1.0: Unknown control protocol [ 580.771002][ C0] wdm_int_callback: 63 callbacks suppressed [ 580.771025][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 580.783532][ C0] wdm_int_callback: 63 callbacks suppressed [ 580.783550][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 580.795921][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 580.802539][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 580.808804][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 580.815399][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 580.821898][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 580.828496][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 580.835199][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 580.841800][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 580.848093][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 580.854698][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 580.860962][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 580.867542][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 580.874115][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 580.880726][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 580.888862][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 580.895473][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 580.902365][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 580.908976][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 580.935763][T12546] FAULT_INJECTION: forcing a failure. [ 580.935763][T12546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.952576][T12546] CPU: 1 UID: 0 PID: 12546 Comm: syz.2.1573 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 580.952601][T12546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 580.952612][T12546] Call Trace: [ 580.952618][T12546] [ 580.952623][T12546] dump_stack_lvl+0x16c/0x1f0 [ 580.952648][T12546] should_fail_ex+0x512/0x640 [ 580.952673][T12546] _copy_from_user+0x2e/0xd0 [ 580.952689][T12546] copy_msghdr_from_user+0x98/0x160 [ 580.952708][T12546] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 580.952738][T12546] ___sys_sendmsg+0xfe/0x1d0 [ 580.952757][T12546] ? __pfx____sys_sendmsg+0x10/0x10 [ 580.952804][T12546] __sys_sendmsg+0x16d/0x220 [ 580.952822][T12546] ? __pfx___sys_sendmsg+0x10/0x10 [ 580.952839][T12546] ? rcu_is_watching+0x12/0xc0 [ 580.952870][T12546] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 580.952893][T12546] do_syscall_64+0xcd/0x260 [ 580.952912][T12546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.952929][T12546] RIP: 0033:0x7f95ea58d169 [ 580.952942][T12546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.952957][T12546] RSP: 002b:00007f95eb365038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.952972][T12546] RAX: ffffffffffffffda RBX: 00007f95ea7a5fa0 RCX: 00007f95ea58d169 [ 580.952982][T12546] RDX: 0000000020000000 RSI: 0000200000001c80 RDI: 0000000000000007 [ 580.952992][T12546] RBP: 00007f95eb365090 R08: 0000000000000000 R09: 0000000000000000 [ 580.953001][T12546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.953009][T12546] R13: 0000000000000000 R14: 00007f95ea7a5fa0 R15: 00007fff76259378 [ 580.953031][T12546] [ 580.957454][ T5871] usb 4-1: USB disconnect, device number 52 [ 580.957454][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 580.962206][ T5834] usbhid 3-1:0.0: can't add hid device: -71 [ 581.202427][ T5834] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 581.232714][ T5834] usb 3-1: USB disconnect, device number 44 [ 581.262863][ T30] audit: type=1400 audit(1743676949.159:4334): avc: denied { getopt } for pid=12542 comm="syz.3.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 581.557064][ T30] audit: type=1400 audit(1743676949.449:4335): avc: denied { create } for pid=12566 comm="syz.2.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 581.625256][ T30] audit: type=1400 audit(1743676949.479:4336): avc: denied { bind } for pid=12566 comm="syz.2.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 582.180407][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.425436][ T30] audit: type=1400 audit(1743676950.309:4337): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 583.917392][T12592] Malformed UNC in devname [ 583.917392][T12592] [ 583.924118][T12592] CIFS: VFS: Malformed UNC in devname [ 584.231656][ T30] audit: type=1400 audit(1743676952.119:4338): avc: denied { read write } for pid=12603 comm="syz.3.1587" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 584.275761][T12604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1587'. [ 584.332469][ T30] audit: type=1400 audit(1743676952.149:4339): avc: denied { open } for pid=12603 comm="syz.3.1587" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 584.478057][T12617] FAULT_INJECTION: forcing a failure. [ 584.478057][T12617] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 584.509404][T12617] CPU: 1 UID: 0 PID: 12617 Comm: syz.4.1589 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 584.509431][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 584.509440][T12617] Call Trace: [ 584.509445][T12617] [ 584.509452][T12617] dump_stack_lvl+0x16c/0x1f0 [ 584.509478][T12617] should_fail_ex+0x512/0x640 [ 584.509500][T12617] should_fail_alloc_page+0xe7/0x130 [ 584.509521][T12617] prepare_alloc_pages+0x3c2/0x610 [ 584.509545][T12617] ? unwind_get_return_address+0x59/0xa0 [ 584.509570][T12617] __alloc_frozen_pages_noprof+0x18d/0x2370 [ 584.509597][T12617] ? stack_trace_save+0x8e/0xc0 [ 584.509619][T12617] ? __pfx_stack_trace_save+0x10/0x10 [ 584.509649][T12617] ? stack_depot_save_flags+0x28/0xa50 [ 584.509669][T12617] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 584.509689][T12617] ? kasan_save_stack+0x42/0x60 [ 584.509704][T12617] ? kasan_save_stack+0x33/0x60 [ 584.509718][T12617] ? kasan_save_track+0x14/0x30 [ 584.509732][T12617] ? __kasan_kmalloc+0xaa/0xb0 [ 584.509746][T12617] ? netfs_folioq_alloc+0x9e/0x3e0 [ 584.509767][T12617] ? v9fs_file_write_iter+0x9b/0x100 [ 584.509783][T12617] ? do_iter_readv_writev+0x654/0x950 [ 584.509809][T12617] ? __lock_acquire+0x5ca/0x1ba0 [ 584.509827][T12617] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 584.509848][T12617] ? policy_nodemask+0xea/0x4e0 [ 584.509870][T12617] alloc_pages_mpol+0x1fb/0x550 [ 584.509890][T12617] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 584.509911][T12617] ? filemap_get_entry+0x1a7/0x3b0 [ 584.509936][T12617] folio_alloc_noprof+0x20/0x2d0 [ 584.509958][T12617] filemap_alloc_folio_noprof+0x3a1/0x470 [ 584.509987][T12617] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 584.510015][T12617] ? iov_iter_folio_queue+0x3e/0x1f0 [ 584.510031][T12617] ? fault_in_readable+0x1a7/0x200 [ 584.510059][T12617] __filemap_get_folio+0x5e9/0xc10 [ 584.510087][T12617] netfs_perform_write+0x47c/0x20f0 [ 584.510131][T12617] ? __pfx_netfs_perform_write+0x10/0x10 [ 584.510193][T12617] ? inode_needs_update_time.part.0+0x191/0x270 [ 584.510221][T12617] netfs_file_write_iter+0x495/0x570 [ 584.510240][T12617] v9fs_file_write_iter+0x9b/0x100 [ 584.510256][T12617] do_iter_readv_writev+0x654/0x950 [ 584.510282][T12617] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 584.510320][T12617] vfs_writev+0x353/0xdc0 [ 584.510352][T12617] ? __pfx_vfs_writev+0x10/0x10 [ 584.510396][T12617] ? __fget_files+0x20e/0x3c0 [ 584.510411][T12617] ? mutex_trylock+0xb0/0x140 [ 584.510436][T12617] ? do_pwritev+0x1af/0x270 [ 584.510459][T12617] do_pwritev+0x1af/0x270 [ 584.510483][T12617] ? __pfx_do_pwritev+0x10/0x10 [ 584.510508][T12617] ? ksys_write+0x1b9/0x240 [ 584.510522][T12617] ? __pfx_ksys_write+0x10/0x10 [ 584.510536][T12617] ? rcu_is_watching+0x12/0xc0 [ 584.510560][T12617] __x64_sys_pwritev2+0xef/0x160 [ 584.510580][T12617] do_syscall_64+0xcd/0x260 [ 584.510601][T12617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.510617][T12617] RIP: 0033:0x7ff09d18d169 [ 584.510636][T12617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.510652][T12617] RSP: 002b:00007ff09dfc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 584.510668][T12617] RAX: ffffffffffffffda RBX: 00007ff09d3a5fa0 RCX: 00007ff09d18d169 [ 584.510679][T12617] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000007 [ 584.510688][T12617] RBP: 00007ff09dfc5090 R08: 0000000000000007 R09: 0000000000000012 [ 584.510698][T12617] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 584.510708][T12617] R13: 0000000000000000 R14: 00007ff09d3a5fa0 R15: 00007ffe27ad8b28 [ 584.510731][T12617] [ 584.969741][ T30] audit: type=1400 audit(1743676952.769:4340): avc: denied { write } for pid=12618 comm="syz.3.1591" path="socket:[30059]" dev="sockfs" ino=30059 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 585.301331][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1592'. [ 585.366038][T12627] vlan1: entered promiscuous mode [ 585.404610][ T30] audit: type=1400 audit(1743676953.299:4341): avc: denied { create } for pid=12625 comm="syz.3.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 585.460600][ T30] audit: type=1400 audit(1743676953.299:4342): avc: denied { ioctl } for pid=12625 comm="syz.3.1592" path="socket:[30072]" dev="sockfs" ino=30072 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 585.530292][ T30] audit: type=1400 audit(1743676953.299:4343): avc: denied { connect } for pid=12625 comm="syz.3.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 585.973862][T12625] vlan1: left promiscuous mode [ 586.653481][T12649] bridge_slave_0: left allmulticast mode [ 586.659381][T12649] bridge_slave_0: left promiscuous mode [ 586.668245][T12649] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.685956][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 586.685971][ T30] audit: type=1400 audit(1743676954.579:4352): avc: denied { create } for pid=12642 comm="syz.1.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 590.166867][ T30] audit: type=1400 audit(1743676958.049:4353): avc: denied { getopt } for pid=12658 comm="syz.2.1601" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 590.195482][T12649] bridge_slave_1: left allmulticast mode [ 590.219525][T12649] bridge_slave_1: left promiscuous mode [ 590.237881][T12649] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.449614][T12649] bond0: (slave bond_slave_0): Releasing backup interface [ 590.467668][T12676] x_tables: unsorted underflow at hook 3 [ 590.475595][ T30] audit: type=1400 audit(1743676958.359:4354): avc: denied { execute_no_trans } for pid=12675 comm="syz.0.1603" path="/340/file0" dev="tmpfs" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 590.511537][T12649] bond0: (slave bond_slave_1): Releasing backup interface [ 590.525297][ T5870] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 590.559076][T12649] team0: Port device team_slave_0 removed [ 590.591657][T12649] team0: Port device team_slave_1 removed [ 590.595136][T12683] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1604'. [ 590.598359][ T30] audit: type=1400 audit(1743676958.489:4355): avc: denied { write } for pid=12679 comm="syz.4.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 590.636725][T12649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.652484][T12649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.660163][T12683] kernel profiling enabled (shift: 9) [ 590.669856][ T30] audit: type=1400 audit(1743676958.489:4356): avc: denied { nlmsg_write } for pid=12679 comm="syz.4.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 590.704643][T12649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.716784][T12649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.716896][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.736135][ T30] audit: type=1400 audit(1743676958.519:4357): avc: denied { read write } for pid=12679 comm="syz.4.1604" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 590.761182][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.790995][T12664] lo speed is unknown, defaulting to 1000 [ 590.793737][ T30] audit: type=1400 audit(1743676958.529:4358): avc: denied { open } for pid=12679 comm="syz.4.1604" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 590.824230][ T30] audit: type=1400 audit(1743676958.529:4359): avc: denied { ioctl } for pid=12679 comm="syz.4.1604" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 590.936290][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 591.176949][ T30] audit: type=1400 audit(1743676959.039:4360): avc: denied { ioctl } for pid=12689 comm="syz.0.1605" path="socket:[30158]" dev="sockfs" ino=30158 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 591.394213][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.409479][ T5870] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 591.424202][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.432252][T12671] lo speed is unknown, defaulting to 1000 [ 591.447782][ T5870] usb 4-1: config 0 descriptor?? [ 591.483467][T12693] lo speed is unknown, defaulting to 1000 [ 591.556001][ T30] audit: type=1326 audit(1743676959.449:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12697 comm="syz.1.1607" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a6538d169 code=0x0 [ 591.864489][ T5870] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 591.886882][ T5870] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 592.044137][T12705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1608'. [ 592.239989][ T5871] usb 4-1: USB disconnect, device number 53 [ 592.257787][T12707] plantronics 0003:047F:FFFF.0021: usb_submit_urb(ctrl) failed: -19 [ 592.337623][ T30] audit: type=1400 audit(1743676960.229:4362): avc: denied { create } for pid=12708 comm="syz.2.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 592.373118][ T30] audit: type=1400 audit(1743676960.229:4363): avc: denied { connect } for pid=12708 comm="syz.2.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 593.135031][ T30] audit: type=1400 audit(1743676961.029:4364): avc: denied { ioctl } for pid=12724 comm="syz.0.1613" path="socket:[30197]" dev="sockfs" ino=30197 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 593.792624][ T30] audit: type=1400 audit(1743676961.679:4365): avc: denied { mount } for pid=12729 comm="syz.4.1614" name="/" dev="configfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 593.855883][ T30] audit: type=1400 audit(1743676961.709:4366): avc: denied { write } for pid=12729 comm="syz.4.1614" name="/" dev="configfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 593.966787][ T30] audit: type=1400 audit(1743676961.719:4367): avc: denied { setopt } for pid=12730 comm="syz.0.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 594.025818][ T30] audit: type=1400 audit(1743676961.919:4368): avc: denied { create } for pid=12734 comm="syz.0.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 594.112481][ T5870] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 594.120601][ T30] audit: type=1400 audit(1743676961.969:4369): avc: denied { prog_load } for pid=12734 comm="syz.0.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 594.146480][ T30] audit: type=1400 audit(1743676961.979:4370): avc: denied { bpf } for pid=12734 comm="syz.0.1617" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 594.172038][ T30] audit: type=1400 audit(1743676961.979:4371): avc: denied { perfmon } for pid=12734 comm="syz.0.1617" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 594.290536][ T5870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.321006][ T5870] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.345141][ T5870] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 594.370983][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 594.394854][ T5870] usb 5-1: SerialNumber: syz [ 594.619845][ T5870] usb 5-1: 0:2 : does not exist [ 594.671876][ T5870] usb 5-1: USB disconnect, device number 58 [ 595.009759][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 596.172634][ T5871] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 596.302840][T12763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 596.344942][T12763] usb usb8: usbfs: process 12763 (syz.1.1624) did not claim interface 0 before use [ 596.393850][ T5871] usb 4-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 596.406496][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.484356][ T5871] usb 4-1: config 0 descriptor?? [ 596.622172][T12777] fuse: Unknown parameter 'gr' [ 596.775654][T12784] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 597.003800][ T5871] logitech-djreceiver 0003:046D:C71C.0022: hidraw0: USB HID v0.00 Device [HID 046d:c71c] on usb-dummy_hcd.3-1/input0 [ 597.217850][T12759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.227741][T12759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.242195][T12759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.259177][T12759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.280047][T12759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.291042][T12759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.329241][ T5871] usb 4-1: USB disconnect, device number 54 [ 597.506889][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 597.506904][ T30] audit: type=1400 audit(1743676965.399:4439): avc: denied { create } for pid=12794 comm="syz.2.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 597.550734][ T30] audit: type=1400 audit(1743676965.429:4440): avc: denied { map } for pid=12794 comm="syz.2.1628" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31085 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 597.669742][ T30] audit: type=1400 audit(1743676965.429:4441): avc: denied { read write } for pid=12794 comm="syz.2.1628" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31085 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 597.816611][ T30] audit: type=1400 audit(1743676965.489:4442): avc: denied { write } for pid=12794 comm="syz.2.1628" path="socket:[31084]" dev="sockfs" ino=31084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 597.895985][ T30] audit: type=1400 audit(1743676965.789:4443): avc: denied { read } for pid=12803 comm="syz.4.1629" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 597.929760][T12808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.992705][T12808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.040766][ T30] audit: type=1400 audit(1743676965.789:4444): avc: denied { open } for pid=12803 comm="syz.4.1629" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 598.159823][ T30] audit: type=1400 audit(1743676965.839:4445): avc: denied { read } for pid=12803 comm="syz.4.1629" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 598.162596][ T970] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 598.183908][ T30] audit: type=1400 audit(1743676965.839:4446): avc: denied { open } for pid=12803 comm="syz.4.1629" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 598.216691][ T30] audit: type=1400 audit(1743676965.929:4447): avc: denied { execmem } for pid=12810 comm="syz.3.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 598.237017][ T30] audit: type=1400 audit(1743676966.019:4448): avc: denied { ioctl } for pid=12806 comm="syz.1.1630" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 598.310389][T12817] mkiss: ax0: crc mode is auto. [ 598.366576][ T970] usb 2-1: config 0 interface 0 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.395188][ T970] usb 2-1: config 0 interface 0 has no altsetting 0 [ 598.432271][ T970] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 598.507418][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.550040][ T970] usb 2-1: config 0 descriptor?? [ 599.236343][ T970] usbhid 2-1:0.0: can't add hid device: -71 [ 599.252446][ T970] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 599.303257][ T970] usb 2-1: USB disconnect, device number 44 [ 600.512355][T12838] syz.2.1636: attempt to access beyond end of device [ 600.512355][T12838] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 600.526128][T12838] syz.2.1636: attempt to access beyond end of device [ 600.526128][T12838] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 600.979951][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.006835][T12849] SELinux: ebitmap: truncated map [ 602.065577][T12849] SELinux: failed to load policy [ 603.474391][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 603.474407][ T30] audit: type=1400 audit(1743676971.369:4500): avc: denied { read write } for pid=12869 comm="syz.3.1649" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 603.514332][ T30] audit: type=1400 audit(1743676971.369:4501): avc: denied { open } for pid=12869 comm="syz.3.1649" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 603.631073][ T30] audit: type=1400 audit(1743676971.419:4502): avc: denied { create } for pid=12872 comm="syz.1.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 603.767152][ T30] audit: type=1400 audit(1743676971.419:4503): avc: denied { bind } for pid=12872 comm="syz.1.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 603.795611][ T30] audit: type=1400 audit(1743676971.429:4504): avc: denied { read } for pid=12872 comm="syz.1.1650" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 603.821551][ T30] audit: type=1400 audit(1743676971.429:4505): avc: denied { open } for pid=12872 comm="syz.1.1650" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 603.846974][ T5874] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 603.876975][ T30] audit: type=1326 audit(1743676971.519:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12871 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09d18d169 code=0x7ffc0000 [ 603.902908][ T30] audit: type=1326 audit(1743676971.549:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12871 comm="syz.4.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff09d18d169 code=0x7ffc0000 [ 604.041559][ T30] audit: type=1400 audit(1743676971.549:4508): avc: denied { read write } for pid=12871 comm="syz.4.1651" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 604.041608][ T30] audit: type=1400 audit(1743676971.569:4509): avc: denied { open } for pid=12871 comm="syz.4.1651" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 604.087086][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 604.091927][ T5874] usb 4-1: config 4 has an invalid interface number: 80 but max is 0 [ 604.091953][ T5874] usb 4-1: config 4 has no interface number 0 [ 604.091985][ T5874] usb 4-1: config 4 interface 80 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1023 [ 604.131129][ T5874] usb 4-1: New USB device found, idVendor=0499, idProduct=1009, bcdDevice=5c.e0 [ 604.131158][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.131176][ T5874] usb 4-1: Product: syz [ 604.131188][ T5874] usb 4-1: Manufacturer: syz [ 604.131201][ T5874] usb 4-1: SerialNumber: syz [ 604.134857][T12870] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 604.139368][ T5874] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 604.182560][ T5874] snd-usb-audio 4-1:4.80: probe with driver snd-usb-audio failed with error -2 [ 604.226921][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.80/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 604.345432][T12888] Malformed UNC in devname [ 604.345432][T12888] [ 604.345470][T12888] CIFS: VFS: Malformed UNC in devname [ 604.822098][T12879] tty tty28: ldisc open failed (-12), clearing slot 27 [ 606.341832][ T24] usb 4-1: USB disconnect, device number 55 [ 606.602381][ T5872] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 606.859910][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 606.871576][ T5872] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 606.883470][ T5872] usb 2-1: config 179 has no interface number 0 [ 606.890111][ T5872] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 606.901626][ T5872] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 606.913193][ T5872] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 606.944386][ T5872] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 606.989467][T12939] ALSA: seq fatal error: cannot create timer (-22) [ 607.063895][ T5872] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 607.077750][ T5872] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 607.096587][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.132661][T12944] Malformed UNC in devname [ 607.132661][T12944] [ 607.139327][T12944] CIFS: VFS: Malformed UNC in devname [ 607.905213][T12935] overlayfs: failed to resolve './file1': -2 [ 607.908851][T12911] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 608.106950][T12954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1670'. [ 608.362728][T12958] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[12958] [ 608.696804][ T24] usb 2-1: USB disconnect, device number 45 [ 608.702835][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 608.702882][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 608.735701][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 608.735716][ T30] audit: type=1400 audit(1743676976.629:4594): avc: denied { create } for pid=12961 comm="syz.3.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 608.771955][T12962] fuse: Unknown parameter 'gr' [ 609.429869][ T970] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 609.632494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.677834][ T30] audit: type=1400 audit(1743676977.439:4595): avc: denied { create } for pid=12974 comm="syz.1.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 609.777414][ T30] audit: type=1400 audit(1743676977.499:4596): avc: denied { allowed } for pid=12970 comm="syz.2.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 609.815727][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.845990][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.868020][ T970] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 609.883773][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.908806][ T970] usb 5-1: config 0 descriptor?? [ 609.946353][ T30] audit: type=1400 audit(1743676977.839:4597): avc: denied { create } for pid=12981 comm="syz.2.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 610.069212][T12988] FAULT_INJECTION: forcing a failure. [ 610.069212][T12988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.083636][T12988] CPU: 0 UID: 0 PID: 12988 Comm: syz.3.1681 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 610.083663][T12988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 610.083672][T12988] Call Trace: [ 610.083678][T12988] [ 610.083684][T12988] dump_stack_lvl+0x16c/0x1f0 [ 610.083705][T12988] should_fail_ex+0x512/0x640 [ 610.083719][T12988] _copy_to_user+0x32/0xd0 [ 610.083731][T12988] simple_read_from_buffer+0xcb/0x170 [ 610.083749][T12988] proc_fail_nth_read+0x197/0x270 [ 610.083766][T12988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 610.083782][T12988] ? rw_verify_area+0xcf/0x680 [ 610.083797][T12988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 610.083813][T12988] vfs_read+0x1de/0xc70 [ 610.083830][T12988] ? __pfx___mutex_lock+0x10/0x10 [ 610.083842][T12988] ? __pfx_vfs_read+0x10/0x10 [ 610.083861][T12988] ? __fget_files+0x20e/0x3c0 [ 610.083876][T12988] ksys_read+0x12a/0x240 [ 610.083884][T12988] ? __pfx_ksys_read+0x10/0x10 [ 610.083896][T12988] do_syscall_64+0xcd/0x260 [ 610.083910][T12988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.083920][T12988] RIP: 0033:0x7f852fd8bb7c [ 610.083929][T12988] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 610.083939][T12988] RSP: 002b:00007f8530b14030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 610.083948][T12988] RAX: ffffffffffffffda RBX: 00007f852ffa6080 RCX: 00007f852fd8bb7c [ 610.083955][T12988] RDX: 000000000000000f RSI: 00007f8530b140a0 RDI: 0000000000000003 [ 610.083960][T12988] RBP: 00007f8530b14090 R08: 0000000000000000 R09: 0000000000000000 [ 610.083965][T12988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.083971][T12988] R13: 0000000000000001 R14: 00007f852ffa6080 R15: 00007ffd09d2c928 [ 610.083983][T12988] [ 610.312482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.478100][ T30] audit: type=1400 audit(1743676978.349:4598): avc: denied { setopt } for pid=12990 comm="syz.2.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 610.521817][ T30] audit: type=1400 audit(1743676978.409:4599): avc: denied { create } for pid=12992 comm="syz.0.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 610.524907][T12995] syz_tun: entered allmulticast mode [ 610.551422][ T30] audit: type=1400 audit(1743676978.439:4600): avc: denied { write } for pid=12992 comm="syz.0.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 610.552824][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.589063][ T30] audit: type=1400 audit(1743676978.439:4601): avc: denied { nlmsg_read } for pid=12992 comm="syz.0.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 610.610795][ T30] audit: type=1400 audit(1743676978.479:4602): avc: denied { write } for pid=12994 comm="syz.3.1683" name="ip_mr_cache" dev="proc" ino=4026533433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 610.611085][T12994] syz_tun: left allmulticast mode [ 610.634792][ T30] audit: type=1400 audit(1743676978.479:4603): avc: denied { write } for pid=12994 comm="syz.3.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 610.668691][ T970] uclogic 0003:5543:0042.0023: unbalanced collection at end of report description [ 610.681871][ T970] uclogic 0003:5543:0042.0023: parse failed [ 610.697775][ T970] uclogic 0003:5543:0042.0023: probe with driver uclogic failed with error -22 [ 610.706886][ T5874] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 610.842486][ T5874] usb 3-1: device descriptor read/64, error -71 [ 610.906733][ T5870] usb 5-1: USB disconnect, device number 59 [ 611.016379][ T970] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 611.133080][ T5874] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 611.303224][ T5874] usb 3-1: device descriptor read/64, error -71 [ 611.330002][ T970] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 611.346348][ T970] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 611.358048][ T970] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 611.367597][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.410655][T13001] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 611.423248][ T5874] usb usb3-port1: attempt power cycle [ 611.453341][ T970] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 611.842581][ T5874] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 611.955901][ T5874] usb 3-1: device descriptor read/8, error -71 [ 612.055092][ T970] usb 4-1: USB disconnect, device number 56 [ 612.201655][T13014] tipc: Failed to obtain node identity [ 612.252408][T13014] tipc: Enabling of bearer rejected, failed to enable media [ 612.264122][T13019] fuse: Unknown parameter 'gr' [ 612.272440][ T5874] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 612.305360][ T5874] usb 3-1: device descriptor read/8, error -71 [ 612.414754][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 612.444315][ T5874] usb usb3-port1: unable to enumerate USB device [ 612.456706][T13026] nft_compat: unsupported protocol 0 [ 612.662399][ T5872] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 612.815941][T13040] sg_write: data in/out 476/154 bytes for SCSI command 0x0-- guessing data in; [ 612.815941][T13040] program syz.1.1697 not setting count and/or reply_len properly [ 612.844011][ T5872] usb 5-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 612.858419][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.875872][ T5872] usb 5-1: config 0 descriptor?? [ 613.344578][ T5872] logitech-djreceiver 0003:046D:C71C.0024: hidraw0: USB HID v0.00 Device [HID 046d:c71c] on usb-dummy_hcd.4-1/input0 [ 613.520681][T13029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.541227][T13029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.685261][T13029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.705709][T13029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.767654][T13029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.782486][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.789789][T13029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.809067][ T24] usb 5-1: USB disconnect, device number 60 [ 613.832558][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.155081][T13056] mkiss: ax0: crc mode is auto. [ 616.026908][T13065] FAULT_INJECTION: forcing a failure. [ 616.026908][T13065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.085821][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 616.085838][ T30] audit: type=1400 audit(1743676983.969:4625): avc: denied { create } for pid=13068 comm="syz.1.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 616.114868][T13065] CPU: 1 UID: 0 PID: 13065 Comm: syz.4.1705 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 616.114892][T13065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 616.114901][T13065] Call Trace: [ 616.114906][T13065] [ 616.114912][T13065] dump_stack_lvl+0x16c/0x1f0 [ 616.114937][T13065] should_fail_ex+0x512/0x640 [ 616.114956][T13065] _copy_to_user+0x32/0xd0 [ 616.114976][T13065] simple_read_from_buffer+0xcb/0x170 [ 616.115001][T13065] proc_fail_nth_read+0x197/0x270 [ 616.115027][T13065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 616.115054][T13065] ? rw_verify_area+0xcf/0x680 [ 616.115076][T13065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 616.115100][T13065] vfs_read+0x1de/0xc70 [ 616.115128][T13065] ? __pfx___mutex_lock+0x10/0x10 [ 616.115147][T13065] ? __pfx_vfs_read+0x10/0x10 [ 616.115179][T13065] ? __fget_files+0x20e/0x3c0 [ 616.115202][T13065] ksys_read+0x12a/0x240 [ 616.115216][T13065] ? __pfx_ksys_read+0x10/0x10 [ 616.115238][T13065] do_syscall_64+0xcd/0x260 [ 616.115259][T13065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.115275][T13065] RIP: 0033:0x7ff09d18bb7c [ 616.115288][T13065] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 616.115304][T13065] RSP: 002b:00007ff09dfc5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 616.115318][T13065] RAX: ffffffffffffffda RBX: 00007ff09d3a5fa0 RCX: 00007ff09d18bb7c [ 616.115329][T13065] RDX: 000000000000000f RSI: 00007ff09dfc50a0 RDI: 0000000000000004 [ 616.115337][T13065] RBP: 00007ff09dfc5090 R08: 0000000000000000 R09: 0000000000000000 [ 616.115346][T13065] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 616.115355][T13065] R13: 0000000000000000 R14: 00007ff09d3a5fa0 R15: 00007ffe27ad8b28 [ 616.115378][T13065] [ 616.350691][T13072] FAULT_INJECTION: forcing a failure. [ 616.350691][T13072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.364005][T13072] CPU: 0 UID: 0 PID: 13072 Comm: syz.1.1707 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 616.364028][T13072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 616.364039][T13072] Call Trace: [ 616.364044][T13072] [ 616.364051][T13072] dump_stack_lvl+0x16c/0x1f0 [ 616.364076][T13072] should_fail_ex+0x512/0x640 [ 616.364097][T13072] _copy_from_user+0x2e/0xd0 [ 616.364116][T13072] __sys_bpf+0x21d/0x4d80 [ 616.364143][T13072] ? __pfx___sys_bpf+0x10/0x10 [ 616.364165][T13072] ? ksys_write+0x190/0x240 [ 616.364184][T13072] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 616.364219][T13072] ? fput+0x70/0xf0 [ 616.364238][T13072] ? ksys_write+0x1b9/0x240 [ 616.364253][T13072] ? __pfx_ksys_write+0x10/0x10 [ 616.364272][T13072] __x64_sys_bpf+0x78/0xc0 [ 616.364293][T13072] ? lockdep_hardirqs_on+0x7c/0x110 [ 616.364311][T13072] do_syscall_64+0xcd/0x260 [ 616.364332][T13072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.364348][T13072] RIP: 0033:0x7f2a6538d169 [ 616.364368][T13072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.364384][T13072] RSP: 002b:00007f2a66256038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 616.364400][T13072] RAX: ffffffffffffffda RBX: 00007f2a655a6080 RCX: 00007f2a6538d169 [ 616.364410][T13072] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 616.364420][T13072] RBP: 00007f2a66256090 R08: 0000000000000000 R09: 0000000000000000 [ 616.364429][T13072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.364438][T13072] R13: 0000000000000000 R14: 00007f2a655a6080 R15: 00007fff503f76d8 [ 616.364461][T13072] [ 616.971247][ T30] audit: type=1400 audit(1743676984.859:4626): avc: denied { connect } for pid=13079 comm="syz.1.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 617.018975][T13084] pim6reg: entered allmulticast mode [ 617.151786][T13088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.165564][T13088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.272360][ T970] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 617.317964][ T30] audit: type=1400 audit(1743676985.209:4627): avc: denied { create } for pid=13093 comm="syz.2.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 618.162498][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 618.201822][T13094] mkiss: ax0: crc mode is auto. [ 618.209635][T13088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.225258][T13088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.241324][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.360645][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.376090][ T970] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 618.389781][ T970] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 618.482399][ T5872] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 618.807227][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.832801][ T970] usb 5-1: config 0 descriptor?? [ 618.992453][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 619.008812][ T5872] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 619.035271][ T5872] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 619.057268][ T5872] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 619.150679][ T5872] usb 3-1: config 250 has no interface number 0 [ 619.150726][ T5872] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 619.150753][ T5872] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 619.151850][ T5872] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 619.151876][ T5872] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 619.152070][ T5872] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 619.152097][ T5872] usb 3-1: config 250 interface 228 has no altsetting 0 [ 619.179662][ T5872] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 619.179690][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 619.179708][ T5872] usb 3-1: Product: syz [ 619.179722][ T5872] usb 3-1: SerialNumber: syz [ 619.185141][ T5872] hub 3-1:250.228: bad descriptor, ignoring hub [ 619.185186][ T5872] hub 3-1:250.228: probe with driver hub failed with error -5 [ 619.205173][ T30] audit: type=1400 audit(1743676987.099:4628): avc: denied { write } for pid=13113 comm="syz.3.1721" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 619.205317][ T30] audit: type=1400 audit(1743676987.099:4629): avc: denied { open } for pid=13113 comm="syz.3.1721" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 619.385932][ T970] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 619.485827][ T970] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 619.915702][ T5872] usblp 3-1:250.228: usblp1: USB Bidirectional printer dev 49 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 620.153118][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.191526][ T30] audit: type=1400 audit(1743676988.079:4630): avc: denied { execute } for pid=13123 comm="syz.0.1723" path="/376/file0" dev="tmpfs" ino=2060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 620.376874][T13114] tty tty1: ldisc open failed (-12), clearing slot 0 [ 620.401683][T13117] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 620.506827][ T5874] usb 5-1: USB disconnect, device number 61 [ 620.535540][ T30] audit: type=1400 audit(1743676988.229:4631): avc: denied { create } for pid=13123 comm="syz.0.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 620.555718][ T5872] usb 3-1: USB disconnect, device number 49 [ 620.561654][T13127] nfs: Bad value for 'source' [ 620.574305][ T5872] usblp1: removed [ 620.598205][ T30] audit: type=1400 audit(1743676988.229:4632): avc: denied { ioctl } for pid=13123 comm="syz.0.1723" path="socket:[31932]" dev="sockfs" ino=31932 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 620.649332][ T30] audit: type=1400 audit(1743676988.449:4633): avc: denied { execute_no_trans } for pid=13126 comm="syz.0.1724" path="/377/file1" dev="tmpfs" ino=2066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 620.673158][ T24] usb 2-1: device descriptor read/all, error -71 [ 621.027184][T13154] Malformed UNC in devname [ 621.027184][T13154] [ 621.034186][T13154] CIFS: VFS: Malformed UNC in devname [ 621.523653][T13158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1735'. [ 621.525506][ T30] audit: type=1400 audit(1743676989.409:4634): avc: denied { create } for pid=13156 comm="syz.2.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 621.973016][ T30] audit: type=1400 audit(1743676989.499:4635): avc: denied { create } for pid=13151 comm="syz.3.1734" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 621.997029][ T30] audit: type=1400 audit(1743676989.509:4636): avc: denied { write } for pid=13151 comm="syz.3.1734" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 622.040645][ T30] audit: type=1400 audit(1743676989.839:4637): avc: denied { getopt } for pid=13156 comm="syz.2.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 622.092371][ T30] audit: type=1400 audit(1743676989.929:4638): avc: denied { unlink } for pid=5836 comm="syz-executor" name="file0" dev="tmpfs" ino=1800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 622.477001][ T30] audit: type=1400 audit(1743676990.019:4639): avc: denied { create } for pid=13166 comm="syz.4.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 622.507489][T13174] fuse: Unknown parameter 'gr' [ 622.575567][ T30] audit: type=1400 audit(1743676990.329:4640): avc: denied { mount } for pid=13165 comm="syz.1.1739" name="/" dev="ramfs" ino=31646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 622.702389][ T5874] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 622.963907][ T5874] usb 2-1: config 0 has no interfaces? [ 622.971452][ T5874] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 623.093717][T13185] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 623.103368][T13185] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 623.162560][ T30] audit: type=1400 audit(1743676990.979:4641): avc: denied { watch } for pid=13178 comm="syz.3.1740" path="/327" dev="tmpfs" ino=1801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 623.215931][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.244329][ T5874] usb 2-1: Product: syz [ 623.263368][ T5874] usb 2-1: Manufacturer: syz [ 623.268033][ T5874] usb 2-1: SerialNumber: syz [ 623.280807][ T5874] usb 2-1: config 0 descriptor?? [ 623.321987][ T30] audit: type=1400 audit(1743676991.209:4642): avc: denied { append } for pid=13173 comm="syz.2.1741" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 623.577657][ T5872] usb 2-1: USB disconnect, device number 48 [ 624.015220][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.023896][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.102628][ T30] audit: type=1400 audit(1743676991.989:4643): avc: denied { connect } for pid=13202 comm="syz.3.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 624.158019][T13210] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 624.311612][T13216] fuse: Bad value for 'rootmode' [ 624.368600][T13217] input: syz0 as /devices/virtual/input/input24 [ 624.859189][T13224] mkiss: ax0: crc mode is auto. [ 626.569017][T13249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13249 comm=syz.2.1760 [ 626.598761][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1759'. [ 626.607879][T13239] lo speed is unknown, defaulting to 1000 [ 626.626456][T13250] fuse: Unknown parameter 'gr' [ 626.627022][T13251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13251 comm=syz.2.1760 [ 627.013991][T13263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1764'. [ 627.052675][ T24] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 627.065690][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 627.065734][ T30] audit: type=1400 audit(1743676994.949:4654): avc: denied { ioctl } for pid=13259 comm="syz.2.1764" path="socket:[32118]" dev="sockfs" ino=32118 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 627.273972][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.289010][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 627.303476][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 627.321029][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 627.336297][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 627.362256][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 627.370883][ T24] usb 5-1: Manufacturer: syz [ 627.380823][ T24] usb 5-1: config 0 descriptor?? [ 627.653794][ T24] rc_core: IR keymap rc-hauppauge not found [ 627.684328][ T24] Registered IR keymap rc-empty [ 627.703293][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 627.732673][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 627.765321][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 627.857707][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input25 [ 627.916404][ T30] audit: type=1400 audit(1743676995.799:4655): avc: denied { read write } for pid=13277 comm="syz.2.1768" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 627.923875][T13278] loop6: detected capacity change from 0 to 524287999 [ 628.076221][ T30] audit: type=1400 audit(1743676995.799:4656): avc: denied { open } for pid=13277 comm="syz.2.1768" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 628.100861][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 628.113201][ T30] audit: type=1400 audit(1743676995.809:4657): avc: denied { append } for pid=13277 comm="syz.2.1768" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 628.137667][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 628.162056][ T30] audit: type=1400 audit(1743676995.819:4658): avc: denied { write } for pid=13279 comm="syz.0.1770" path="socket:[32804]" dev="sockfs" ino=32804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 628.193305][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 628.195889][ T30] audit: type=1400 audit(1743676996.049:4659): avc: denied { ioctl } for pid=13254 comm="syz.4.1762" path="socket:[32154]" dev="sockfs" ino=32154 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 628.236638][ T30] audit: type=1400 audit(1743676996.049:4660): avc: denied { bind } for pid=13254 comm="syz.4.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 628.262359][ T30] audit: type=1400 audit(1743676996.049:4661): avc: denied { connect } for pid=13254 comm="syz.4.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 628.265809][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 628.345411][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 628.463404][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 628.635924][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 628.665459][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 628.692404][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 628.724538][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 628.750242][T13306] fuse: Unknown parameter 'gr' [ 628.770517][ T24] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 628.804809][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 629.180306][ T24] usb 5-1: USB disconnect, device number 62 [ 629.520760][ T30] audit: type=1400 audit(1743676997.409:4662): avc: denied { block_suspend } for pid=13310 comm="syz.0.1778" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 629.731074][ T5874] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 629.752570][T12350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.058174][T13318] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 630.271220][ T30] audit: type=1400 audit(1743676997.839:4663): avc: denied { ioctl } for pid=13313 comm="syz.4.1779" path="socket:[32212]" dev="sockfs" ino=32212 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 630.425352][ T5874] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 630.434917][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.443763][ T5874] usb 2-1: Product: syz [ 630.568445][ T5874] usb 2-1: Manufacturer: syz [ 630.573757][ T5874] usb 2-1: SerialNumber: syz [ 630.852633][ T24] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 631.093533][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 631.131161][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 631.215866][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 631.475142][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 631.490888][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 631.510891][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 631.530170][ T5874] usb 2-1: config 0 descriptor?? [ 631.536902][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.547926][ T5831] Bluetooth: hci5: urb ffff88805b09e000 submission failed (2) [ 631.576994][ T24] usb 5-1: config 0 descriptor?? [ 631.661430][T13329] lo speed is unknown, defaulting to 1000 [ 631.724310][ T24] usb 2-1: USB disconnect, device number 49 [ 631.732207][T13330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1782'. [ 631.872869][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 631.889911][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 631.914091][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 631.938642][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 631.957946][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 631.983653][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 632.017006][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 632.041344][T12350] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 632.058117][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 632.084802][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 632.105896][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 632.105913][ T30] audit: type=1400 audit(1743676999.999:4672): avc: denied { create } for pid=13339 comm="syz.0.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 632.138635][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 632.147183][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 632.161631][ T30] audit: type=1400 audit(1743677000.049:4673): avc: denied { setopt } for pid=13339 comm="syz.0.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 632.169833][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 632.191726][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 632.199597][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 632.202471][T12350] usb 3-1: Using ep0 maxpacket: 16 [ 632.209426][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 632.873893][T12350] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.892524][T12350] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 632.901870][T12350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.914927][T12350] usb 3-1: config 0 descriptor?? [ 632.932351][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 632.945994][ T5871] usb 5-1: USB disconnect, device number 63 [ 632.964579][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 632.984419][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.002372][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.010236][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.042413][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.050223][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.067224][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.111146][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.128250][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.146231][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.164158][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.202485][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.210255][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.231489][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.259893][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.273110][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.292379][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.331878][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.357006][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.380630][T12350] ryos 0003:1E7D:3138.0027: hidraw0: USB HID v0.06 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0 [ 633.408394][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.422833][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.430975][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 633.441179][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 634.077367][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 634.088523][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 634.116448][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 634.140563][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: unknown main item tag 0x0 [ 634.303108][ T5872] hid-generic 0000:007F:FFFFFFFE.0026: hidraw1: HID v0.00 Device [syz1] on syz0 [ 634.338680][ T30] audit: type=1400 audit(1743677002.219:4674): avc: denied { setopt } for pid=13363 comm="syz.0.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 634.370514][ T24] usb 3-1: USB disconnect, device number 50 [ 634.406184][ T30] audit: type=1400 audit(1743677002.229:4675): avc: denied { write } for pid=13320 comm="syz.2.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 634.778289][ T30] audit: type=1400 audit(1743677002.669:4676): avc: denied { setopt } for pid=13376 comm="syz.1.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 635.747320][T13387] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 635.951750][ T5872] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 636.011280][T13392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1798'. [ 636.077172][ T30] audit: type=1400 audit(1743677003.969:4677): avc: denied { create } for pid=13399 comm="syz.4.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 636.107956][ T30] audit: type=1400 audit(1743677003.999:4678): avc: denied { bind } for pid=13399 comm="syz.4.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 636.726889][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 636.733503][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 636.745061][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 636.755400][ T5872] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 636.765505][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 636.821047][ T30] audit: type=1400 audit(1743677004.709:4679): avc: denied { getopt } for pid=13408 comm="syz.3.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 636.858382][ T5872] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 636.868612][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.887650][ T5872] usb 3-1: config 0 descriptor?? [ 636.909148][ T30] audit: type=1400 audit(1743677004.799:4680): avc: denied { write } for pid=13411 comm="syz.1.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 636.966791][ T30] audit: type=1400 audit(1743677004.799:4681): avc: denied { mount } for pid=13411 comm="syz.1.1803" name="/" dev="configfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 637.046021][T13413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1803'. [ 637.161552][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 637.161568][ T30] audit: type=1400 audit(1743677005.049:4683): avc: denied { write } for pid=13408 comm="syz.3.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 637.195541][ T30] audit: type=1400 audit(1743677005.049:4684): avc: denied { setopt } for pid=13408 comm="syz.3.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 637.270616][T13424] Malformed UNC in devname [ 637.270616][T13424] [ 637.277396][T13424] CIFS: VFS: Malformed UNC in devname [ 638.198434][T13432] lo speed is unknown, defaulting to 1000 [ 638.245488][T13436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1810'. [ 638.250754][T13435] lo speed is unknown, defaulting to 1000 [ 638.286787][T13437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1809'. [ 638.385120][ T30] audit: type=1400 audit(1743677006.279:4685): avc: denied { write } for pid=13438 comm="syz.1.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 638.432871][ T30] audit: type=1400 audit(1743677006.279:4686): avc: denied { setopt } for pid=13438 comm="syz.1.1811" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 638.711021][ T5874] usb 3-1: USB disconnect, device number 51 [ 639.000444][ T30] audit: type=1400 audit(1743677006.879:4687): avc: denied { bind } for pid=13452 comm="syz.1.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 639.451132][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.565087][ T30] audit: type=1400 audit(1743677007.459:4688): avc: denied { setopt } for pid=13460 comm="syz.1.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 639.597822][T13461] tun0: tun_chr_ioctl cmd 1074025675 [ 639.605356][T13461] tun0: persist enabled [ 639.609930][T13461] tun0: tun_chr_ioctl cmd 1074025675 [ 639.626698][ T30] audit: type=1400 audit(1743677007.479:4689): avc: denied { read } for pid=13460 comm="syz.1.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 639.702074][T13461] tun0: persist disabled [ 639.744273][ T30] audit: type=1400 audit(1743677007.629:4690): avc: denied { sqpoll } for pid=13465 comm="syz.4.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 640.221073][T13473] Malformed UNC in devname [ 640.221073][T13473] [ 640.227915][T13473] CIFS: VFS: Malformed UNC in devname [ 640.427931][ T30] audit: type=1400 audit(1743677008.319:4691): avc: denied { read } for pid=13477 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.503055][ T30] audit: type=1400 audit(1743677008.319:4692): avc: denied { open } for pid=13477 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.037133][T13493] support for cryptoloop has been removed. Use dm-crypt instead. [ 641.056583][T13488] lo speed is unknown, defaulting to 1000 [ 641.062524][T13495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1822'. [ 641.110025][T13498] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 641.190312][T13503] FAULT_INJECTION: forcing a failure. [ 641.190312][T13503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.227636][T13503] CPU: 0 UID: 0 PID: 13503 Comm: syz.2.1825 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 641.227662][T13503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 641.227672][T13503] Call Trace: [ 641.227677][T13503] [ 641.227683][T13503] dump_stack_lvl+0x16c/0x1f0 [ 641.227707][T13503] should_fail_ex+0x512/0x640 [ 641.227727][T13503] _copy_from_user+0x2e/0xd0 [ 641.227746][T13503] __tun_chr_ioctl+0x1de/0x4740 [ 641.227766][T13503] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 641.227796][T13503] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 641.227818][T13503] ? hook_file_ioctl_common+0x145/0x410 [ 641.227851][T13503] ? selinux_file_ioctl+0x180/0x270 [ 641.227873][T13503] ? selinux_file_ioctl+0xb4/0x270 [ 641.227897][T13503] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 641.227917][T13503] __x64_sys_ioctl+0x190/0x200 [ 641.227943][T13503] do_syscall_64+0xcd/0x260 [ 641.227964][T13503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.227981][T13503] RIP: 0033:0x7f95ea58d169 [ 641.227994][T13503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.228010][T13503] RSP: 002b:00007f95eb344038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.228026][T13503] RAX: ffffffffffffffda RBX: 00007f95ea7a6080 RCX: 00007f95ea58d169 [ 641.228036][T13503] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 641.228046][T13503] RBP: 00007f95eb344090 R08: 0000000000000000 R09: 0000000000000000 [ 641.228055][T13503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.228070][T13503] R13: 0000000000000001 R14: 00007f95ea7a6080 R15: 00007fff76259378 [ 641.228093][T13503] [ 641.454775][T13509] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 641.473650][ T5906] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 641.532382][ T5834] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 641.644778][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 641.657318][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 641.686218][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 641.693473][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 641.698277][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.712113][ T5906] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 641.725056][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 641.737417][T13527] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1831'. [ 641.746430][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 641.746461][ T5834] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 641.757939][ T5906] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 641.794343][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.848744][ T5834] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.853191][ T5906] usb 4-1: config 0 descriptor?? [ 641.900770][ T5834] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 641.922720][ T5834] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 641.941529][ T5834] usb 2-1: Manufacturer: syz [ 641.956795][ T5834] usb 2-1: config 0 descriptor?? [ 642.122432][ T24] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 642.191773][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 642.191790][ T30] audit: type=1400 audit(1743677010.079:4705): avc: denied { read } for pid=13501 comm="syz.1.1826" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 642.224478][ T30] audit: type=1400 audit(1743677010.109:4706): avc: denied { ioctl } for pid=13501 comm="syz.1.1826" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 642.288744][ T30] audit: type=1400 audit(1743677010.109:4707): avc: denied { getopt } for pid=13501 comm="syz.1.1826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 642.308521][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 642.328884][ T24] usb 5-1: too many configurations: 60, using maximum allowed: 8 [ 642.361277][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 642.380592][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 642.401204][ T24] usb 5-1: Product: syz [ 642.410994][ T24] usb 5-1: Manufacturer: syz [ 642.426645][ T24] usb 5-1: SerialNumber: syz [ 642.452894][ T24] usb 5-1: config 0 descriptor?? [ 642.475221][ T24] pwc: Philips SPC 880NC USB webcam detected. [ 642.626107][ T30] audit: type=1400 audit(1743677010.519:4708): avc: denied { ioctl } for pid=13538 comm="syz.0.1834" path="socket:[33188]" dev="sockfs" ino=33188 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 643.088341][T13548] [ 643.090703][T13548] ====================================================== [ 643.097710][T13548] WARNING: possible circular locking dependency detected [ 643.104716][T13548] 6.14.0-syzkaller-12508-g92b71befc349 #0 Not tainted [ 643.111468][T13548] ------------------------------------------------------ [ 643.118470][T13548] syz.0.1835/13548 is trying to acquire lock: [ 643.124520][T13548] ffffffff9012a2a8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x1843/0x2220 [ 643.133579][T13548] [ 643.133579][T13548] but task is already holding lock: [ 643.140944][T13548] ffff88805a250aa0 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0xbc/0x370 [ 643.150979][T13548] [ 643.150979][T13548] which lock already depends on the new lock. [ 643.150979][T13548] [ 643.161373][T13548] [ 643.161373][T13548] the existing dependency chain (in reverse order) is: [ 643.170378][T13548] [ 643.170378][T13548] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 643.178951][T13548] __mutex_lock+0x199/0xb90 [ 643.183962][T13548] smc_switch_to_fallback+0x2d/0x9f0 [ 643.189744][T13548] smc_sendmsg+0x13d/0x520 [ 643.194663][T13548] __sys_sendto+0x495/0x510 [ 643.199674][T13548] __x64_sys_sendto+0xe0/0x1c0 [ 643.204941][T13548] do_syscall_64+0xcd/0x260 [ 643.209970][T13548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.216367][T13548] [ 643.216367][T13548] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 643.224005][T13548] lock_sock_nested+0x41/0xf0 [ 643.229191][T13548] sockopt_lock_sock+0x54/0x70 [ 643.234481][T13548] do_ip_setsockopt+0xfe/0x3240 [ 643.239841][T13548] ip_setsockopt+0x59/0xf0 [ 643.244762][T13548] udp_setsockopt+0x7d/0xd0 [ 643.249768][T13548] do_sock_setsockopt+0x221/0x470 [ 643.255300][T13548] __sys_setsockopt+0x1a0/0x230 [ 643.260653][T13548] __x64_sys_setsockopt+0xbd/0x160 [ 643.266284][T13548] do_syscall_64+0xcd/0x260 [ 643.271294][T13548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.277689][T13548] [ 643.277689][T13548] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 643.284882][T13548] __lock_acquire+0x1173/0x1ba0 [ 643.290232][T13548] lock_acquire+0x179/0x350 [ 643.295234][T13548] __mutex_lock+0x199/0xb90 [ 643.300251][T13548] do_ip_getsockopt+0x1843/0x2220 [ 643.305782][T13548] ip_getsockopt+0x9b/0x1e0 [ 643.310788][T13548] ipv6_getsockopt+0x230/0x280 [ 643.316055][T13548] tcp_getsockopt+0x9e/0x100 [ 643.321143][T13548] smc_getsockopt+0x162/0x370 [ 643.326328][T13548] do_sock_getsockopt+0x3fc/0x800 [ 643.331856][T13548] __sys_getsockopt+0x12f/0x260 [ 643.337205][T13548] __x64_sys_getsockopt+0xbd/0x160 [ 643.342835][T13548] do_syscall_64+0xcd/0x260 [ 643.347840][T13548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.354234][T13548] [ 643.354234][T13548] other info that might help us debug this: [ 643.354234][T13548] [ 643.364449][T13548] Chain exists of: [ 643.364449][T13548] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 643.364449][T13548] [ 643.377985][T13548] Possible unsafe locking scenario: [ 643.377985][T13548] [ 643.385411][T13548] CPU0 CPU1 [ 643.390750][T13548] ---- ---- [ 643.396091][T13548] lock(&smc->clcsock_release_lock); [ 643.401439][T13548] lock(sk_lock-AF_INET); [ 643.408373][T13548] lock(&smc->clcsock_release_lock); [ 643.416331][T13548] lock(rtnl_mutex); [ 643.420291][T13548] [ 643.420291][T13548] *** DEADLOCK *** [ 643.420291][T13548] [ 643.428418][T13548] 1 lock held by syz.0.1835/13548: [ 643.433510][T13548] #0: ffff88805a250aa0 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0xbc/0x370 [ 643.443937][T13548] [ 643.443937][T13548] stack backtrace: [ 643.449807][T13548] CPU: 1 UID: 0 PID: 13548 Comm: syz.0.1835 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 643.449823][T13548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 643.449832][T13548] Call Trace: [ 643.449836][T13548] [ 643.449841][T13548] dump_stack_lvl+0x116/0x1f0 [ 643.449859][T13548] print_circular_bug+0x275/0x350 [ 643.449880][T13548] check_noncircular+0x14c/0x170 [ 643.449898][T13548] ? __schedule+0x1186/0x5de0 [ 643.449913][T13548] __lock_acquire+0x1173/0x1ba0 [ 643.449928][T13548] lock_acquire+0x179/0x350 [ 643.449939][T13548] ? do_ip_getsockopt+0x1843/0x2220 [ 643.449959][T13548] ? __pfx___might_resched+0x10/0x10 [ 643.449980][T13548] __mutex_lock+0x199/0xb90 [ 643.449994][T13548] ? do_ip_getsockopt+0x1843/0x2220 [ 643.450011][T13548] ? __might_fault+0xe3/0x190 [ 643.450025][T13548] ? __might_fault+0xe3/0x190 [ 643.450038][T13548] ? __might_fault+0x13b/0x190 [ 643.450050][T13548] ? do_ip_getsockopt+0x1843/0x2220 [ 643.450068][T13548] ? __pfx___mutex_lock+0x10/0x10 [ 643.450083][T13548] ? _copy_from_user+0x59/0xd0 [ 643.450098][T13548] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 643.450119][T13548] ? do_ip_getsockopt+0x1843/0x2220 [ 643.450136][T13548] ? rtnl_lock+0x9/0x20 [ 643.450154][T13548] do_ip_getsockopt+0x1843/0x2220 [ 643.450173][T13548] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 643.450190][T13548] ? lock_acquire+0x179/0x350 [ 643.450204][T13548] ? finish_task_switch.isra.0+0x221/0xc10 [ 643.450220][T13548] ? lockdep_hardirqs_on+0x7c/0x110 [ 643.450234][T13548] ? finish_task_switch.isra.0+0x221/0xc10 [ 643.450250][T13548] ? rcu_is_watching+0x12/0xc0 [ 643.450266][T13548] ? trace_sched_exit_tp+0xde/0x130 [ 643.450288][T13548] ? __schedule+0x1186/0x5de0 [ 643.450300][T13548] ? __lock_acquire+0xaa4/0x1ba0 [ 643.450315][T13548] ip_getsockopt+0x9b/0x1e0 [ 643.450333][T13548] ? __pfx_ip_getsockopt+0x10/0x10 [ 643.450353][T13548] ipv6_getsockopt+0x230/0x280 [ 643.450370][T13548] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 643.450387][T13548] tcp_getsockopt+0x9e/0x100 [ 643.450399][T13548] smc_getsockopt+0x162/0x370 [ 643.450417][T13548] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 643.450434][T13548] ? __pfx_smc_getsockopt+0x10/0x10 [ 643.450453][T13548] ? __pfx_smc_getsockopt+0x10/0x10 [ 643.450471][T13548] do_sock_getsockopt+0x3fc/0x800 [ 643.450489][T13548] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 643.450505][T13548] ? __fget_files+0x204/0x3c0 [ 643.450522][T13548] __sys_getsockopt+0x12f/0x260 [ 643.450537][T13548] __x64_sys_getsockopt+0xbd/0x160 [ 643.450549][T13548] ? do_syscall_64+0x9a/0x260 [ 643.450564][T13548] do_syscall_64+0xcd/0x260 [ 643.450578][T13548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.450592][T13548] RIP: 0033:0x7fee8998d169 [ 643.450603][T13548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.450616][T13548] RSP: 002b:00007fee877d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 643.450627][T13548] RAX: ffffffffffffffda RBX: 00007fee89ba6160 RCX: 00007fee8998d169 [ 643.450636][T13548] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000004 [ 643.450644][T13548] RBP: 00007fee89a0e2a0 R08: 0000200000000080 R09: 0000000000000000 [ 643.450651][T13548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.450659][T13548] R13: 0000000000000001 R14: 00007fee89ba6160 R15: 00007ffc9f320638 [ 643.450672][T13548] [ 643.450704][ T30] audit: type=1400 audit(1743677010.979:4709): avc: denied { getopt } for pid=13540 comm="syz.0.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 643.841648][ T30] audit: type=1400 audit(1743677011.439:4710): avc: denied { write } for pid=5180 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.863798][ T30] audit: type=1400 audit(1743677011.439:4711): avc: denied { remove_name } for pid=5180 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.886776][ T30] audit: type=1400 audit(1743677011.439:4712): avc: denied { rename } for pid=5180 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 643.915174][ T30] audit: type=1400 audit(1743677011.439:4713): avc: denied { add_name } for pid=5180 comm="syslogd" name="messages.0" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.937984][ T30] audit: type=1400 audit(1743677011.439:4714): avc: denied { unlink } for pid=5180 comm="syslogd" name="messages.0" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 643.995286][ T80] usb 4-1: USB disconnect, device number 57 [ 644.050702][ T5834] usb 2-1: USB disconnect, device number 50 [ 644.904812][ T24] pwc: Warning: more than 1 configuration available. [ 644.912669][ T24] pwc: Failed to set LED on/off time (-71) [ 644.918696][ T24] pwc: send_video_command error -71 [ 644.924118][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 644.931624][ T24] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 644.944594][ T24] usb 5-1: USB disconnect, device number 64 [ 648.952915][T12350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog