last executing test programs: 24.670127929s ago: executing program 1 (id=178): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) mkdir(&(0x7f0000001c00)='./file0\x00', 0x4b) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x40000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 21.698869984s ago: executing program 2 (id=188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x24}}, 0x40080) poll(&(0x7f0000000380)=[{r3, 0xa2}, {r1, 0x182}, {r1, 0x4000}], 0x3, 0x4) (fail_nth: 2) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080), 0x8) 19.920056269s ago: executing program 2 (id=189): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) bind$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x10, 0x8, 0x8, 0x6664, 0x2, "0e63d86e1b74ffd8"}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x200008}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ftruncate(0xffffffffffffffff, 0xfe8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 19.081545597s ago: executing program 2 (id=191): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000000300000000000000170100002020640500000000002020207b1af8ff00000000bfa1000000ff000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x0, 0x47524247, 0x2, @discrete={0x7, 0x6}}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0xe2) ftruncate(r3, 0x3f) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r3, 0x0) socket(0x40000000015, 0x5, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) 14.741207721s ago: executing program 2 (id=198): ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x0) r3 = epoll_create(0x3ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(r0, 0x6, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x3e4, &(0x7f0000000400)={[{@dyn}]}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x18c6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x3c, [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x1, 0x2, 0xf, {0x9, 0x21, 0x716d, 0xc, 0x1, {0x22, 0x9ce}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xf7, 0x5, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x8d, 0x4, 0xf0}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x2, 0x0, 0x10, 0x8}, 0x60, &(0x7f0000000200)={0x5, 0xf, 0x60, 0x3, [@ptm_cap={0x3}, @generic={0x55, 0x10, 0x3, "91535226d875876d6584e918c7d3b5e48d34be6b12a8a6e322afc48d02e67ddc2907a61cf0da3bcc72323ff7a798d0475fd974587f2ae55b4c5d2bbd597a7b95d67c96e5ba7b5afd4ed7530f1c4e8301e508"}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40c}}, {0x2, &(0x7f00000003c0)=@string={0x2}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc0c}}, {0x39, &(0x7f0000000480)=@string={0x39, 0x3, "8256b841428f9c532536df8f616271a317a01ab0ad2a89cf527b813f3c7e7302d2336dd1c726a5020420511d746d905f0c5ccec0ccb059"}}]}) lremovexattr(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580)=@random={'trusted.', '\\*\\\x00'}) 13.617161594s ago: executing program 4 (id=201): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bridge_slave_0\x00', &(0x7f00000001c0)=@ethtool_eeprom={0xc, 0x4}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x3) openat(r4, &(0x7f0000000080)='.\x00', 0x0, 0x44) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000080)={0x0, 0x0, 0x6, r5, 0xfff}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x8, 0x4, 0x7fc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)={0x23c, 0x15, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0xb0, 0x8, "6e722988043f7f0951bb74ed432c4845c4e1b6740299ebac75496861c8ee433317916feb57ffdb5fea10db0c0a1fab4dc87489ae72396eb3897743790f24a187ce7c3602327400c9fa313bf4ca680a43e6830a1a0b817b2b28458f8d15a758eede96592a0b5be74131c622e598d0f016d35510a96fffaba88154a6c62852490b8232dabc769b027e1264a6ca0aba93b516175288dd361a5f135965a2a6658d1600e24423ff27329e52b18f93"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xfd, 0x8, "0f2f67455be47da6d6425bc7c9813b20ed3d00bc9658cca9ebb3004cfc6355a61b56c54f0d4c651a952fd5228b2f0fe480f860cdefdbaa1b2c8fa61ca5bf6cc0f0179acb7ce4b7401997587505d9c06600b0af0a134071738402b139bb94bb61e96ea0c75fa5b111c3974259acb4c28b150910b194565f09f70a839611e5a134a37c0efb6ddf56e83b32b2b77c086ce520dc6a91bbf69833b85d77c966158bc39cd966ba0540fbc7243b5c8d82ee1eddaa8ed62126ac33d9b936dc9501f88061576760a69d41431cbaf5c6349ee9ae1ef91f5e72b4d9a956a3b2b718c158d618653376b81bf8a9629e2ff3116ece4bc1da1ec9f4b80b9ac915"}, @NFTA_OBJ_USERDATA={0x49, 0x8, "1e2cdfced8cf4e69ba283084df5758fa0ae1eedf16ccc5175c2cea588c2297c497957f309f0e67ec4836dad2d5aac44c51e97dca254913531d3df52b7dbf85c1d701fd1a79"}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004894) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e3793dba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007df3a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff18e0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a00643416d7e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a203c991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r6}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r6, 0x0, 0x100000000000000}, 0x38) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x3) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001500010028bd7000fcdbdf25e0000001000000000000000000000000fc0000000000000000000000000000014e2300004e2100090a0020a06c000000", @ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="b56b6e00010000000a0010006a", @ANYRES16=r1, @ANYRES8=r1, @ANYBLOB="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", @ANYBLOB="f735af", @ANYRESDEC=r1, @ANYRESOCT=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x4004054}, 0x0) 12.676315301s ago: executing program 1 (id=203): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000000)=ANY=[]) 12.578423717s ago: executing program 0 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/116, 0x74}, {&(0x7f0000000640)=""/170, 0xaa}, {&(0x7f00000000c0)=""/7, 0x7}], 0x3, 0x0, 0x96) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)={0x5, 0x20, 0x4, 0x0, "d80004000000000000957f78e83d4a100a000000000020000661e6e66b8b37ff"}) ioctl$SNDCTL_DSP_SPEED(r2, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04040a00"], 0xd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYRESOCT=r1, @ANYRES64], 0x3b) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) 12.025186583s ago: executing program 4 (id=205): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) mkdir(&(0x7f0000001c00)='./file0\x00', 0x4b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x40000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 10.985507068s ago: executing program 4 (id=206): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x400500, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000240)="5d186ac83466dd769fc7e23a27143d190cb2217ecfc90853918617c1240a472440c60854407d70b964bedbfd847d383a80767463874324cc07ecd4cf64cb963a0ffb5e20c1e6cfee52bdf4eb9c7112d807709a5c5a8bdb860b845ab0d2ff45863e324a5359fecfd07334cc04ab714e508920f961169c37063360fad61c7645c22106d858281de8b1be7f35487a53b9013f56e6ee65208360ce8473aac00e6cca058611ed3c43be04ebf33fdd7ccb1437b9c694aa765a1faa4a8edb14c047807540232a7d26878183f01abebcc7df1a12625acb46db7f32", 0xd7, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000380)={r1}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xe) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x4e) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f00000000c0)=0x3, &(0x7f0000000300)=0x4) write$UHID_CREATE2(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x1, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_usb_connect(0x0, 0x51, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000025697086708129808460102030109023f"], 0x0) socket$inet(0x2, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r7}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000400), 0x20000000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000004d073df4000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) 10.867510565s ago: executing program 1 (id=208): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000000300000000000000170100002020640500000000002020207b1af8ff00000000bfa1000000ff000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x0, 0x47524247, 0x2, @discrete={0x7, 0x6}}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0xe2) ftruncate(r3, 0x3f) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r3, 0x0) socket(0x40000000015, 0x5, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) 10.029754603s ago: executing program 3 (id=209): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000001c0)='bic\x00', 0x4) 9.900826836s ago: executing program 3 (id=210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r4 = dup(r2) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000001880)=ANY=[], 0xfdef) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x2c}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x6800c881) 9.812525289s ago: executing program 2 (id=211): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xa4}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00001b5000/0x2000)=nil, 0x2000}, 0x3}) poll(&(0x7f0000000300)=[{r3}, {r0, 0x1320}], 0x2, 0xe2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x7, [{}, {0x2}, {0xffffffff}, {0x1}, {0x3, 0x3}, {0x2, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000ca007eb1e1e6986fd5a570bc000003000000000000000000b5bcb2ac4ec6e4f28ab9896c2ee6d5f5a1aa59251c11090556c567fa39a1f976e010308d729718870e0913f36b571a81915e668629a6c61fbdc6e56d52af20d6244dbfc539d9da97160529013363d66376aa4e0d0e94e0b6378b24d2ce6c2ff8bbaa43370dbf561987f7512babc3c080f9bebba74e867dc6dbe2ef42cb79c3deb276a2c81e35d068d5bd61f89824f3de157e4ea3b1ec127dca13e5a892c632cd09b4f8991c5b9eb86e2ee1ac45ff1d5208f5739bbe8b0aeb3f638bd317", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) 9.581257081s ago: executing program 3 (id=212): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) fchdir(r4) waitid$P_PIDFD(0x3, r4, &(0x7f0000000000), 0x1, &(0x7f0000000300)) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='syscall\x00') preadv(r5, 0x0, 0x0, 0x7, 0x126) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0xb, 0x7, 0x32315258, 0x2, 0x10001, 0xbb, 0xb, 0x2, 0x0, 0x6, 0x2, 0x4}}) 8.285765129s ago: executing program 3 (id=213): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000013000500000000000008000007000040", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100005800c0007800800010000000000"], 0x34}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 7.873493317s ago: executing program 1 (id=214): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0xeabf, 0x8, 0x0, 0x200368}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYRES32=r1], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r3}, 0x18) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@userxattr}]}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x1}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f0000000040)={0xffffffffffff8001, {0xc, 0xa, 0x2e718928, 0x3ff, 0x99b}}) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180), 0x4) mmap(&(0x7f0000162000/0x3000)=nil, 0x3000, 0xb635773f04ebbee2, 0x8071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000161000/0x4000)=nil, 0x4000, 0x6, &(0x7f0000000080)=0x2, 0xa, 0x3) 6.968217515s ago: executing program 0 (id=215): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000004000020"]) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0}) 6.96629164s ago: executing program 2 (id=216): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x20, 0xd, 0xc6, {0xc6, 0x22, "a9712d6d25b17915a2885f5d3c4d2be2b4cc167dd6d4a4f7f759f4c3f28a53404adc73d77265f31ace49ef2727330473edad8ca2c3323d15898719ae68d8e52b2ffd12accf0dbc7ab3e86fc4c60f9371cc4dccee61a8c1e0d874a041396135dfe82ab446b03171453bb274d17bdfcc49366ce9d9bcf2d2a2a2e261f92ca18ef05795e3dfae447b5721fc6b65e40d5682df433b46dc2c61b005b6713dced7ea64d6177fdc2842a4eacbe7c67d92f76b6672f59b0b3fac9a18ae7094429dd495254917684c"}}, &(0x7f0000000000)={0x0, 0x3, 0x9, @string={0x9, 0x3, "fb807c863c45c3"}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x40, 0x17, 0x9e, "b5e77a5508b3604f233252cac837746a29062d5c8f0d49c931069fb762d194583ae356f70534a0811440ee06cd27ee9266007e358f2eee12dcb5be60030390f5016271cbb2bf0cd9eb7148062b95c3a248d02e7886e5aafc61994560dfef1cef9ec8f35dc9b63348fb15d08e56d92eecf5cdd519b0e04d06c154190b1b630a2e6a55baf23a8a6727b42372d1905140047906832419e205107cee2d728abb"}, &(0x7f0000000080)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x81, 0x3, "e4ecd8"}, &(0x7f0000000d80)={0x20, 0x82, 0x3, "c91c62"}, &(0x7f00000003c0)={0x20, 0x83, 0x1, "be"}, &(0x7f0000000400)={0x20, 0x84, 0x2, "c8ba"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "afc682"}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f00000005c0)={0x0, 0x18, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000040)={0x200126000, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r4, 0x401) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) ustat(0xfffffffeffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000017f82677000000000000000900000000030000009c020000000200000000004db69d690021000000050000000000001bd869b59363b3ea69f36369100f5419eb334869845394409076035e15fa150f573f8ef2db905cfd8b3f5efa06ed3d7a965332d54c39ec3e22154c394cb881121f6374c1fbe24b6b94c058a4a3430b0e0c22b173c15b4a2ef567726df228d856aa501524af343b244ac9ac3105cacfc3f84477c416f0e385150d527d0499e8d718118588cef4b1a421ceef0f4dcb289da46dc567496ac6829b531af4798230034a6b90c0df4bff096eeee3fdafbc3fd88161cd1944a81e71d03332"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) 6.729384877s ago: executing program 4 (id=217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xfffffffe}, 0x1c) landlock_create_ruleset(0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xf5ff) 6.534734034s ago: executing program 3 (id=218): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) syz_usb_connect(0x0, 0x42, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x21, 0xcd, 0xb9, 0x20, 0x1e2d, 0xb0, 0x5b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x25, 0x0, 0x0, 0xff, 0x2a, 0x84, 0xff, [@uac_control={{0xa, 0x24, 0x1, 0xffff, 0x18}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x100, 0x5, 0x5, 0x8, 0x7, 0x1}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x3, 0x1, [0x7], 0x3}]}]}}]}}]}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x10000}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x2}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000111401ff0100000000000000"], 0x18}}, 0x0) r3 = dup(0xffffffffffffffff) writev(r3, &(0x7f0000001540)=[{&(0x7f0000000400)="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", 0x781}], 0x1) setsockopt(r3, 0x1, 0x20, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c3400000000001090224000100", @ANYRES64], 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000001c0)={0xf6c, 0x10000, 0x7}, 0xc) 5.445630001s ago: executing program 0 (id=219): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000013000500000000000008000007000040", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100005800c0007800800010000000000"], 0x34}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 5.202865944s ago: executing program 4 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0xf, 0x0, 0x1000000}, 0x10) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$VHOST_VDPA_GET_DEVICE_ID(r5, 0x8004af70, &(0x7f0000000000)) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='uid<', @ANYRESDEC=0x0, @ANYBLOB=',uid<', @ANYRESDEC=0x0, @ANYBLOB="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"]) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0xfffffffffffffffe) close_range(r6, 0xffffffffffffffff, 0x0) 4.467099204s ago: executing program 0 (id=221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}}, 0x40000) 3.557173278s ago: executing program 4 (id=222): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=r0, @ANYRES8, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r1, r2}, 0xc) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340), 0x14) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63db142ade2bd907f400", "fd6ed24e", "01000010ffffffff"}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000680)={0x20, &(0x7f0000000240)=[{0x5, 0x7f, 0xc, 0x400000}, {0xb00, 0x9, 0x82}]}) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x5) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffff19) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_dccp(0xa, 0x6, 0x0) 3.120390227s ago: executing program 0 (id=223): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) fchdir(r4) waitid$P_PIDFD(0x3, r4, &(0x7f0000000000), 0x1, &(0x7f0000000300)) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='syscall\x00') preadv(r5, &(0x7f00000002c0), 0x0, 0x7, 0x126) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0xb, 0x7, 0x32315258, 0x2, 0x10001, 0xbb, 0xb, 0x2, 0x0, 0x6, 0x2, 0x4}}) 2.96661997s ago: executing program 3 (id=224): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000000300000000000000170100002020640500000000002020207b1af8ff00000000bfa1000000ff000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x0, 0x47524247, 0x2, @discrete={0x7, 0x6}}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0xe2) ftruncate(r3, 0x3f) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r3, 0x0) socket(0x40000000015, 0x5, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) 2.938388551s ago: executing program 1 (id=225): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (fail_nth: 3) 2.178092948s ago: executing program 0 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/116, 0x74}, {&(0x7f0000000640)=""/170, 0xaa}, {&(0x7f00000000c0)=""/7, 0x7}], 0x3, 0x0, 0x96) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="0000080000000804"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)={0x5, 0x20, 0x4, 0x0, "d80004000000000000957f78e83d4a100a000000000020000661e6e66b8b37ff"}) ioctl$SNDCTL_DSP_SPEED(r2, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04040a00"], 0xd) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYRESOCT=r1, @ANYRES64], 0x3b) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) 0s ago: executing program 1 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x1, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'wg2\x00', 0x2000}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1c8, 0x12) kernel console output (not intermixed with test programs): [ 39.706010][ T29] audit: type=1400 audit(1733228326.082:78): avc: denied { transition } for pid=5721 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.734060][ T29] audit: type=1400 audit(1733228326.082:79): avc: denied { noatsecure } for pid=5721 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.753724][ T29] audit: type=1400 audit(1733228326.092:80): avc: denied { write } for pid=5721 comm="sh" path="pipe:[3912]" dev="pipefs" ino=3912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.780066][ T29] audit: type=1400 audit(1733228326.092:81): avc: denied { rlimitinh } for pid=5721 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.799949][ T29] audit: type=1400 audit(1733228326.092:82): avc: denied { siginh } for pid=5721 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 40.216955][ T29] audit: type=1400 audit(1733228326.592:83): avc: denied { write } for pid=5738 comm="sftp-server" path="pipe:[3924]" dev="pipefs" ino=3924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 40.737988][ T29] audit: type=1400 audit(1733228327.112:84): avc: denied { read } for pid=5173 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 40.761269][ T29] audit: type=1400 audit(1733228327.112:85): avc: denied { append } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.785102][ T29] audit: type=1400 audit(1733228327.112:86): avc: denied { open } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.828624][ T29] audit: type=1400 audit(1733228327.112:87): avc: denied { getattr } for pid=5173 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. [ 48.244617][ T29] audit: type=1400 audit(1733228334.622:88): avc: denied { mounton } for pid=5803 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.248106][ T5803] cgroup: Unknown subsys name 'net' [ 48.267491][ T29] audit: type=1400 audit(1733228334.622:89): avc: denied { mount } for pid=5803 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.296632][ T29] audit: type=1400 audit(1733228334.682:90): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.474397][ T5803] cgroup: Unknown subsys name 'cpuset' [ 48.481485][ T5803] cgroup: Unknown subsys name 'rlimit' [ 48.606246][ T29] audit: type=1400 audit(1733228334.982:91): avc: denied { setattr } for pid=5803 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.637604][ T29] audit: type=1400 audit(1733228334.982:92): avc: denied { create } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.659692][ T29] audit: type=1400 audit(1733228334.982:93): avc: denied { write } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.680196][ T29] audit: type=1400 audit(1733228334.982:94): avc: denied { read } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.702189][ T29] audit: type=1400 audit(1733228334.982:95): avc: denied { mounton } for pid=5803 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 48.721119][ T5805] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.727080][ T29] audit: type=1400 audit(1733228334.982:96): avc: denied { mount } for pid=5803 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 48.759207][ T29] audit: type=1400 audit(1733228335.012:97): avc: denied { read } for pid=5485 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.569443][ T5803] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.629756][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.663480][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.671236][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.678939][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.686799][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.695041][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.702590][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.709019][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 51.718369][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.721930][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.726375][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.733374][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 51.740778][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.746490][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.753930][ T5829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.768311][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.768745][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.777610][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 51.783542][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 51.790568][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.797573][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.803750][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.813585][ T5816] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 51.826081][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 51.828885][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.840649][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.841414][ T5816] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 51.857092][ T5830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 51.857293][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 51.871857][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.099763][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 52.138379][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 52.232817][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 52.241712][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.248896][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.256241][ T5826] bridge_slave_0: entered allmulticast mode [ 52.263150][ T5826] bridge_slave_0: entered promiscuous mode [ 52.296530][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.303723][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.310801][ T5826] bridge_slave_1: entered allmulticast mode [ 52.318236][ T5826] bridge_slave_1: entered promiscuous mode [ 52.341763][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 52.360240][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.367462][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.374723][ T5813] bridge_slave_0: entered allmulticast mode [ 52.381080][ T5813] bridge_slave_0: entered promiscuous mode [ 52.407700][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.416113][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.423521][ T5813] bridge_slave_1: entered allmulticast mode [ 52.429855][ T5813] bridge_slave_1: entered promiscuous mode [ 52.443817][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.455400][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.496904][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 52.510386][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.521576][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.558435][ T5826] team0: Port device team_slave_0 added [ 52.568284][ T5826] team0: Port device team_slave_1 added [ 52.581543][ T5813] team0: Port device team_slave_0 added [ 52.601090][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.608477][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.615833][ T5817] bridge_slave_0: entered allmulticast mode [ 52.622662][ T5817] bridge_slave_0: entered promiscuous mode [ 52.630290][ T5813] team0: Port device team_slave_1 added [ 52.644000][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.650950][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.677369][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.694905][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.701961][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.709234][ T5817] bridge_slave_1: entered allmulticast mode [ 52.716085][ T5817] bridge_slave_1: entered promiscuous mode [ 52.735570][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.743415][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.769443][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.783669][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.790729][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.798235][ T5818] bridge_slave_0: entered allmulticast mode [ 52.805115][ T5818] bridge_slave_0: entered promiscuous mode [ 52.829723][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.837385][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.844626][ T5818] bridge_slave_1: entered allmulticast mode [ 52.850993][ T5818] bridge_slave_1: entered promiscuous mode [ 52.858718][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.869518][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.879268][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.886279][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.912278][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.924307][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.931253][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.957332][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.995235][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.002557][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.009665][ T5823] bridge_slave_0: entered allmulticast mode [ 53.016459][ T5823] bridge_slave_0: entered promiscuous mode [ 53.029177][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.045282][ T5817] team0: Port device team_slave_0 added [ 53.052436][ T5817] team0: Port device team_slave_1 added [ 53.067348][ T5826] hsr_slave_0: entered promiscuous mode [ 53.073936][ T5826] hsr_slave_1: entered promiscuous mode [ 53.080347][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.087826][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.095290][ T5823] bridge_slave_1: entered allmulticast mode [ 53.101662][ T5823] bridge_slave_1: entered promiscuous mode [ 53.109038][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.154046][ T5813] hsr_slave_0: entered promiscuous mode [ 53.159975][ T5813] hsr_slave_1: entered promiscuous mode [ 53.166053][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.174262][ T5813] Cannot create hsr debugfs directory [ 53.180217][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.187338][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.216140][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.228709][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.250123][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.257376][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.283598][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.299351][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.316102][ T5818] team0: Port device team_slave_0 added [ 53.340163][ T5818] team0: Port device team_slave_1 added [ 53.365478][ T5823] team0: Port device team_slave_0 added [ 53.389611][ T5823] team0: Port device team_slave_1 added [ 53.400605][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.407618][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.434382][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.447982][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.455681][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.481693][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.497731][ T5817] hsr_slave_0: entered promiscuous mode [ 53.503898][ T5817] hsr_slave_1: entered promiscuous mode [ 53.509697][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.517358][ T5817] Cannot create hsr debugfs directory [ 53.539620][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.546731][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.572804][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.593594][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.600549][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.627081][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.689401][ T5818] hsr_slave_0: entered promiscuous mode [ 53.696127][ T5818] hsr_slave_1: entered promiscuous mode [ 53.701977][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.709833][ T5818] Cannot create hsr debugfs directory [ 53.734458][ T5823] hsr_slave_0: entered promiscuous mode [ 53.740374][ T5823] hsr_slave_1: entered promiscuous mode [ 53.748128][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.757510][ T5823] Cannot create hsr debugfs directory [ 53.833659][ T5824] Bluetooth: hci1: command tx timeout [ 53.843228][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.856380][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.868070][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.878393][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.912433][ T5824] Bluetooth: hci3: command tx timeout [ 53.912446][ T5822] Bluetooth: hci2: command tx timeout [ 53.912478][ T5830] Bluetooth: hci0: command tx timeout [ 53.918024][ T5822] Bluetooth: hci4: command tx timeout [ 53.971892][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.979934][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.011735][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.021478][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.060341][ T5817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.075449][ T5817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.096160][ T5817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.104880][ T5817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.148473][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.168714][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.178087][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.186802][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.230791][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.266347][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.277302][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.286510][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.301793][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.311579][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.330220][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.342967][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.357283][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.364553][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.374819][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.381878][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.390407][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.397468][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.407100][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.414174][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.463967][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.510578][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.527606][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.534706][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.551205][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.558306][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.588165][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 54.588180][ T29] audit: type=1400 audit(1733228340.962:111): avc: denied { sys_module } for pid=5813 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.610983][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.687278][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.738473][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.745664][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.777899][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.804779][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.811846][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.828708][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.856869][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.887439][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.906156][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.913228][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.938740][ T5826] veth0_vlan: entered promiscuous mode [ 54.949369][ T2131] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.956472][ T2131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.977206][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.991537][ T5826] veth1_vlan: entered promiscuous mode [ 55.016458][ T5813] veth0_vlan: entered promiscuous mode [ 55.051165][ T5826] veth0_macvtap: entered promiscuous mode [ 55.066110][ T5813] veth1_vlan: entered promiscuous mode [ 55.101587][ T5826] veth1_macvtap: entered promiscuous mode [ 55.113409][ T5813] veth0_macvtap: entered promiscuous mode [ 55.128765][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.145955][ T5817] veth0_vlan: entered promiscuous mode [ 55.154169][ T5813] veth1_macvtap: entered promiscuous mode [ 55.173258][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.197399][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.211747][ T5817] veth1_vlan: entered promiscuous mode [ 55.228461][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.239821][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.250884][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.264808][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.275098][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.288283][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.297596][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.312617][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.325206][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.336369][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.347270][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.357368][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.366263][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.375803][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.394954][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.429779][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.456846][ T5817] veth0_macvtap: entered promiscuous mode [ 55.473729][ T5817] veth1_macvtap: entered promiscuous mode [ 55.537969][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.549061][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.559758][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.570328][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.581935][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.601573][ T5818] veth0_vlan: entered promiscuous mode [ 55.645302][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.660771][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.672863][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.683951][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.694978][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.714753][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.721373][ T5818] veth1_vlan: entered promiscuous mode [ 55.728406][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.745283][ T5817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.754503][ T5817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.763625][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.772712][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.806037][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.814360][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.815104][ T3511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.837070][ T3511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.869968][ T29] audit: type=1400 audit(1733228342.242:112): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.YYXXBA/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 55.894899][ T29] audit: type=1400 audit(1733228342.242:113): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.917071][ T5818] veth0_macvtap: entered promiscuous mode [ 55.920330][ T5824] Bluetooth: hci1: command tx timeout [ 55.931198][ T29] audit: type=1400 audit(1733228342.242:114): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.YYXXBA/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.932931][ T5823] veth0_vlan: entered promiscuous mode [ 55.956830][ T29] audit: type=1400 audit(1733228342.242:115): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 55.975750][ T3567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.984229][ T29] audit: type=1400 audit(1733228342.242:116): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.YYXXBA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.019358][ T5824] Bluetooth: hci4: command tx timeout [ 56.024349][ T5830] Bluetooth: hci2: command tx timeout [ 56.025525][ T5824] Bluetooth: hci3: command tx timeout [ 56.030090][ T5830] Bluetooth: hci0: command tx timeout [ 56.046348][ T3567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.046540][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.071732][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.079749][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.088073][ T29] audit: type=1400 audit(1733228342.242:117): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.YYXXBA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.095926][ T5818] veth1_macvtap: entered promiscuous mode [ 56.117786][ T29] audit: type=1400 audit(1733228342.242:118): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.135111][ T5823] veth1_vlan: entered promiscuous mode [ 56.144484][ T29] audit: type=1400 audit(1733228342.302:119): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 56.171348][ T29] audit: type=1400 audit(1733228342.342:120): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.208214][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.219409][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.229341][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.240033][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.250478][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.261210][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.272491][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.313135][ T5823] veth0_macvtap: entered promiscuous mode [ 56.321010][ T5823] veth1_macvtap: entered promiscuous mode [ 56.334362][ T2131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.335591][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.352036][ T2131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.352812][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.370398][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.381067][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.391091][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.401849][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.411827][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.422306][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.432997][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.441478][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.452032][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.461820][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.473166][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.482992][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.493408][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.504216][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.513351][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.522074][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.530767][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.539528][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.552621][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.568179][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.591216][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.602549][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.612754][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.623244][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.633212][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.643743][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.655242][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.735369][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.744210][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.753296][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.762293][ T5823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.841955][ T5900] FAULT_INJECTION: forcing a failure. [ 56.841955][ T5900] name failslab, interval 1, probability 0, space 0, times 1 [ 56.871031][ T5900] CPU: 1 UID: 0 PID: 5900 Comm: syz.2.6 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 56.881484][ T5900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 56.891536][ T5900] Call Trace: [ 56.894807][ T5900] [ 56.897725][ T5900] dump_stack_lvl+0x16c/0x1f0 [ 56.902393][ T5900] should_fail_ex+0x497/0x5b0 [ 56.907075][ T5900] ? fs_reclaim_acquire+0xae/0x150 [ 56.912176][ T5900] should_failslab+0xc2/0x120 [ 56.916863][ T5900] __kmalloc_noprof+0xcb/0x510 [ 56.921602][ T5900] ? d_absolute_path+0x137/0x1b0 [ 56.926516][ T5900] ? rcu_is_watching+0x12/0xc0 [ 56.931258][ T5900] tomoyo_encode2+0x100/0x3e0 [ 56.935918][ T5900] tomoyo_encode+0x29/0x50 [ 56.940315][ T5900] tomoyo_realpath_from_path+0x19d/0x720 [ 56.945927][ T5900] tomoyo_path_number_perm+0x248/0x590 [ 56.951359][ T5900] ? tomoyo_path_number_perm+0x235/0x590 [ 56.956965][ T5900] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 56.962938][ T5900] ? __pfx_lock_release+0x10/0x10 [ 56.967937][ T5900] ? trace_lock_acquire+0x14e/0x1f0 [ 56.973113][ T5900] ? lock_acquire+0x2f/0xb0 [ 56.977592][ T5900] ? __fget_files+0x40/0x3a0 [ 56.982161][ T5900] ? __fget_files+0x206/0x3a0 [ 56.986814][ T5900] security_file_ioctl+0x9b/0x240 [ 56.991817][ T5900] __x64_sys_ioctl+0xb7/0x200 [ 56.996481][ T5900] do_syscall_64+0xcd/0x250 [ 57.000965][ T5900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.006840][ T5900] RIP: 0033:0x7f5bb3d7ff19 [ 57.011233][ T5900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.030838][ T5900] RSP: 002b:00007f5bb4c55058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.039254][ T5900] RAX: ffffffffffffffda RBX: 00007f5bb3f45fa0 RCX: 00007f5bb3d7ff19 [ 57.047227][ T5900] RDX: 0000000000000000 RSI: 0000000000005521 RDI: 0000000000000003 [ 57.055197][ T5900] RBP: 00007f5bb4c550a0 R08: 0000000000000000 R09: 0000000000000000 [ 57.063165][ T5900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.071110][ T5900] R13: 0000000000000000 R14: 00007f5bb3f45fa0 R15: 00007ffd2460d758 [ 57.079076][ T5900] [ 57.089737][ T2131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.105475][ T2131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.142886][ T5900] ERROR: Out of memory at tomoyo_realpath_from_path. [ 57.289905][ T5898] openvswitch: netlink: Message has 1275 unknown bytes. [ 57.297570][ T5898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 57.510815][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.522374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.563841][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.611392][ T3511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.624142][ T3511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.656681][ T2131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.666425][ T2131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.992346][ T5830] Bluetooth: hci1: command tx timeout [ 58.342346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 58.351022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 58.582846][ T5830] Bluetooth: hci0: command tx timeout [ 58.598899][ T5830] Bluetooth: hci3: command tx timeout [ 58.608194][ T5830] Bluetooth: hci2: command tx timeout [ 58.609721][ T5824] Bluetooth: hci4: command tx timeout [ 58.617216][ T5923] openvswitch: netlink: Message has 1275 unknown bytes. [ 58.700950][ T5925] Unsupported ieee802154 address type: 0 [ 58.801394][ T5925] overlay: filesystem on ./bus not supported as upperdir [ 59.064974][ T5923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 59.215016][ T5929] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.13'. [ 59.224109][ T5929] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 59.242697][ T5919] Zero length message leads to an empty skb [ 59.309409][ T5926] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.612834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.621392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.622147][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 59.622158][ T29] audit: type=1326 audit(1733228345.992:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5916 comm="syz.4.5" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c97ff19 code=0x0 [ 59.726406][ T29] audit: type=1400 audit(1733228346.042:166): avc: denied { create } for pid=5932 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.762439][ T29] audit: type=1400 audit(1733228346.102:167): avc: denied { create } for pid=5916 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.802793][ T29] audit: type=1400 audit(1733228346.102:168): avc: denied { connect } for pid=5916 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.852351][ T29] audit: type=1400 audit(1733228346.122:169): avc: denied { bind } for pid=5932 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.882258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.922064][ T29] audit: type=1400 audit(1733228346.122:170): avc: denied { name_bind } for pid=5932 comm="syz.0.14" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 59.949272][ T5940] warning: `syz.1.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.992777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 60.001477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 60.031979][ T29] audit: type=1400 audit(1733228346.122:171): avc: denied { node_bind } for pid=5932 comm="syz.0.14" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 60.076902][ T5816] Bluetooth: hci1: command tx timeout [ 60.107783][ T29] audit: type=1400 audit(1733228346.122:172): avc: denied { setopt } for pid=5932 comm="syz.0.14" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.133455][ T29] audit: type=1400 audit(1733228346.122:173): avc: denied { write } for pid=5932 comm="syz.0.14" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.156451][ T29] audit: type=1400 audit(1733228346.122:174): avc: denied { connect } for pid=5932 comm="syz.0.14" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.156450][ T5940] __vm_enough_memory: pid: 5940, comm: syz.1.18, bytes: 549544300544 not enough memory for the allocation [ 60.352592][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 60.512279][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 60.520383][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.616247][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 60.632405][ T5816] Bluetooth: hci2: command tx timeout [ 60.633931][ T5824] Bluetooth: hci4: command tx timeout [ 60.637845][ T5816] Bluetooth: hci3: command tx timeout [ 60.643485][ T5824] Bluetooth: hci0: command tx timeout [ 60.859219][ T5962] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.134394][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.168786][ T9] usb 1-1: config 0 descriptor?? [ 61.516183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 62.512183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 62.601819][ T5946] trusted_key: encrypted_key: insufficient parameters specified [ 62.716220][ T9] apple 0003:05AC:024B.0001: unknown main item tag 0x6 [ 62.725881][ T9] apple 0003:05AC:024B.0001: unknown main item tag 0x1 [ 62.776367][ T9] apple 0003:05AC:024B.0001: unknown main item tag 0xe [ 62.794681][ T9] apple 0003:05AC:024B.0001: bogus close delimiter [ 62.801233][ T9] apple 0003:05AC:024B.0001: item 0 0 2 10 parsing failed [ 63.498332][ T9] apple 0003:05AC:024B.0001: parse failed [ 63.504216][ T9] apple 0003:05AC:024B.0001: probe with driver apple failed with error -22 [ 63.518293][ T9] usb 1-1: USB disconnect, device number 2 [ 63.529081][ T5983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.486262][ T6001] evm: overlay not supported [ 64.572115][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 64.642546][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 64.642559][ T29] audit: type=1400 audit(1733228350.992:220): avc: denied { create } for pid=5997 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.722183][ T8] usb 1-1: device descriptor read/64, error -71 [ 65.440314][ T6007] netlink: 'syz.1.37': attribute type 1 has an invalid length. [ 65.607581][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 65.722158][ T29] audit: type=1400 audit(1733228352.082:221): avc: denied { shutdown } for pid=6010 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.772081][ T8] usb 1-1: device descriptor read/64, error -71 [ 66.110478][ T8] usb usb1-port1: attempt power cycle [ 66.437983][ T29] audit: type=1400 audit(1733228352.742:222): avc: denied { write } for pid=6010 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.852467][ T29] audit: type=1400 audit(1733228352.842:223): avc: denied { getopt } for pid=6010 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.872169][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 67.099765][ T8] usb 1-1: device not accepting address 5, error -71 [ 68.572584][ T6038] netlink: 1296 bytes leftover after parsing attributes in process `syz.3.45'. [ 68.581583][ T6038] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 68.625783][ T29] audit: type=1400 audit(1733228355.002:224): avc: denied { create } for pid=6039 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.363958][ T29] audit: type=1400 audit(1733228355.642:225): avc: denied { write } for pid=6036 comm="syz.2.43" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 69.473768][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'. [ 69.992234][ T29] audit: type=1400 audit(1733228355.682:226): avc: denied { ioctl } for pid=6044 comm="syz.0.46" path="socket:[7846]" dev="sockfs" ino=7846 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.032200][ T29] audit: type=1400 audit(1733228355.852:227): avc: denied { ioctl } for pid=6039 comm="syz.1.44" path="socket:[7837]" dev="sockfs" ino=7837 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.041306][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.048012][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.335960][ T29] audit: type=1400 audit(1733228357.712:228): avc: denied { getattr } for pid=6061 comm="syz.1.50" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.772064][ T29] audit: type=1400 audit(1733228358.122:229): avc: denied { ioctl } for pid=6063 comm="syz.2.51" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.235622][ T971] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.442115][ T971] usb 2-1: Using ep0 maxpacket: 16 [ 72.489888][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.531722][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.702124][ T971] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 73.273046][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.295831][ T971] usb 2-1: config 0 descriptor?? [ 73.592227][ T29] audit: type=1400 audit(1733228359.952:230): avc: denied { create } for pid=6081 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 74.314081][ T971] appleir 0003:05AC:8241.0002: item fetching failed at offset 2/5 [ 74.332701][ T971] appleir 0003:05AC:8241.0002: parse failed [ 74.352173][ T971] appleir 0003:05AC:8241.0002: probe with driver appleir failed with error -22 [ 74.579887][ T6095] openvswitch: netlink: Message has 1275 unknown bytes. [ 74.587120][ T6095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.902132][ T29] audit: type=1400 audit(1733228361.262:231): avc: denied { write } for pid=6065 comm="syz.1.52" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 74.944900][ T6066] overlayfs: missing 'workdir' [ 75.186715][ T5864] usb 2-1: USB disconnect, device number 2 [ 75.505634][ T6099] IPVS: length: 27 != 8 [ 75.617546][ T6101] netlink: 40 bytes leftover after parsing attributes in process `syz.0.62'. [ 75.766286][ T29] audit: type=1400 audit(1733228362.142:232): avc: denied { create } for pid=6100 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 76.255003][ T25] cfg80211: failed to load regulatory.db [ 76.279977][ T6113] FAULT_INJECTION: forcing a failure. [ 76.279977][ T6113] name failslab, interval 1, probability 0, space 0, times 0 [ 76.306829][ T6113] CPU: 0 UID: 0 PID: 6113 Comm: syz.1.66 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 76.317388][ T6113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.327444][ T6113] Call Trace: [ 76.330709][ T6113] [ 76.333622][ T6113] dump_stack_lvl+0x16c/0x1f0 [ 76.338284][ T6113] should_fail_ex+0x497/0x5b0 [ 76.342941][ T6113] ? fs_reclaim_acquire+0xae/0x150 [ 76.348046][ T6113] should_failslab+0xc2/0x120 [ 76.352712][ T6113] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 76.358061][ T6113] ? prepare_creds+0x2e/0x750 [ 76.362715][ T6113] prepare_creds+0x2e/0x750 [ 76.367203][ T6113] ? __pfx_get_random_u64+0x10/0x10 [ 76.372412][ T6113] copy_creds+0xa7/0xa50 [ 76.376654][ T6113] copy_process+0x10b2/0x8df0 [ 76.381329][ T6113] ? __pfx___lock_acquire+0x10/0x10 [ 76.386506][ T6113] ? hlock_class+0x4e/0x130 [ 76.390986][ T6113] ? mark_lock+0xb5/0xc60 [ 76.395294][ T6113] ? __pfx_copy_process+0x10/0x10 [ 76.400306][ T6113] ? __might_fault+0x13b/0x190 [ 76.405049][ T6113] ? __pfx_lock_release+0x10/0x10 [ 76.410046][ T6113] ? trace_lock_acquire+0x14e/0x1f0 [ 76.415223][ T6113] ? lock_acquire+0x2f/0xb0 [ 76.419700][ T6113] ? __might_fault+0xe3/0x190 [ 76.424452][ T6113] ? __might_fault+0xe3/0x190 [ 76.429109][ T6113] ? _copy_from_user+0x59/0xd0 [ 76.433858][ T6113] kernel_clone+0xfd/0x960 [ 76.438252][ T6113] ? __pfx_kernel_clone+0x10/0x10 [ 76.443271][ T6113] __do_sys_clone3+0x1f9/0x270 [ 76.448011][ T6113] ? __pfx___do_sys_clone3+0x10/0x10 [ 76.453277][ T6113] ? __might_fault+0x13b/0x190 [ 76.458023][ T6113] ? rcu_is_watching+0x12/0xc0 [ 76.462767][ T6113] do_syscall_64+0xcd/0x250 [ 76.467249][ T6113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.473132][ T6113] RIP: 0033:0x7fec7417ff19 [ 76.477523][ T6113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.497104][ T6113] RSP: 002b:00007fec74eaaf28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 76.505492][ T6113] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fec7417ff19 [ 76.513456][ T6113] RDX: 00007fec74eaaf40 RSI: 0000000000000058 RDI: 00007fec74eaaf40 [ 76.521401][ T6113] RBP: 00007fec74eab0a0 R08: 0000000000000000 R09: 0000000000000058 [ 76.529347][ T6113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.537307][ T6113] R13: 0000000000000000 R14: 00007fec74345fa0 R15: 00007fff04144ac8 [ 76.545268][ T6113] [ 76.804858][ T29] audit: type=1400 audit(1733228363.182:233): avc: denied { read } for pid=6116 comm="syz.1.67" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.067146][ T5824] Bluetooth: hci2: command tx timeout [ 77.102124][ T29] audit: type=1400 audit(1733228363.212:234): avc: denied { open } for pid=6116 comm="syz.1.67" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.271402][ T29] audit: type=1400 audit(1733228363.612:235): avc: denied { execute } for pid=6103 comm="syz.3.63" path="/14/cpu.stat" dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.421054][ T6111] ======================================================= [ 78.421054][ T6111] WARNING: The mand mount option has been deprecated and [ 78.421054][ T6111] and is ignored by this kernel. Remove the mand [ 78.421054][ T6111] option from the mount to silence this warning. [ 78.421054][ T6111] ======================================================= [ 78.422186][ T29] audit: type=1400 audit(1733228364.792:236): avc: denied { remount } for pid=6108 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.484702][ T6132] syz.4.65: attempt to access beyond end of device [ 78.484702][ T6132] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 78.659954][ T6132] efs: cannot read volume header [ 78.671767][ T29] audit: type=1400 audit(1733228364.862:237): avc: denied { mounton } for pid=6108 comm="syz.4.65" path="/9/file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 78.923138][ T29] audit: type=1400 audit(1733228364.972:238): avc: denied { read } for pid=6135 comm="syz.0.70" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.945925][ T29] audit: type=1400 audit(1733228364.972:239): avc: denied { open } for pid=6135 comm="syz.0.70" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.972124][ T29] audit: type=1400 audit(1733228365.002:240): avc: denied { ioctl } for pid=6135 comm="syz.0.70" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.094638][ T29] audit: type=1400 audit(1733228365.072:241): avc: denied { ioctl } for pid=6135 comm="syz.0.70" path="socket:[8972]" dev="sockfs" ino=8972 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.272600][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.472070][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 81.479649][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 81.494155][ T9] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 81.503350][ T9] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 81.512441][ T9] usb 4-1: Product: syz [ 81.526808][ T9] usb 4-1: Manufacturer: syz [ 81.531428][ T9] usb 4-1: SerialNumber: syz [ 81.578369][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 81.578404][ T29] audit: type=1400 audit(1733228367.922:243): avc: denied { create } for pid=6155 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 81.929291][ T6158] sp0: Synchronizing with TNC [ 82.379736][ T9] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 82.390059][ T9] visor 4-1:1.0: probe with driver visor failed with error -110 [ 82.432096][ T29] audit: type=1400 audit(1733228368.242:244): avc: denied { sqpoll } for pid=6155 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 82.877437][ T29] audit: type=1400 audit(1733228369.252:245): avc: denied { read } for pid=6144 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.266284][ T6176] dccp_v6_rcv: dropped packet with invalid checksum [ 85.350918][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.374561][ T29] audit: type=1400 audit(1733228371.752:246): avc: denied { append } for pid=6184 comm="syz.4.85" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.430593][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.469071][ T6187] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.476188][ T6187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.524924][ T29] audit: type=1400 audit(1733228371.902:247): avc: denied { bind } for pid=6175 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.565064][ T6187] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.572282][ T6187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.779012][ T29] audit: type=1400 audit(1733228372.152:248): avc: denied { mount } for pid=6197 comm="syz.0.88" name="/" dev="rpc_pipefs" ino=9074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 85.823647][ T6198] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 85.862066][ T6198] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 85.876477][ T6196] overlayfs: missing 'lowerdir' [ 85.925464][ T29] audit: type=1400 audit(1733228372.302:249): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 86.025139][ T29] audit: type=1400 audit(1733228372.402:250): avc: denied { read } for pid=6200 comm="syz.2.89" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 86.084300][ T29] audit: type=1400 audit(1733228372.402:251): avc: denied { open } for pid=6200 comm="syz.2.89" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 86.108942][ T29] audit: type=1400 audit(1733228372.402:252): avc: denied { ioctl } for pid=6200 comm="syz.2.89" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 86.364200][ T6208] openvswitch: netlink: Message has 1275 unknown bytes. [ 86.371356][ T6208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.713231][ T6210] dccp_v6_rcv: dropped packet with invalid checksum [ 86.874809][ T8] usb 4-1: USB disconnect, device number 2 [ 86.927742][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.031570][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.239122][ T29] audit: type=1400 audit(1733228373.602:253): avc: denied { write } for pid=6213 comm="syz.0.93" path="socket:[9127]" dev="sockfs" ino=9127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.852146][ T29] audit: type=1400 audit(1733228374.212:254): avc: denied { getopt } for pid=6218 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.125952][ T6212] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.133262][ T6212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.285945][ T6212] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.290366][ T29] audit: type=1400 audit(1733228374.662:255): avc: denied { mount } for pid=6233 comm="syz.1.96" name="/" dev="ramfs" ino=9143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 88.293122][ T6212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.487245][ T29] audit: type=1400 audit(1733228374.862:256): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 88.637548][ T6241] dccp_v6_rcv: dropped packet with invalid checksum [ 88.736904][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.834140][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.622690][ T6243] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.629981][ T6243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.680370][ T6243] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.687581][ T6243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.802129][ T971] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 90.025510][ T971] usb 3-1: unable to get BOS descriptor or descriptor too short [ 90.040852][ T971] usb 3-1: not running at top speed; connect to a high speed hub [ 90.058574][ T971] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 90.078025][ T971] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 90.113675][ T971] usb 3-1: config 17 has no interface number 0 [ 90.133856][ T971] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 90.149494][ T6260] FAULT_INJECTION: forcing a failure. [ 90.149494][ T6260] name failslab, interval 1, probability 0, space 0, times 0 [ 90.165447][ T971] usb 3-1: config 17 interface 8 has no altsetting 0 [ 90.172741][ T6260] CPU: 0 UID: 0 PID: 6260 Comm: syz.4.104 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 90.183313][ T6260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 90.193346][ T6260] Call Trace: [ 90.196603][ T6260] [ 90.199510][ T6260] dump_stack_lvl+0x16c/0x1f0 [ 90.204183][ T6260] should_fail_ex+0x497/0x5b0 [ 90.208837][ T6260] ? fs_reclaim_acquire+0xae/0x150 [ 90.213929][ T6260] should_failslab+0xc2/0x120 [ 90.218582][ T6260] __kmalloc_cache_noprof+0x68/0x410 [ 90.223843][ T6260] ? __pfx_lock_release+0x10/0x10 [ 90.228856][ T6260] cma_alloc_port+0x9a/0x5b0 [ 90.233441][ T6260] rdma_bind_addr_dst+0x1efd/0x2d50 [ 90.238632][ T6260] ? __pfx_mark_lock+0x10/0x10 [ 90.243385][ T6260] cma_bind_addr+0x13d/0x300 [ 90.247977][ T6260] ? __pfx_cma_bind_addr+0x10/0x10 [ 90.253082][ T6260] ? mark_held_locks+0x9f/0xe0 [ 90.257838][ T6260] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 90.263622][ T6260] rdma_resolve_addr+0x132/0x1fd0 [ 90.268628][ T6260] ? __mutex_lock+0x1cc/0xa60 [ 90.273283][ T6260] ? __pfx_lock_release+0x10/0x10 [ 90.278281][ T6260] ? __pfx_xa_load+0x10/0x10 [ 90.282850][ T6260] ? ucma_resolve_ip+0x12e/0x220 [ 90.287764][ T6260] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 90.293202][ T6260] ? do_raw_spin_unlock+0x172/0x230 [ 90.298380][ T6260] ? __pfx_ucma_get_ctx+0x10/0x10 [ 90.303387][ T6260] ? __might_fault+0xe3/0x190 [ 90.308056][ T6260] ? ucma_resolve_ip+0x160/0x220 [ 90.312977][ T6260] ucma_resolve_ip+0x160/0x220 [ 90.317715][ T6260] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 90.322978][ T6260] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 90.328236][ T6260] ucma_write+0x1f9/0x330 [ 90.332551][ T6260] ? __pfx_ucma_write+0x10/0x10 [ 90.337391][ T6260] ? bpf_lsm_file_permission+0x9/0x10 [ 90.342758][ T6260] ? security_file_permission+0x71/0x210 [ 90.348381][ T6260] ? __pfx_ucma_write+0x10/0x10 [ 90.353221][ T6260] vfs_write+0x24c/0x1150 [ 90.357528][ T6260] ? __fget_files+0x1fc/0x3a0 [ 90.362181][ T6260] ? __pfx_lock_release+0x10/0x10 [ 90.367190][ T6260] ? __pfx_vfs_write+0x10/0x10 [ 90.371938][ T6260] ? lock_acquire+0x2f/0xb0 [ 90.376416][ T6260] ? __fget_files+0x40/0x3a0 [ 90.380996][ T6260] ? __fget_files+0x206/0x3a0 [ 90.385650][ T6260] ksys_write+0x207/0x250 [ 90.389955][ T6260] ? __pfx_ksys_write+0x10/0x10 [ 90.394803][ T6260] do_syscall_64+0xcd/0x250 [ 90.399304][ T6260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.405174][ T6260] RIP: 0033:0x7f0e9c97ff19 [ 90.409565][ T6260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.429152][ T6260] RSP: 002b:00007f0e9d6ea058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.437551][ T6260] RAX: ffffffffffffffda RBX: 00007f0e9cb45fa0 RCX: 00007f0e9c97ff19 [ 90.445517][ T6260] RDX: 0000000000000048 RSI: 0000000020000180 RDI: 0000000000000003 [ 90.453487][ T6260] RBP: 00007f0e9d6ea0a0 R08: 0000000000000000 R09: 0000000000000000 [ 90.461443][ T6260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.469407][ T6260] R13: 0000000000000000 R14: 00007f0e9cb45fa0 R15: 00007ffcecf7e578 [ 90.477395][ T6260] [ 90.518738][ T971] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 90.531834][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.539998][ T971] usb 3-1: Product: syz [ 90.546353][ T971] usb 3-1: Manufacturer: syz [ 90.550929][ T971] usb 3-1: SerialNumber: syz [ 90.566111][ T29] audit: type=1400 audit(1733228376.942:257): avc: denied { create } for pid=6256 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.589810][ T29] audit: type=1400 audit(1733228376.942:258): avc: denied { setopt } for pid=6256 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.614493][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 90.773595][ T29] audit: type=1400 audit(1733228376.942:259): avc: denied { connect } for pid=6256 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.782119][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 90.828206][ T8] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 90.839056][ T8] usb 1-1: config 179 has no interface number 0 [ 90.848355][ T8] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 90.865576][ T8] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 90.887767][ T8] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 90.914042][ T8] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 90.937193][ T971] usb 3-1: selecting invalid altsetting 0 [ 90.975644][ T971] usb 3-1: 8:6 : no UAC_FORMAT_TYPE desc [ 90.991554][ T8] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 91.005056][ T971] usb 3-1: selecting invalid altsetting 0 [ 91.048823][ T971] usb 3-1: USB disconnect, device number 2 [ 91.054815][ T8] usb 1-1: config 179 interface 65 has no altsetting 0 [ 91.080423][ T8] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 91.110607][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.138331][ T8] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5 [ 91.202882][ T5176] input input5: unable to receive magic message: -110 [ 91.205330][ T29] audit: type=1400 audit(1733228377.542:260): avc: denied { read } for pid=5176 comm="acpid" name="js0" dev="devtmpfs" ino=2747 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.232835][ T29] audit: type=1400 audit(1733228377.542:261): avc: denied { open } for pid=5176 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2747 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.261934][ T29] audit: type=1400 audit(1733228377.582:262): avc: denied { ioctl } for pid=5176 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2747 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.249288][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 92.249304][ T29] audit: type=1400 audit(1733228378.622:267): avc: denied { ioctl } for pid=6255 comm="syz.0.102" path="socket:[10280]" dev="sockfs" ino=10280 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.034315][ T5176] input input5: unable to receive magic message: -32 [ 93.098308][ T5176] input input5: unable to receive magic message: -32 [ 93.928849][ T5176] input input5: unable to receive magic message: -32 [ 93.978394][ T5176] input input5: unable to receive magic message: -32 [ 94.172189][ T5864] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.264196][ T8] usb 1-1: USB disconnect, device number 7 [ 94.270081][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 94.297152][ T8] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 94.392851][ T5864] usb 4-1: device descriptor read/64, error -71 [ 94.715417][ T5864] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.781110][ T6300] openvswitch: netlink: Message has 1275 unknown bytes. [ 94.788506][ T6300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.922195][ T5864] usb 4-1: device descriptor read/64, error -71 [ 94.987550][ T6302] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 95.112748][ T5864] usb usb4-port1: attempt power cycle [ 95.124476][ T6304] openvswitch: netlink: Message has 1275 unknown bytes. [ 95.131847][ T6304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.472121][ T5864] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.491715][ T29] audit: type=1400 audit(1733228381.862:268): avc: denied { read append } for pid=6305 comm="syz.4.115" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.517172][ T5864] usb 4-1: device descriptor read/8, error -71 [ 95.578837][ T29] audit: type=1400 audit(1733228381.902:269): avc: denied { ioctl open } for pid=6305 comm="syz.4.115" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.792237][ T5864] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 95.823519][ T5864] usb 4-1: device descriptor read/8, error -71 [ 95.947568][ T5864] usb usb4-port1: unable to enumerate USB device [ 96.163854][ T5814] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 96.420294][ T5814] usb 3-1: Invalid ep0 maxpacket: 64 [ 96.592216][ T5814] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 96.971674][ T29] audit: type=1400 audit(1733228383.292:270): avc: denied { read } for pid=6333 comm="syz.1.127" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 97.000292][ T5814] usb 3-1: Invalid ep0 maxpacket: 64 [ 97.572925][ T5814] usb usb3-port1: attempt power cycle [ 97.592124][ T29] audit: type=1400 audit(1733228383.292:271): avc: denied { open } for pid=6333 comm="syz.1.127" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 97.757229][ T29] audit: type=1400 audit(1733228383.992:272): avc: denied { ioctl } for pid=6333 comm="syz.1.127" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 97.878240][ T6343] openvswitch: netlink: Message has 1275 unknown bytes. [ 97.885503][ T6343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.662225][ T5814] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 98.701604][ T5814] usb 3-1: Invalid ep0 maxpacket: 64 [ 98.793213][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 98.856432][ T5814] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 99.082238][ T5814] usb 3-1: device not accepting address 6, error -71 [ 99.335102][ T5814] usb usb3-port1: unable to enumerate USB device [ 99.366805][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 99.375214][ T8] usb 4-1: config 0 has an invalid interface number: 174 but max is 0 [ 99.392551][ T8] usb 4-1: config 0 has no interface number 0 [ 99.457839][ T8] usb 4-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice=ee.4a [ 99.467662][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.481872][ T6363] FAULT_INJECTION: forcing a failure. [ 99.481872][ T6363] name failslab, interval 1, probability 0, space 0, times 0 [ 99.498001][ T6363] CPU: 1 UID: 0 PID: 6363 Comm: syz.2.135 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 99.508616][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.518179][ T8] usb 4-1: Product: syz [ 99.518659][ T6363] Call Trace: [ 99.526099][ T6363] [ 99.529034][ T6363] dump_stack_lvl+0x16c/0x1f0 [ 99.533726][ T6363] should_fail_ex+0x497/0x5b0 [ 99.538414][ T6363] ? fs_reclaim_acquire+0xae/0x150 [ 99.542070][ T8] usb 4-1: Manufacturer: syz [ 99.543549][ T6363] should_failslab+0xc2/0x120 [ 99.548122][ T8] usb 4-1: SerialNumber: syz [ 99.552776][ T6363] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 99.552806][ T6363] ? proc_alloc_inode+0x25/0x200 [ 99.552827][ T6363] ? __pfx_proc_alloc_inode+0x10/0x10 [ 99.552843][ T6363] proc_alloc_inode+0x25/0x200 [ 99.552859][ T6363] alloc_inode+0x5d/0x230 [ 99.552879][ T6363] new_inode+0x22/0x210 [ 99.552900][ T6363] proc_pid_make_inode+0x22/0x160 [ 99.552918][ T6363] proc_fdinfo_instantiate+0x57/0x250 [ 99.552944][ T6363] proc_fill_cache+0x362/0x470 [ 99.552961][ T6363] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 99.552984][ T6363] ? __pfx_proc_fill_cache+0x10/0x10 [ 99.552998][ T6363] ? __pfx_vsnprintf+0x10/0x10 [ 99.597743][ T8] usb 4-1: config 0 descriptor?? [ 99.601909][ T6363] ? snprintf+0xc8/0x100 [ 99.601945][ T6363] ? _raw_spin_unlock+0x28/0x50 [ 99.601965][ T6363] ? fget_task_next+0x2a8/0x580 [ 99.632101][ T971] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.636656][ T6363] proc_readfd_common+0x1f0/0x620 [ 99.649123][ T6363] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 99.655087][ T6363] ? __pfx_proc_readfd_common+0x10/0x10 [ 99.660612][ T6363] ? down_read_killable+0xcc/0x380 [ 99.665704][ T6363] ? __pfx_down_read_killable+0x10/0x10 [ 99.671227][ T6363] ? bch2_btree_node_iter_verify+0x1d0/0x9a0 [ 99.677190][ T6363] iterate_dir+0x52f/0xb40 [ 99.681590][ T6363] __x64_sys_getdents64+0x148/0x2c0 [ 99.686769][ T6363] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 99.692468][ T6363] ? __pfx_filldir64+0x10/0x10 [ 99.697211][ T6363] ? __secure_computing+0x273/0x3f0 [ 99.702387][ T6363] do_syscall_64+0xcd/0x250 [ 99.706968][ T6363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.712854][ T6363] RIP: 0033:0x7f5bb3d7ff19 [ 99.717247][ T6363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.736831][ T6363] RSP: 002b:00007f5bb4c55058 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 99.745221][ T6363] RAX: ffffffffffffffda RBX: 00007f5bb3f45fa0 RCX: 00007f5bb3d7ff19 [ 99.753172][ T6363] RDX: 0000000000001002 RSI: 0000000020002f40 RDI: 0000000000000003 [ 99.761117][ T6363] RBP: 00007f5bb4c550a0 R08: 0000000000000000 R09: 0000000000000000 [ 99.769062][ T6363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.777007][ T6363] R13: 0000000000000000 R14: 00007f5bb3f45fa0 R15: 00007ffd2460d758 [ 99.784973][ T6363] [ 99.788024][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.823461][ T8] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 99.963872][ T971] usb 5-1: Using ep0 maxpacket: 32 [ 99.969115][ T29] audit: type=1400 audit(1733228386.342:273): avc: denied { bind } for pid=6367 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 100.183008][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.193167][ T6367] dccp_close: ABORT with 32 bytes unread [ 100.212515][ T8] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) [ 100.222645][ T8] usb 4-1: media controller created [ 100.254348][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.372134][ T29] audit: type=1400 audit(1733228386.342:274): avc: denied { name_bind } for pid=6367 comm="syz.0.139" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 100.491254][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 100.497481][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 100.504279][ T8] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)' [ 100.514691][ T29] audit: type=1400 audit(1733228386.342:275): avc: denied { node_bind } for pid=6367 comm="syz.0.139" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 100.556921][ T971] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 100.572579][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.580563][ T971] usb 5-1: Product: syz [ 100.714399][ T29] audit: type=1400 audit(1733228386.342:276): avc: denied { listen } for pid=6367 comm="syz.0.139" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 100.856906][ T971] usb 5-1: Manufacturer: syz [ 100.861541][ T971] usb 5-1: SerialNumber: syz [ 100.922798][ T971] usb 5-1: config 0 descriptor?? [ 100.949607][ T971] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 100.956489][ T29] audit: type=1400 audit(1733228386.342:277): avc: denied { setopt } for pid=6367 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 100.985708][ T8] rc_core: IR keymap rc-avermedia-m135a not found [ 100.997435][ T6383] openvswitch: netlink: Message has 1275 unknown bytes. [ 101.004691][ T6383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.025123][ T8] Registered IR keymap rc-empty [ 101.073605][ T29] audit: type=1400 audit(1733228386.342:278): avc: denied { ioctl } for pid=6366 comm="syz.1.137" path="socket:[9620]" dev="sockfs" ino=9620 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 101.074618][ T8] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 101.277931][ T29] audit: type=1400 audit(1733228386.342:279): avc: denied { connect } for pid=6367 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 101.334825][ T8] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input6 [ 101.390967][ T29] audit: type=1400 audit(1733228386.342:280): avc: denied { name_connect } for pid=6367 comm="syz.0.139" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 101.391521][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 101.842241][ T8] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. [ 102.614815][ T8] dvb-usb: error -19 while querying for an remote control event. [ 102.782365][ T8] dvb-usb: error -19 while querying for an remote control event. [ 102.872359][ T6398] FAULT_INJECTION: forcing a failure. [ 102.872359][ T6398] name failslab, interval 1, probability 0, space 0, times 0 [ 102.905358][ T6398] CPU: 0 UID: 0 PID: 6398 Comm: syz.2.143 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 102.908438][ T968] usb 4-1: USB disconnect, device number 7 [ 102.915973][ T6398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.931854][ T6398] Call Trace: [ 102.935129][ T6398] [ 102.938043][ T6398] dump_stack_lvl+0x16c/0x1f0 [ 102.942704][ T6398] should_fail_ex+0x497/0x5b0 [ 102.947372][ T6398] ? fs_reclaim_acquire+0xae/0x150 [ 102.952466][ T6398] should_failslab+0xc2/0x120 [ 102.957137][ T6398] __kmalloc_noprof+0xcb/0x510 [ 102.961875][ T6398] ? __might_fault+0x13b/0x190 [ 102.966618][ T6398] sock_kmalloc+0x111/0x170 [ 102.971112][ T6398] __ipv6_sock_mc_join+0x411/0x930 [ 102.976219][ T6398] ipv6_mcast_join_leave+0x24b/0x290 [ 102.981480][ T6398] ? __pfx_ipv6_mcast_join_leave+0x10/0x10 [ 102.987262][ T6398] ? find_held_lock+0x2d/0x110 [ 102.992032][ T6398] ? mark_held_locks+0x9f/0xe0 [ 102.996793][ T6398] ? __local_bh_enable_ip+0xa4/0x120 [ 103.002067][ T6398] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.007274][ T6398] do_ipv6_setsockopt+0x2b6a/0x45f0 [ 103.012462][ T6398] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 103.017984][ T6398] ? lock_acquire+0x2f/0xb0 [ 103.022461][ T6398] ? avc_has_perm_noaudit+0x61/0x3a0 [ 103.027737][ T6398] ? avc_has_perm_noaudit+0x143/0x3a0 [ 103.033103][ T6398] ? avc_has_perm+0x11b/0x1c0 [ 103.037757][ T6398] ? __pfx_avc_has_perm+0x10/0x10 [ 103.042764][ T6398] ? hlock_class+0x4e/0x130 [ 103.047249][ T6398] ? sock_has_perm+0x25a/0x2f0 [ 103.051993][ T6398] ? __pfx_sock_has_perm+0x10/0x10 [ 103.057113][ T6398] ? selinux_netlbl_socket_setsockopt+0x184/0x470 [ 103.063557][ T6398] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 103.070329][ T6398] ? ipv6_setsockopt+0xcb/0x170 [ 103.075161][ T6398] ipv6_setsockopt+0xcb/0x170 [ 103.079819][ T6398] tcp_setsockopt+0xa4/0x100 [ 103.084398][ T6398] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 103.090269][ T6398] do_sock_setsockopt+0x222/0x480 [ 103.095283][ T6398] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 103.100818][ T6398] ? lock_acquire+0x2f/0xb0 [ 103.105320][ T6398] __sys_setsockopt+0x1a0/0x230 [ 103.110163][ T6398] __x64_sys_setsockopt+0xbd/0x160 [ 103.115270][ T6398] ? do_syscall_64+0x91/0x250 [ 103.119937][ T6398] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.125134][ T6398] do_syscall_64+0xcd/0x250 [ 103.129631][ T6398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.135508][ T6398] RIP: 0033:0x7f5bb3d7ff19 [ 103.139899][ T6398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.159481][ T6398] RSP: 002b:00007f5bb4c55058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 103.167869][ T6398] RAX: ffffffffffffffda RBX: 00007f5bb3f45fa0 RCX: 00007f5bb3d7ff19 [ 103.175829][ T6398] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000003 [ 103.183776][ T6398] RBP: 00007f5bb4c550a0 R08: 0000000000000088 R09: 0000000000000000 [ 103.191721][ T6398] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 103.199672][ T6398] R13: 0000000000000000 R14: 00007f5bb3f45fa0 R15: 00007ffd2460d758 [ 103.207635][ T6398] [ 103.443578][ T968] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected. [ 103.492263][ T971] gspca_ov534_9: reg_r err -71 [ 104.146120][ T6406] overlayfs: missing 'lowerdir' [ 104.642115][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 104.642135][ T29] audit: type=1400 audit(1733228390.942:290): avc: denied { mounton } for pid=6411 comm="syz.2.149" path="/32/bus" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.602241][ T971] gspca_ov534_9: Unknown sensor 0000 [ 105.602303][ T971] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 105.612116][ T971] usb 5-1: USB disconnect, device number 2 [ 107.184956][ T29] audit: type=1400 audit(1733228393.562:291): avc: denied { write } for pid=6433 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 107.506022][ T29] audit: type=1400 audit(1733228393.882:292): avc: denied { accept } for pid=6442 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 107.887575][ T29] audit: type=1400 audit(1733228394.262:293): avc: denied { create } for pid=6438 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 107.952148][ T29] audit: type=1400 audit(1733228394.262:294): avc: denied { getopt } for pid=6438 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.091399][ T6463] overlayfs: missing 'lowerdir' [ 109.622092][ T968] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.882212][ T968] usb 5-1: Using ep0 maxpacket: 16 [ 110.345599][ T968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.356679][ T968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.366893][ T968] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 110.380683][ T968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.391052][ T968] usb 5-1: config 0 descriptor?? [ 111.504945][ T6490] netlink: 936 bytes leftover after parsing attributes in process `syz.2.169'. [ 111.914282][ T29] audit: type=1400 audit(1733228397.362:295): avc: denied { append } for pid=6484 comm="syz.2.169" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.077754][ T29] audit: type=1400 audit(1733228398.452:296): avc: denied { mount } for pid=6492 comm="syz.0.170" name="/" dev="autofs" ino=9866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 112.148131][ T29] audit: type=1400 audit(1733228398.522:297): avc: denied { create } for pid=6497 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.171896][ T6468] overlayfs: missing 'workdir' [ 112.295045][ T29] audit: type=1400 audit(1733228398.592:298): avc: denied { bind } for pid=6497 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.361419][ T968] usbhid 5-1:0.0: can't add hid device: -71 [ 112.361958][ T968] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 112.363549][ T968] usb 5-1: USB disconnect, device number 3 [ 112.438905][ T29] audit: type=1400 audit(1733228398.632:299): avc: denied { create } for pid=6492 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.438925][ T29] audit: type=1400 audit(1733228398.652:300): avc: denied { connect } for pid=6492 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.438942][ T29] audit: type=1400 audit(1733228398.712:301): avc: denied { setopt } for pid=6503 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.438956][ T29] audit: type=1400 audit(1733228398.712:302): avc: denied { read write } for pid=6503 comm="syz.2.174" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.438971][ T29] audit: type=1400 audit(1733228398.712:303): avc: denied { open } for pid=6503 comm="syz.2.174" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.438986][ T29] audit: type=1400 audit(1733228398.712:304): avc: denied { ioctl } for pid=6503 comm="syz.2.174" path="/dev/vmci" dev="devtmpfs" ino=697 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.591300][ T6505] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 112.604100][ T6493] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.392091][ T5824] Bluetooth: hci3: command tx timeout [ 115.085586][ T6533] netlink: 1296 bytes leftover after parsing attributes in process `syz.3.181'. [ 115.094723][ T6533] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 115.874904][ T6541] block device autoloading is deprecated and will be removed. [ 116.143703][ T6523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.182'. [ 116.282232][ T6548] Bluetooth: MGMT ver 1.23 [ 116.288206][ T6539] netlink: 'syz.4.184': attribute type 21 has an invalid length. [ 116.296044][ T6539] netlink: 'syz.4.184': attribute type 6 has an invalid length. [ 116.304050][ T6539] netlink: 132 bytes leftover after parsing attributes in process `syz.4.184'. [ 118.185521][ T6557] FAULT_INJECTION: forcing a failure. [ 118.185521][ T6557] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 118.198725][ T6557] CPU: 1 UID: 0 PID: 6557 Comm: syz.2.188 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 118.209326][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.219416][ T6557] Call Trace: [ 118.222703][ T6557] [ 118.225639][ T6557] dump_stack_lvl+0x16c/0x1f0 [ 118.230343][ T6557] should_fail_ex+0x497/0x5b0 [ 118.235036][ T6557] _copy_to_user+0x32/0xd0 [ 118.239444][ T6557] simple_read_from_buffer+0xd0/0x160 [ 118.244803][ T6557] proc_fail_nth_read+0x198/0x270 [ 118.249816][ T6557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.255363][ T6557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.261085][ T6557] vfs_read+0x1df/0xbe0 [ 118.265234][ T6557] ? __fget_files+0x1fc/0x3a0 [ 118.269889][ T6557] ? __pfx___mutex_lock+0x10/0x10 [ 118.274901][ T6557] ? __pfx_vfs_read+0x10/0x10 [ 118.279557][ T6557] ? __fget_files+0x206/0x3a0 [ 118.284227][ T6557] ksys_read+0x12b/0x250 [ 118.288461][ T6557] ? __pfx_ksys_read+0x10/0x10 [ 118.293219][ T6557] do_syscall_64+0xcd/0x250 [ 118.297727][ T6557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.303613][ T6557] RIP: 0033:0x7f5bb3d7e92c [ 118.308011][ T6557] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 118.327610][ T6557] RSP: 002b:00007f5bb4c34050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.335999][ T6557] RAX: ffffffffffffffda RBX: 00007f5bb3f46080 RCX: 00007f5bb3d7e92c [ 118.343960][ T6557] RDX: 000000000000000f RSI: 00007f5bb4c340b0 RDI: 0000000000000006 [ 118.351909][ T6557] RBP: 00007f5bb4c340a0 R08: 0000000000000000 R09: 0000000000000000 [ 118.359857][ T6557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.367804][ T6557] R13: 0000000000000000 R14: 00007f5bb3f46080 R15: 00007ffd2460d758 [ 118.375758][ T6557] [ 118.762135][ T971] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 119.136041][ T6564] FAULT_INJECTION: forcing a failure. [ 119.136041][ T6564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.212126][ T971] usb 5-1: Using ep0 maxpacket: 16 [ 119.226623][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.266179][ T6564] CPU: 1 UID: 0 PID: 6564 Comm: syz.3.190 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 119.276823][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 119.286873][ T6564] Call Trace: [ 119.290134][ T6564] [ 119.293045][ T6564] dump_stack_lvl+0x16c/0x1f0 [ 119.297720][ T6564] should_fail_ex+0x497/0x5b0 [ 119.302393][ T6564] _copy_from_user+0x2e/0xd0 [ 119.306975][ T6564] snd_seq_ioctl+0x1c0/0x3f0 [ 119.311543][ T6564] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 119.316659][ T6564] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 119.323521][ T6564] ? selinux_file_ioctl+0x180/0x270 [ 119.328712][ T6564] ? selinux_file_ioctl+0xb4/0x270 [ 119.333807][ T6564] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 119.338917][ T6564] __x64_sys_ioctl+0x190/0x200 [ 119.343663][ T6564] do_syscall_64+0xcd/0x250 [ 119.348148][ T6564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.354022][ T6564] RIP: 0033:0x7ff46717ff19 [ 119.358426][ T6564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.378026][ T6564] RSP: 002b:00007ff467ef3058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.386448][ T6564] RAX: ffffffffffffffda RBX: 00007ff467345fa0 RCX: 00007ff46717ff19 [ 119.394501][ T6564] RDX: 0000000020000180 RSI: 000000004058534c RDI: 0000000000000005 [ 119.402468][ T6564] RBP: 00007ff467ef30a0 R08: 0000000000000000 R09: 0000000000000000 [ 119.410414][ T6564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.418448][ T6564] R13: 0000000000000000 R14: 00007ff467345fa0 R15: 00007fff0ca647c8 [ 119.426404][ T6564] [ 119.484174][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.524926][ T971] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 119.561917][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.480881][ T971] usb 5-1: config 0 descriptor?? [ 120.529620][ T971] usb 5-1: can't set config #0, error -71 [ 120.635851][ T971] usb 5-1: USB disconnect, device number 4 [ 120.912414][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 120.912447][ T29] audit: type=1400 audit(1733228407.222:309): avc: denied { mounton } for pid=6565 comm="syz.3.192" path="/proc/114/task" dev="proc" ino=10836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 122.852180][ T6587] bridge0: port 3(erspan0) entered blocking state [ 123.000469][ T6587] bridge0: port 3(erspan0) entered disabled state [ 123.007129][ T6587] erspan0: entered allmulticast mode [ 123.013363][ T6587] erspan0: entered promiscuous mode [ 123.019095][ T6587] bridge0: port 3(erspan0) entered blocking state [ 123.027995][ T6587] bridge0: port 3(erspan0) entered forwarding state [ 124.712188][ T5903] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.039226][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 125.063173][ T5903] usb 4-1: config 0 has an invalid interface number: 37 but max is 0 [ 125.071399][ T5903] usb 4-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 125.114216][ T5903] usb 4-1: config 0 has no interface number 0 [ 125.462106][ T5903] usb 4-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice=5b.16 [ 125.471192][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.493196][ T6614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.201'. [ 125.493264][ T5903] usb 4-1: Product: syz [ 125.522141][ T29] audit: type=1400 audit(1733228411.872:310): avc: denied { nlmsg_read } for pid=6607 comm="syz.4.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 125.532066][ T5903] usb 4-1: Manufacturer: syz [ 125.547360][ T5903] usb 4-1: SerialNumber: syz [ 125.632916][ T5903] usb 4-1: config 0 descriptor?? [ 125.893391][ T6595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.903593][ T29] audit: type=1400 audit(1733228412.272:311): avc: denied { getopt } for pid=6594 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.030509][ T6595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.162221][ T6622] syz.2.198: attempt to access beyond end of device [ 126.162221][ T6622] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 126.174901][ T6622] efs: cannot read volume header [ 126.236572][ T5903] option 4-1:0.37: GSM modem (1-port) converter detected [ 126.247853][ T5903] usb 4-1: USB disconnect, device number 8 [ 126.254689][ T5903] option 4-1:0.37: device disconnected [ 126.572118][ T968] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 127.362108][ T968] usb 1-1: Using ep0 maxpacket: 16 [ 127.369312][ T968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.380554][ T968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.407697][ T968] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 127.430385][ T29] audit: type=1400 audit(1733228413.802:312): avc: denied { read write } for pid=6630 comm="syz.4.206" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 127.471144][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.493959][ T5864] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 127.528984][ T5864] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 127.538299][ T968] usb 1-1: config 0 descriptor?? [ 127.644313][ T5864] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 127.656623][ T5864] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 128.252081][ T971] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.382700][ T29] audit: type=1400 audit(1733228413.802:313): avc: denied { open } for pid=6630 comm="syz.4.206" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 128.482250][ T971] usb 5-1: Using ep0 maxpacket: 8 [ 128.772387][ T971] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.901539][ T6618] overlayfs: missing 'workdir' [ 128.932088][ T971] usb 5-1: config 0 has no interfaces? [ 128.954377][ T971] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 129.408384][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.544307][ T971] usb 5-1: Product: syz [ 129.562128][ T971] usb 5-1: Manufacturer: syz [ 129.567598][ T971] usb 5-1: SerialNumber: syz [ 129.574263][ T971] usb 5-1: config 0 descriptor?? [ 130.069026][ T968] usbhid 1-1:0.0: can't add hid device: -71 [ 130.075085][ T968] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 130.087821][ T968] usb 1-1: USB disconnect, device number 8 [ 130.139765][ T5866] usb 5-1: USB disconnect, device number 5 [ 131.112641][ T5824] Bluetooth: hci0: command tx timeout [ 131.822249][ T971] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.342128][ T29] audit: type=1400 audit(1733228418.702:314): avc: denied { write } for pid=6667 comm="syz.0.215" name="001" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 132.642221][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.648576][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.983274][ T971] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 132.993237][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.010029][ T971] usb 3-1: config 0 descriptor?? [ 133.087471][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 133.687418][ T971] cp210x 3-1:0.0: cp210x converter detected [ 133.774774][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 133.931047][ T9] usb 4-1: config 0 has an invalid interface number: 37 but max is 0 [ 134.054475][ T9] usb 4-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 134.703743][ T9] usb 4-1: config 0 has no interface number 0 [ 134.714449][ T9] usb 4-1: New USB device found, idVendor=1e2d, idProduct=00b0, bcdDevice=5b.16 [ 134.731471][ T971] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 134.775723][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.819363][ T9] usb 4-1: Product: syz [ 134.830246][ T6690] syz.4.222[6690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.830311][ T6690] syz.4.222[6690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.842188][ T9] usb 4-1: Manufacturer: syz [ 134.862621][ T6690] syz.4.222[6690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.899170][ T9] usb 4-1: SerialNumber: syz [ 134.958006][ T29] audit: type=1326 audit(1733228421.302:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c97ff19 code=0x7ffc0000 [ 134.964465][ T9] usb 4-1: config 0 descriptor?? [ 134.981372][ T29] audit: type=1326 audit(1733228421.302:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c97ff19 code=0x7ffc0000 [ 134.981410][ T29] audit: type=1326 audit(1733228421.302:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f0e9c97ff19 code=0x7ffc0000 [ 134.981439][ T29] audit: type=1326 audit(1733228421.302:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c97ff19 code=0x7ffc0000 [ 134.981467][ T29] audit: type=1326 audit(1733228421.302:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c97ff19 code=0x7ffc0000 [ 134.981495][ T29] audit: type=1326 audit(1733228421.302:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f0e9c97ff19 code=0x7ffc0000 [ 134.981528][ T29] audit: type=1326 audit(1733228421.302:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c97ff19 code=0x7ffc0000 [ 135.126970][ T29] audit: type=1326 audit(1733228421.302:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c97ff19 code=0x7ffc0000 [ 135.150626][ T29] audit: type=1326 audit(1733228421.302:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f0e9c97ff19 code=0x7ffc0000 [ 135.174198][ T29] audit: type=1326 audit(1733228421.302:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c97ff19 code=0x7ffc0000 [ 135.243124][ T971] usb 3-1: cp210x converter now attached to ttyUSB0 [ 135.354090][ T9] option 4-1:0.37: GSM modem (1-port) converter detected [ 135.428034][ T9] usb 4-1: USB disconnect, device number 9 [ 135.972626][ T9] option 4-1:0.37: device disconnected [ 243.141956][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 243.148942][ C1] rcu: 0-...!: (1 GPs behind) idle=8aec/1/0x4000000000000000 softirq=15503/15505 fqs=0 [ 243.159354][ C1] rcu: (detected by 1, t=10505 jiffies, g=8673, q=493 ncpus=2) [ 243.166983][ C1] Sending NMI from CPU 1 to CPUs 0: [ 243.167007][ C0] NMI backtrace for cpu 0 [ 243.167016][ C0] CPU: 0 UID: 0 PID: 2203 Comm: kworker/u8:6 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 243.167031][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 243.167040][ C0] Workqueue: bat_events batadv_nc_worker [ 243.167063][ C0] RIP: 0010:lock_release+0x3d0/0x6f0 [ 243.167080][ C0] Code: 40 db 6c 8b e8 31 21 b3 09 b8 ff ff ff ff 65 0f c1 05 ec dc 8b 7e 83 f8 01 0f 85 fe 01 00 00 9c 58 f6 c4 02 0f 85 e9 01 00 00 <48> f7 04 24 00 02 00 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df 48 [ 243.167093][ C0] RSP: 0018:ffffc90000007c20 EFLAGS: 00000046 [ 243.167103][ C0] RAX: 0000000000000046 RBX: 1ffff92000000f86 RCX: ffffc90000007c70 [ 243.167113][ C0] RDX: 1ffff110055815e2 RSI: ffffffff8b6cdb40 RDI: ffffffff8bd1b460 [ 243.167122][ C0] RBP: d57e1d102ea6ccdd R08: 0000000000000000 R09: fffffbfff20be082 [ 243.167131][ C0] R10: ffffffff905f0417 R11: 0000000000000004 R12: 0000000000000004 [ 243.167140][ C0] R13: 0000000000000005 R14: ffff88802ac0af18 R15: ffff88802ac0a440 [ 243.167149][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 243.167164][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.167174][ C0] CR2: 0000001b2f3f5ff8 CR3: 0000000022b74000 CR4: 00000000003526f0 [ 243.167183][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 243.167191][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 243.167200][ C0] Call Trace: [ 243.167205][ C0] [ 243.167211][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 243.167227][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 243.167240][ C0] ? nmi_handle+0x1ac/0x5d0 [ 243.167255][ C0] ? lock_release+0x3d0/0x6f0 [ 243.167270][ C0] ? default_do_nmi+0x6a/0x160 [ 243.167283][ C0] ? exc_nmi+0x170/0x1e0 [ 243.167296][ C0] ? end_repeat_nmi+0xf/0x53 [ 243.167316][ C0] ? lock_release+0x3d0/0x6f0 [ 243.167330][ C0] ? lock_release+0x3d0/0x6f0 [ 243.167345][ C0] ? lock_release+0x3d0/0x6f0 [ 243.167359][ C0] [ 243.167363][ C0] [ 243.167367][ C0] ? debug_object_activate+0x2e6/0x4a0 [ 243.167384][ C0] ? __pfx_lock_release+0x10/0x10 [ 243.167399][ C0] ? lock_acquire+0x2f/0xb0 [ 243.167413][ C0] ? debug_object_activate+0x149/0x4a0 [ 243.167429][ C0] _raw_spin_unlock_irqrestore+0x1a/0x80 [ 243.167445][ C0] debug_object_activate+0x2e6/0x4a0 [ 243.167460][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 243.167475][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 243.167491][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 243.167508][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 243.167525][ C0] ? __pfx_advance_sched+0x10/0x10 [ 243.167540][ C0] enqueue_hrtimer+0x25/0x3c0 [ 243.167558][ C0] __hrtimer_run_queues+0x903/0xae0 [ 243.167578][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 243.167595][ C0] ? read_tsc+0x9/0x20 [ 243.167614][ C0] hrtimer_interrupt+0x392/0x8e0 [ 243.167635][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 243.167652][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 243.167667][ C0] [ 243.167672][ C0] [ 243.167676][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 243.167694][ C0] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 243.167709][ C0] Code: b8 ff ff ff ff 65 0f c1 05 f0 cf 8b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 243.167721][ C0] RSP: 0018:ffffc900056f7aa8 EFLAGS: 00000206 [ 243.167731][ C0] RAX: 0000000000000046 RBX: 1ffff92000adef56 RCX: 000000005b74dafa [ 243.167740][ C0] RDX: 0000000000000001 RSI: ffffffff8b6cdb40 RDI: ffffffff8bd1b460 [ 243.167748][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dca598 [ 243.167757][ C0] R10: ffffffff96e52cc7 R11: 0000000000000002 R12: 0000000000000000 [ 243.167765][ C0] R13: ffffffff8e1bb500 R14: 0000000000000000 R15: 0000000000000000 [ 243.167779][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 243.167794][ C0] ? rcu_is_watching+0x12/0xc0 [ 243.167812][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 243.167831][ C0] ? batadv_nc_worker+0x164/0x1060 [ 243.167848][ C0] ? lock_acquire+0x2f/0xb0 [ 243.167861][ C0] ? batadv_nc_worker+0x164/0x1060 [ 243.167879][ C0] batadv_nc_worker+0x16a/0x1060 [ 243.167897][ C0] ? batadv_nc_worker+0x164/0x1060 [ 243.167917][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 243.167934][ C0] ? rcu_is_watching+0x12/0xc0 [ 243.167956][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 243.167974][ C0] ? process_one_work+0x921/0x1ba0 [ 243.167989][ C0] ? lock_acquire+0x2f/0xb0 [ 243.168002][ C0] ? process_one_work+0x921/0x1ba0 [ 243.168018][ C0] process_one_work+0x9c5/0x1ba0 [ 243.168035][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 243.168053][ C0] ? __pfx_process_one_work+0x10/0x10 [ 243.168066][ C0] ? rcu_is_watching+0x12/0xc0 [ 243.168086][ C0] ? assign_work+0x1a0/0x250 [ 243.168100][ C0] worker_thread+0x6c8/0xf00 [ 243.168118][ C0] ? __pfx_worker_thread+0x10/0x10 [ 243.168132][ C0] kthread+0x2c1/0x3a0 [ 243.168148][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 243.168162][ C0] ? __pfx_kthread+0x10/0x10 [ 243.168179][ C0] ret_from_fork+0x45/0x80 [ 243.168192][ C0] ? __pfx_kthread+0x10/0x10 [ 243.168209][ C0] ret_from_fork_asm+0x1a/0x30 [ 243.168231][ C0] [ 243.169001][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g8673 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 243.696830][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 243.706791][ C1] rcu: RCU grace-period kthread stack dump: [ 243.712667][ C1] task:rcu_preempt state:R running task stack:27744 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 243.724437][ C1] Call Trace: [ 243.727724][ C1] [ 243.730662][ C1] __schedule+0xe58/0x5ad0 [ 243.735085][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 243.740297][ C1] ? __pfx___schedule+0x10/0x10 [ 243.745144][ C1] ? schedule+0x298/0x350 [ 243.749475][ C1] ? __pfx_lock_release+0x10/0x10 [ 243.754499][ C1] ? lock_acquire+0x2f/0xb0 [ 243.758996][ C1] ? schedule+0x1fd/0x350 [ 243.763323][ C1] schedule+0xe7/0x350 [ 243.767389][ C1] schedule_timeout+0x124/0x280 [ 243.772233][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 243.777601][ C1] ? __pfx_process_timeout+0x10/0x10 [ 243.782890][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 243.788695][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 243.794151][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 243.798915][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 243.804193][ C1] ? rcu_gp_init+0xc82/0x1630 [ 243.808872][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 243.814072][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 243.819876][ C1] rcu_gp_kthread+0x271/0x380 [ 243.824549][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 243.829757][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 243.834955][ C1] ? __kthread_parkme+0x148/0x220 [ 243.839980][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 243.845175][ C1] kthread+0x2c1/0x3a0 [ 243.849246][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 243.854440][ C1] ? __pfx_kthread+0x10/0x10 [ 243.859031][ C1] ret_from_fork+0x45/0x80 [ 243.863445][ C1] ? __pfx_kthread+0x10/0x10 [ 243.868032][ C1] ret_from_fork_asm+0x1a/0x30 [ 243.872809][ C1] [ 243.875821][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 243.882135][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 243.892446][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 243.902490][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 243.907788][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 d8 f4 d9 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 48 67 b3 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 243.927386][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 243.933449][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b29c759 [ 243.941410][ C1] RDX: 0000000000000001 RSI: ffff8881436bd000 RDI: ffff8881436bd064 [ 243.949378][ C1] RBP: ffff8881436bd064 R08: 0000000000000001 R09: ffffed10170e6fed [ 243.957773][ C1] R10: ffff8880b8737f6b R11: 0000000000000000 R12: ffff888148292000 [ 243.965743][ C1] R13: ffffffff8ee14960 R14: 0000000000000001 R15: 0000000000000000 [ 243.973705][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 243.982631][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.989210][ C1] CR2: 00007ff467eb1d58 CR3: 00000000320a2000 CR4: 00000000003526f0 [ 243.997179][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 244.005141][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 244.013103][ C1] Call Trace: [ 244.016372][ C1] [ 244.019214][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 244.025549][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 244.030764][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 244.036257][ C1] ? timekeeping_advance+0x70a/0xa60 [ 244.041547][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 244.047188][ C1] ? __asan_memcpy+0x3c/0x60 [ 244.051786][ C1] ? rcu_is_watching+0x12/0xc0 [ 244.056575][ C1] ? update_process_times+0x178/0x2d0 [ 244.061951][ C1] ? __pfx_update_process_times+0x10/0x10 [ 244.067677][ C1] ? update_wall_time+0x1c/0x40 [ 244.072527][ C1] ? tick_nohz_handler+0x376/0x530 [ 244.077641][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 244.083098][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 244.088475][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 244.094190][ C1] ? read_tsc+0x9/0x20 [ 244.098264][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 244.103383][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 244.109540][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 244.115342][ C1] [ 244.118268][ C1] [ 244.121196][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 244.127442][ C1] ? ct_kernel_exit+0x139/0x190 [ 244.132290][ C1] ? acpi_safe_halt+0x1a/0x20 [ 244.136968][ C1] acpi_idle_enter+0xc5/0x160 [ 244.141652][ C1] cpuidle_enter_state+0xaa/0x4f0 [ 244.146676][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 244.152482][ C1] cpuidle_enter+0x4e/0xa0 [ 244.156900][ C1] do_idle+0x310/0x3f0 [ 244.160968][ C1] ? __pfx_do_idle+0x10/0x10 [ 244.165560][ C1] cpu_startup_entry+0x4f/0x60 [ 244.170316][ C1] start_secondary+0x222/0x2b0 [ 244.175070][ C1] ? __pfx_start_secondary+0x10/0x10 [ 244.180357][ C1] common_startup_64+0x13e/0x148 [ 244.185304][ C1] [ 244.188582][ C1] sched: DL replenish lagged too much