last executing test programs: 10.771481088s ago: executing program 1 (id=904): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="b702000000000000bfa30000000000001403000000feffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000007c000000b700000001000000950000000000000000e154cd844a954b26c933f7ffffffffffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac66ad029d1c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d6f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a7c31de7910d1ed4065a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db3503680e5e5971ff4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dacfeb47479321a0574fb304bc2a1681989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3de8726c2a61ec45c19f97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde0745db06753a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9bdce38c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4af05c28308241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5490f6589880ed6eea7b9c670012be05e7de0940313c5870786554df2623d58f5ace92d028f2c71a6ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77962a2cd8a104e16b77d5f7f13b1640d43e11801140caf1a8b1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b905fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af0a77fbcf2cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c026ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf34117a82a96b2ced73abb8e4bb718d6ee7aebf9ef40662d7836d252c566f5ee938a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7eee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab50fe82d5a96b09c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000001762e5f5a3a0bc33fdbe28a5ffc83f2f08544eb2794e7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e750d50515a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f85d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d801002653c4d9818708e27c89b552d3fcd11ebce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff2a8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4000000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b850580994484305d7a1759782ae57773e0d8b0ab900edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0bd91e328b6a6f732a91f0e2e9120be61e58c79d497247d278888901d44bf77ff246605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c2d0836395fe39f0e11c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc71300000000000021000000b12f0ec0412268860027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b50f3ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861ddb54684cb73e7aeefae47fa09fd88e6043bd52ae84c1bb0c8a6b769f952283a1f4e3842edb3d42c68a2102fa1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e81163bde261fd00000000007271e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d1b8b90bc0df4c4b51b1f922a44ec675203bf8d1548e49262727c3de6daab3b4ed15aa99802e45d0620617e839b5237ddfcf103c91e61d174e3be6c9fd47398797e3b814e751ff31ecb42de6dd9d6b88121aaa680c236a303914e00150e1ec3f144ebc28287d5b51cfb8cabb844d12b140767d0fc24425590024b2e431722392489e3d43b3e31438a0138988083c47c61384d54e9a40fba01cac6e59ec82edc764840fe551c1d57442970cd8e59b9f41094e158c0a1ee855d8515599685486c2a21fa1c107531a0db8306441e8408b34aa90e9736e672d74cb8e78f8bdb93a23d024fc200796836ab396911a56231e953efad6cd83db32ffc595d970108e9547ea0000002730d5d1b70fe8b458ac1651135037b6cb9c8053299f77ab84c5b9fd2f764c3caa9c69377c397d310ddc7bc4bfa165def7b49e28ef196ae263b6829a8419d8860f56c86c288964ac4bc19839d96ff24b981c3a4fd6f93a000000ea9d6b06dafae4c91177", @ANYBLOB="1d139ea82bf95c2a5474d4a0d51d574c1e80c08468a1d0ffcaa5beda1d1e735401cddf133954ac1858a89458dfcc08fd460fd4095d862fefdd7b67249f863619a16200c3158d5c0f1d41e7e236a48ed97a83105f991550cd52d04afc5d4236e333c523630f55e3335db9f3008ffba8c0caf3b9cea8aa798e4b36b3cd801c9bb3c666bd5a41ea3c09e7583961eb53a6c5948b47502e0d4b2959fb217a2ea66fd7e4f5eaa78c31c69a1c9d5f"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x5d, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4b) dup(0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$uac1(0x5, 0xd0, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000a40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x4, 0x5, 0xe, 0x40, 0xe}, 0x44, &(0x7f0000000840)={0x5, 0xf, 0x44, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x6, 0x3, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x1, 0x2, 0x7fff}, @generic={0x2e, 0x10, 0xa, "40156c7d3d522306e35eb4985f4358d4fab1b3048f97497bae9b66ce552e88d34ea45e1e4f6f3d5c77240f"}]}, 0x6, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xf0a2}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x3001}}]}) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, &(0x7f0000004500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}, &(0x7f0000000bc0)={0x0, 0xf, 0x219, {0x5, 0xf, 0x219, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x400, 0xf1e, 0xfffe, [0xffc0cf, 0x0, 0xff0000, 0xaf, 0xc0, 0xffff00]}, @generic={0xdd, 0x10, 0x4, "1d9dc00eff1ee786d58ba5aa53a67983ce252438486e291559340b2acb3036cd3c91437a329188cc8c133cc8e042f3ca67a6726a7b935d44e567a32ec8a5d0c44e7b6829c94dbfd94fef29a932c4d46e2f6547f6f8e197543b8979219b8ac1a2662b45b429d478bdb1cea8c5ee1fabd210a463caff7e13d3e642a12db2dc719d8f2e0e0b6f0775d48b508a90d39065882275b30a57553b93094fb084f0e623e9c17724ee2800e7db42019d96216dfb1febe4b5a7a71809146188ccc1f108c1d037054c99f1219b90536dfdcc22156ba0af66f59b4d466cb5a2da"}, @generic={0xff, 0x10, 0x5, "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"}, @ss_container_id={0x14, 0x10, 0x4, 0x3b, "65d3fd331f086e0076828981f3b8f9fa"}]}}, &(0x7f0000000e00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x10, 0x93, 0x1, "4c9d4ce8", "d765ae89"}}, &(0x7f0000000e40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0x0, 0xca, 0x81, 0x81, 0xb501}}}, &(0x7f0000001300)={0x84, &(0x7f0000000ec0)={0x40, 0xe, 0x90, "fe7c03e8dab777982e6766023769f404ed45edf5a6975396a53689a21e1c04e05eb8fc753a04f949e66d58f38d65dab1bceecae0e77087085ed34baa670b02f6fd32b7d3b9aaeea913b70933b6941dbddd06cb9f381bb0f18ae44335623cf4879aa43e04b2544e4646c336883ff9c659b97e053af2039f9b91a9a3eab710c79e6365b28b1449145d17265d6a174b9281"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001040)={0x20, 0x0, 0x8, {0x4, 0x40, [0xf000]}}, &(0x7f0000001080)={0x40, 0x7, 0x2, 0x101}, &(0x7f00000010c0)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000001100)={0x40, 0xb, 0x2, "8dbb"}, 0xfffffffffffffffd, &(0x7f0000001140)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001180)={0x40, 0x17, 0x6}, &(0x7f00000011c0)={0x40, 0x19, 0x2, "1b8b"}, &(0x7f0000001200)={0x40, 0x1a, 0x2}, &(0x7f0000001240)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001280)={0x40, 0x1e, 0x1}, &(0x7f00000012c0)={0x40, 0x21, 0x1, 0x5}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r5, 0xfffffffffffffff5, 0x1) 9.467648102s ago: executing program 4 (id=910): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000000)={0x84, ""/132}) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xf, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x844) getsockname$packet(r3, 0x0, &(0x7f0000000080)) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000000000008000500", @ANYRES32=r9, @ANYBLOB], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x3c, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @TCA_RATE={0x6, 0x5, {0x4, 0x10}}]}, 0x3c}, 0x1, 0xf0ffffffffffff}, 0x0) 8.987409163s ago: executing program 2 (id=913): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000001c0)={@my=0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r4 = syz_open_dev$dri(&(0x7f0000000140), 0xffffffff, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2000], [], [0x400000000000001]}) syz_open_dev$loop(&(0x7f0000000240), 0x20364, 0x10001) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f0000001a40)='connect aa:aa:aa:aa:aa:10 2', 0x1b) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x200000, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e7300000004612c706f72743d3078303030303030303030303030346532322c73713d3078303030103030303030303030303030312c74696d656f75743d3078303030303030303030303030303030342c00"]) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a8001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8.307217632s ago: executing program 4 (id=916): lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x5c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000000000e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280), 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x0, 0xf0, 0x3}, 0x3}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)="00007d215b90e0a6a6916449e2ffec1674d1f9b6284942226040735b0515c44f44b996483d019020c88e80eb3c7e00b1881f121706fd35aaf25077ae79ebffe8dc6bfca774f6bdfa7d20c63660227e7f707898cd6cc1048edb03799afd3485142685991ca8664957248f6cfb1a6d4e", 0x6f}}, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x410040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0xff, 0x1f, 0x40}, {0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}]}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGRAB(r8, 0x40044590, 0x0) ioctl$EVIOCGRAB(r8, 0x40044590, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x80) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) 6.350154144s ago: executing program 1 (id=921): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x1, 0x8, 0x20, @local, @local, 0x8, 0x7800, 0x9, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001340)={&(0x7f0000000140)=@deltfilter={0x11e0, 0x2d, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0xa, 0xb}, {0xa, 0x5}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x43c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0xb}}, @TCA_MATCHALL_ACT={0x1b4, 0x2, [@m_xt={0x7c, 0xf, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x30, 0x6, "0fe3f7f908b56c1eeccdf101bc6ab24d70d0bc7a79557575e34cb26aad596fdd9f400ccfc300ba0b4ffbf95e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x134, 0x3, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x80}, @TCA_CTINFO_ACT={0x18, 0x3, {0x200, 0xf, 0x0, 0x800, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}]}, {0xdf, 0x6, "0e08861dec24071d67f1d36c394cf481bef78051c381c530b16e9879987d250552f5e3022767190b2b5b75843ea43fda43c3369d319afe800cc689d02a99f2e7d4346994bc33e69f1d582004047a77ecc64076f49d2ed7c03cfb2c88b08aad32ebcef11a43a31d514893821769451d8b97b660f1980aa1a76b8197864bc8a848b5eb23fd4228b411dce3b5425de91edd4867e54677bb0a0eabb2ecc0d8642bd9ed85d3f04ffe88b30405e26bb2979ae1f471d74be0d0e4291088bfe8338675174a5f23ea8edecd06a124246c0b8eecb137c2eb99bb3ef55e5dee6a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_ACT={0x25c, 0x2, [@m_connmark={0x70, 0x7, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc1, 0x40000, 0x10000004, 0x4, 0x4}, 0x5}}]}, {0x24, 0x6, "12bced94942c10e81bf1c92feacf486f5a6774b5dd052a31a8215af77ca0dfce"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x168, 0x1, 0x0, 0x0, {{0xf}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x95}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2d}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x100, 0x5, 0x6, 0xb16, 0x6ed}, 0x2}}]}, {0xd1, 0x6, "112e9d30fd5279e2ff4b321b6a11a0291a842b523866b2bbab18b7c62a65b79faa22b8d3e26d4dfffc64fd2d70e9e7b130e3975e46913df83db4a93d939332a9e6fc20c573b28151180683e39d9c231b3df0185ff507a186f0625a8ff370141e05d49de37dd7a7eba8ae3b88bd40ba9fa4c21dfd2943e3f98c45a21d76b92d6b7910b029d8ac2559c98672a6ace66877f634cfc0e448c93903696f13eb37ca015e82d152fd5c8b673fb911a1d4e05800d5695e0b4d6997bd18971e5eba9f8af3b06809533c040cfeec108b6c37"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x80, 0xb, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1632, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x70b, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2275, 0x10000000}}]}, {0x2f, 0x6, "71526e161ff6448acb860b8fc68a1d0fe9d9f7189033153ba6e6651c89dc7fc406161b5579b4df1f661be0"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0x4}}]}}, @filter_kind_options=@f_route={{0xa}, {0x8c4, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0xe}}, @TCA_ROUTE4_IIF={0x8, 0x4, r0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6}}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd2}, @TCA_ROUTE4_TO={0x8, 0x2, 0x64}, @TCA_ROUTE4_TO={0x8, 0x2, 0xc0}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x9e}, @TCA_ROUTE4_POLICE={0x880, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x545790c8}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7f, 0x8, 0x1, 0x3, 0x1, 0x8, 0x37, 0x2, 0xddc4, 0x7fffffff, 0x0, 0x0, 0x882, 0x7f, 0x8000, 0x4, 0x4, 0x7ff, 0x4, 0xb750, 0x80000001, 0xeec, 0x8a5, 0x3, 0x7, 0x1, 0x5, 0x80, 0x39c983e3, 0x8, 0xfffffff8, 0x6, 0xd0c2, 0x80000001, 0x70aacb71, 0x8, 0x1, 0x80000001, 0xffffffc0, 0x8001, 0x9, 0xe, 0x8, 0xc1b, 0x800, 0x0, 0xb5e, 0x2, 0xbdc5, 0x38000, 0x7, 0x80, 0x3ff, 0x100, 0xa9, 0x7fff, 0xffff, 0x784d, 0x7fff, 0x2, 0x1000, 0xb, 0x13078626, 0x31e, 0x3, 0x800, 0xe0b, 0xa3e9, 0x0, 0x5f0, 0x3, 0x80, 0x0, 0x9, 0x7, 0x977b435, 0x8, 0x7, 0x3, 0xffffffff, 0xffff, 0x0, 0x2, 0x5, 0x300000, 0xffff0001, 0xc, 0x2, 0xffffff84, 0x8, 0x8, 0xffffffff, 0xe854, 0x23, 0x5, 0x7, 0x7, 0x2, 0x4, 0x1ff, 0x6, 0x4, 0x0, 0x856, 0x2, 0x4, 0x80, 0x2624, 0x6, 0x4, 0xfffffff7, 0x4, 0xd, 0x9, 0x7, 0xffffffc0, 0xe4, 0x2, 0x7fff, 0x1, 0x7, 0x2, 0xd7, 0x6, 0x6, 0xffffff99, 0x2, 0x6, 0x7, 0x5, 0x1, 0x3, 0x8, 0x80000001, 0x3, 0x5, 0x8, 0xa8, 0x6, 0x7, 0x4, 0x8202, 0x5, 0x1c00, 0x5, 0xfffffffa, 0x6, 0x43b1, 0x3ff, 0x2, 0x250d, 0xb, 0x2, 0x8, 0x9, 0x3, 0x10001, 0xa5e, 0x8, 0x9, 0x9, 0x4, 0x2, 0x8001, 0x1, 0xc, 0x8, 0x6, 0xb0, 0x101, 0x1cd, 0xffffffff, 0x3, 0x1000, 0x3ff, 0x2, 0x4, 0x2, 0xd, 0x9, 0x6, 0xffff, 0x3, 0x10, 0x3, 0x10, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x2, 0x3, 0x3, 0x9, 0x1, 0x1, 0x6, 0xb5f4, 0xc60, 0x7f77, 0x9, 0x1c, 0x0, 0x9, 0x1, 0x80, 0x861, 0x4, 0x0, 0x4, 0x7fff, 0x7fffffff, 0xffff, 0x6, 0x81, 0x3, 0x6, 0x6, 0x0, 0xffff, 0x5, 0x7, 0x6, 0xba, 0x6, 0xea9, 0x4, 0x1000, 0xfffffffd, 0x2, 0x7, 0x4, 0x10001, 0x8001, 0x6, 0xff, 0xc, 0x4, 0xfffffff8, 0x4e20bcfe, 0x3, 0x80, 0xe, 0x7, 0x9, 0x3, 0x6, 0x9, 0x6, 0x7, 0xc, 0xfffffff7, 0x474550f7, 0xffff, 0x915]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffb}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x8, 0x0, 0x0, 0x5, 0x7, 0x6e0c, 0xb, 0x3, 0x8001, 0x7, 0x6, 0xdf, 0x27, 0x8001, 0x6, 0x2, 0x1, 0xa, 0x8, 0x0, 0x1000, 0x3, 0xfff, 0x3, 0x1, 0x2, 0x8, 0x7, 0x7, 0xfff, 0x79d, 0xc04, 0xffffff81, 0x3, 0x44, 0x5, 0x7fff, 0x7beb, 0x7, 0x7b2, 0x5, 0x7, 0x7, 0x3, 0x4, 0x7ff, 0xeb, 0x800, 0x80, 0x721, 0x8, 0x5, 0x9, 0xe, 0xffff, 0x2, 0x4, 0x7, 0x8001, 0x0, 0xefd8, 0x7, 0x9, 0x1, 0x1de, 0x6, 0x3, 0x4, 0x7f, 0x4, 0x2, 0x8, 0x4, 0x1ff, 0x7000000, 0xf, 0x7fff, 0x4, 0x3, 0x7fffffff, 0xffff, 0x5e, 0x4, 0x9, 0x0, 0x3, 0x69, 0x9, 0x4, 0x7, 0x4, 0x8, 0x6, 0x0, 0x70, 0xa2d1, 0x5, 0xfd3, 0xb, 0x200, 0x726603cd, 0x8, 0x0, 0xfffffffa, 0x1c373b81, 0x8, 0x3, 0x8000, 0x1, 0x3, 0x1, 0x6, 0x10000, 0x2, 0x6, 0x3, 0x4, 0x9, 0x6, 0x0, 0x0, 0x63b, 0x6, 0x7, 0x3dd, 0x8, 0x8, 0x1, 0x4, 0xa, 0x8, 0x100, 0x3, 0x400, 0x6, 0x6, 0xfff, 0x2, 0xb3, 0x8, 0x2, 0x6, 0x7, 0xc, 0x2, 0x5, 0x6, 0x6, 0x80000001, 0xcf, 0x3, 0xfffffeff, 0x7, 0x2c593ed4, 0xa3e3, 0x8, 0xc07a, 0xff, 0x101, 0x0, 0xfffffff9, 0xfffffffb, 0x80000001, 0xe2, 0x2c8e, 0x80000000, 0x1, 0x0, 0x4, 0xd, 0x9, 0x136, 0x8001, 0x4, 0x1c0, 0x9, 0x1, 0x7, 0x5, 0x4, 0x4, 0x7, 0xfffffffd, 0x1, 0x10, 0x3, 0xfffffbff, 0xfff, 0x3, 0x3, 0xfffffff3, 0xfff, 0x4, 0x8001, 0x2, 0xa, 0x7, 0x8001, 0x3, 0x2, 0x21569fa, 0x5, 0x8, 0x3, 0x7, 0x1, 0x1000, 0x7f, 0x1, 0x8, 0x1, 0x81, 0x5, 0x1cd6, 0x2, 0x8, 0x8, 0x3, 0x5, 0x5, 0x0, 0x81, 0x7fffffff, 0x4, 0x6, 0x7, 0x0, 0x7, 0x6b8692d9, 0xffffffac, 0x6, 0x1, 0x7, 0x2, 0x88, 0x9, 0x400, 0x3, 0x2, 0x1d25, 0x3, 0x400, 0xcd8, 0xffffffff, 0x0, 0x1, 0x2, 0x10, 0x0, 0x3, 0x401, 0x4, 0x2, 0x6, 0x10001]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0xd02, 0x69dc, 0xc5, {0x0, 0x1, 0x9, 0x4, 0xa, 0x53}, {0x1c, 0x1, 0x400, 0xf62, 0x5, 0xd7}, 0x400, 0x7, 0x4}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x81f}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x59}]}}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x6, 0x6}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x5}}, @TCA_U32_LINK={0x8, 0x3, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @filter_kind_options=@f_fw={{0x7}, {0x46c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'team_slave_0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xe, 0xc}}, @TCA_FW_POLICE={0x428, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc65}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x70, 0x4, 0x2, 0xa, 0xfffffffe, 0x127, 0x5, 0x1, 0x2, 0x7, 0x6, 0x70cdde03, 0x19ba, 0x8000000, 0xc, 0x9, 0x7, 0x8, 0x2, 0x3, 0x3, 0x40, 0xffff, 0xffffff7c, 0x7, 0x80000001, 0xa5, 0x3, 0x1, 0x0, 0x8, 0x5, 0x10001, 0xfffffffb, 0x9, 0x3, 0x100, 0x3, 0x1, 0x4, 0x1, 0x80, 0xd04, 0x5, 0x10000, 0x1000, 0x4, 0xb5f, 0x6, 0xfffffffb, 0xffffffff, 0x1, 0x6, 0x4, 0x9, 0x3, 0x7d88, 0x5, 0x5d, 0xfffffffd, 0x8, 0x7, 0xf, 0x3, 0xb1ca0000, 0xd, 0x1ff, 0x7fff, 0x8, 0x9, 0x800, 0x7, 0x0, 0x5, 0x2, 0x2, 0x9, 0x6, 0x5, 0x8, 0xb741, 0x6, 0x1, 0xfffff75b, 0x3, 0x0, 0x7fff, 0x3, 0x5, 0x9, 0x10000, 0x8, 0x7, 0x401, 0x80000000, 0x11b, 0x80, 0xfffffffe, 0x3, 0x400, 0x4, 0x1, 0x4, 0x3, 0x28000000, 0x1, 0x4, 0x4, 0x8d50, 0x3, 0x9, 0x982, 0x2d, 0x7, 0x428, 0x9f9, 0x1, 0x1, 0xc, 0xf7, 0x0, 0x3, 0xf, 0x7ff, 0x9, 0xa9, 0x80000001, 0x9, 0x8, 0x31, 0x80000001, 0x80000001, 0x3, 0x8, 0xd6, 0x2, 0x1, 0x9, 0xfff, 0x1, 0xfffffff8, 0x6ea0, 0x604, 0x4, 0x6, 0x1000, 0x0, 0x8bc1, 0x4c3, 0x3, 0xff, 0x9e, 0xb5, 0x4, 0xa, 0x80000000, 0x0, 0xfffffffe, 0x2d, 0x2307, 0x2, 0x3a, 0x2, 0x8, 0x3, 0xa, 0x7f08, 0x3, 0x5, 0x0, 0x9, 0x400, 0xffffffc9, 0x4b0d5446, 0x7, 0x7, 0x8, 0xfffffffd, 0x88, 0x9, 0xff, 0xfd, 0x3ff, 0x4, 0x6b, 0xfffffff9, 0x1, 0x1, 0xf, 0xffffffff, 0x169, 0xe, 0x2, 0xf90, 0x0, 0x6, 0xea6f, 0x2, 0x4, 0x3, 0x7, 0x6, 0x71, 0x9, 0x8, 0x200, 0xffffffff, 0x1, 0x6, 0x2146, 0xe198, 0x5, 0x1, 0x2, 0x9, 0x4, 0xa, 0x4, 0x6, 0x5b8a, 0x7, 0xfffffffa, 0x7, 0x48, 0x0, 0x7cf48a83, 0xb2, 0xfa1, 0x9, 0x8, 0x6, 0x0, 0x298, 0xff, 0x7f, 0xfffffffe, 0x1, 0x2, 0x8000, 0x5, 0x2, 0xfffffffb, 0x9, 0x1, 0xaf, 0x7, 0x6307, 0xff, 0x9, 0x1, 0xd095, 0x400, 0x0, 0x6, 0x1000]}]}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x800}]}]}}]}, 0x11e0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40851) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x165802) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001400)={0x73, 0x2, 0x1, 'queue0\x00', 0x7}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000014c0)={0x2, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e20, @multicast2}}}, 0x108) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = add_key$keyring(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r5, 0x3cf) r6 = add_key$keyring(&(0x7f0000001700), &(0x7f0000001740)={'syz', 0x0}, 0x0, 0x0, r5) r7 = add_key(&(0x7f0000001680)='trusted\x00', &(0x7f00000016c0)={'syz', 0x3}, 0x0, 0x0, r6) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001780)={0x0, 0x2e, "4ebb0ef014b1ebe0718700903ed8ada17b0f85d775bd4f4e1215550669d4d051254efac30c44f8efdbbc73b57686"}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000001840)={r9, 0x5, 0x20, 0x1, 0x1d7}, &(0x7f0000001880)=0x18) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000028c0), 0x80, 0x0) ioctl$TCSBRK(r10, 0x5409, 0x7) write$sndseq(r2, &(0x7f0000002900)=[{0xe, 0x4, 0x4, 0x3, @time={0x7fffffff, 0x9}, {0xc, 0x9f}, {0x2, 0x5c}, @connect={{0x9, 0x8}, {0x8e, 0x1}}}, {0x1, 0x8, 0x7a, 0x5, @time={0x4, 0x6a}, {0xa, 0x3}, {0x8, 0x55}, @control={0x2, 0x1, 0xce}}], 0x38) keyctl$invalidate(0x15, r7) r11 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000002940)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1c4f, 0x59, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0xd7, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x5e2, 0x4, 0x1, {0x22, 0x3a7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x9, 0xe6}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x5, 0x5, 0x80}}]}}}]}}]}}, &(0x7f0000002c40)={0xa, &(0x7f0000002980)={0xa, 0x6, 0x201, 0x8, 0x2, 0x3, 0x40, 0x2}, 0x19, &(0x7f00000029c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xbc, "cb0019236f37ee6c4b900eaf5345b857"}]}, 0x7, [{0x4, &(0x7f0000002a00)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000002a40)=@string={0x4, 0x3, "08e1"}}, {0x4, &(0x7f0000002a80)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x439}}, {0x65, &(0x7f0000002b00)=@string={0x65, 0x3, "625a29d5b809b29878d5fc78fcf52aaa88cc84ab108f1491f70928b951a1c34c316d3beed0e03d34d127dcedb8f01b5978bb607c52d0a986fdf8133f0168d200439d15be5caf2702d6d31f2c1742de41d0f86b4aabf89308efcf685e273a395f836cb9"}}, {0x4, &(0x7f0000002b80)=@lang_id={0x4, 0x3, 0x810}}, {0x6e, &(0x7f0000002bc0)=@string={0x6e, 0x3, "aa338b72119cbac2244021571c670c953383a5f07262d2e0587823df816410ea5c6a21b920ef9d1c45bf4189f29a621644998059b48ab29907b7efe328f39f4eefe5b123c3f1fa515dff60abeb9c94615ecfb45841e4988271bd093abb23ac74d265b8d29f04ba112111990f"}}]}) syz_usb_control_io$hid(r11, &(0x7f0000002dc0)={0x24, &(0x7f0000002cc0)={0x394bfe3bff5889d5, 0x6, 0xb, {0xb, 0x8, "64ac2a31bc7e8f42cc"}}, &(0x7f0000002d00)={0x0, 0x3, 0xb, @string={0xb, 0x3, "13d927e5dab98b9068"}}, &(0x7f0000002d40), &(0x7f0000002d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0xb0, 0x1, {0x22, 0xb66}}}}, &(0x7f00000030c0)={0x2c, &(0x7f0000002e00)={0x20, 0x16, 0xda, "0914b5aa358969c34c6b9c145b0613334551c16a5d6bd7c0bb96f82d5b5b2c8b5db71509c084a6a66d559fa9d5ae622ab6254006d27dbe9f4d3590758bae8c616abf6282aeee66fe13a5df10e349cce5e609aa90933c77c44920858c8becd4f79b95f66e388390ad9a16e0d76228ef080d36c6979a76a5557c27d22f5d6e0d4d0ba7e16d0d17ecc3c25b33a30d5313714abcadac3d9986de0655f7f8cbd8b8cd9b9f46c970658c61bb80e0b990eb4683f707b09ce092f6055f2bec652e479df94b35903ffa2c96880149dc37ebbe4f7bfd31532b3dbab464e90a"}, &(0x7f0000002f00)={0x0, 0xa, 0x1, 0x61}, &(0x7f0000002f40)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000002f80)={0x20, 0x1, 0xcf, "bb158b5e66f94dc03bc40bd7f5b3b8e2b612565800fe11b6bd7e5df9ed511179758223982781aa4eadd8fa3bd7e7a46ab66678fda9497ba7833a9f43ebf836643c50b97c27844b0566e0b74d71e75e38098b006e2ef39f4b53bb184a2bbb20137a100d7b4f7613a6f78fb76546a35c15b708d3b7eae7c4646354b10211a0e504a73473ee669ff4367ca3ed9c7eb3d7a6c504c76ae6ed9a714ac5829469b1702e667997b79f7475fde65422e9966c0391bfcd1a56f9e1f419f8c333b188826adc74738fc0df68218ccc99f6ee0385aa"}, &(0x7f0000003080)={0x20, 0x3, 0x1, 0x72}}) socket$inet6_sctp(0xa, 0x1, 0x84) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003100), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r12, 0x80045301, &(0x7f0000003140)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000003180), 0x40800, 0x0) add_key$user(&(0x7f00000031c0), &(0x7f0000003200)={'syz', 0x1}, &(0x7f0000003240)="a3125879c0f00533f35397fc1b6f3309e3e738dd3cad8558e77024776a990dfba3cc07993d2cb8ab4e6b6e1ea7", 0x2d, r7) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000003340)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x20, 0x4, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x20008004) 6.008967893s ago: executing program 2 (id=925): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r6) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r7) r8 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r8, 0xee00, 0xffffffffffffffff) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x1, 0x0, 0x0, @vifc_lcl_addr=@loopback, @loopback}, 0x10) 5.879387779s ago: executing program 4 (id=927): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) io_submit(0x0, 0x11, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x58a40, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = syz_io_uring_setup(0x339e, &(0x7f0000000300)={0x0, 0x0, 0x800}, &(0x7f0000002480), &(0x7f00000024c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000002380)={0x1, 0x0, 0x0, &(0x7f00000022c0)=[{0x0}], 0x0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000080)=0x7) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000000), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_setup(0x53d6, &(0x7f00000001c0)={0x0, 0x4, 0x8, 0x0, 0x2ed, 0x0, r0}) open(&(0x7f0000000000)='.\x00', 0x20403, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.0:\x00', 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000100)={0x5, @sdr={0x48524742, 0xad6}}) 5.471206696s ago: executing program 2 (id=929): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000300)={{0x0, 0x3, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x20, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000080)=['']}) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r3, &(0x7f0000000100)=""/74, 0x4a) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) 4.311799026s ago: executing program 0 (id=931): r0 = socket$inet(0x2, 0x4, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x22048c50, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140)='\f', 0x1, 0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) unshare(0x10400) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000400)=""/102400, 0x19000) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) read$FUSE(r3, &(0x7f000001cac0)={0x2020}, 0x2020) fcntl$getown(r2, 0x9) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x80) pselect6(0x40, &(0x7f0000000380)={0x3a, 0x20000, 0x3, 0x20000000, 0x3, 0xfffffffffffffffe, 0x0, 0x2b980000}, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r6, &(0x7f000001aa80)={0x2020}, 0x2020) 3.608575909s ago: executing program 4 (id=934): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000500)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x13, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@empty}, {}]}, @timestamp_prespec={0x44, 0x24, 0xed, 0x3, 0x6, [{@rand_addr=0x64010101}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}, {@multicast2, 0x4}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r3) r4 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r7, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) r8 = socket(0x1, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r8}, 0x20) bind$unix(r8, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000c80)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r10 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r10, &(0x7f00000000c0)='./file0\x00') 3.589936768s ago: executing program 0 (id=935): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00f9ffff7f00000000000001"], 0x114}], 0x1}, 0x0) 3.133985559s ago: executing program 0 (id=936): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x9, 0x1, [0xd45d]}, 0xa) 3.116312671s ago: executing program 4 (id=937): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c03, r2) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'geneve1\x00', @multicast}) 3.06802887s ago: executing program 3 (id=938): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000500)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x13, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@empty}, {}]}, @timestamp_prespec={0x44, 0x24, 0xed, 0x3, 0x6, [{@rand_addr=0x64010101}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}, {@multicast2, 0x4}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r3) r4 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r7, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000680), &(0x7f0000000080)=@udp6}, 0x20) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r9 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r9, &(0x7f00000000c0)='./file0\x00') mkdirat$cgroup(r3, &(0x7f0000000180)='syz1\x00', 0x1ff) 2.665165219s ago: executing program 1 (id=939): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@remote, 0x800, 0x0, 0x103, 0x1, 0xf7b2}, 0x20) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010026bd7000fddbdf254400000008000300", @ANYRES32=r9], 0x28}}, 0x44) sendmsg$inet6(r3, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="5800000000000000290000000b0000000007000000000000c910fc020000000000000000000000000000c910000000000000000000000000000000010718000000000400"/88], 0x58}, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x44, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x6}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x2}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x44a}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x312}]}}]}, 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140), 0x14) 2.620906748s ago: executing program 3 (id=940): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x3, 0x0, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) 2.540235274s ago: executing program 4 (id=941): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) fchmod(0xffffffffffffffff, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, 0x0) read$midi(r2, &(0x7f0000000240)=""/237, 0xed) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r2, 0x0, 0x14) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5100) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) close(0x4) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r5, 0x0, 0x0) syz_emit_ethernet(0x1f, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xd) lseek(r0, 0x4000000002004, 0x4) 1.404207237s ago: executing program 1 (id=942): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}, {}, {}, {}, 0x0, 0x3f0, 0x0, 0xfca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) 1.345619966s ago: executing program 0 (id=943): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x20009, 0x1, 0x2, 0x1, 0x203, 0x4007}, 0x20) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00') r2 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r2, r1, 0x0, 0x4) r3 = socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bind$rds(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet6(0xa, 0x6, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000fe880000000000000000000000000001e000000200"/53, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000000000000000000000000000000002b000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000000000000000000000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0008000300"/18, @ANYRES32=r9, @ANYBLOB="0a000600080211000001000030005080110001005a080039084eeef16f162471f4000000080007000000000005000200000000000800030005ac0f00"], 0x58}}, 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0x5, 0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.345195566s ago: executing program 2 (id=944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000500)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x13, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@empty}, {}]}, @timestamp_prespec={0x44, 0x24, 0xed, 0x3, 0x6, [{@rand_addr=0x64010101}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}, {@multicast2, 0x4}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r3) r4 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r7, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) r8 = socket(0x1, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r8}, 0x20) bind$unix(r8, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000c80)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') mkdirat$cgroup(r3, &(0x7f0000000180)='syz1\x00', 0x1ff) 944.822468ms ago: executing program 3 (id=945): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x110, 0x268, 0x33a, 0x0, 0x268, 0x228, 0x460, 0x460, 0x228, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0xd0, 0x110, 0xd8000000, {0x9402}, [@common=@inet=@dscp={{0x28}, {0x84}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x40, 0x34, "68c810194bae16f569c84e53d764d8b1b96570c4809bfe06ea8ee7a4bd82"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @empty, [0xffffffff, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff], 'veth0_macvtap\x00', 'bridge_slave_0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x10, 0xffff, 0x7, '\x00', {0x2c2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) (fail_nth: 3) 864.577204ms ago: executing program 2 (id=946): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000500)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x13, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@empty}, {}]}, @timestamp_prespec={0x44, 0x24, 0xed, 0x3, 0x6, [{@rand_addr=0x64010101}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}, {@multicast2, 0x4}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r3) r4 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r7, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) r8 = socket(0x1, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r8}, 0x20) bind$unix(r8, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000c80)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r10 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r10, &(0x7f00000000c0)='./file0\x00') mkdirat$cgroup(r3, &(0x7f0000000180)='syz1\x00', 0x1ff) 791.391456ms ago: executing program 1 (id=947): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) (async) readv(r0, &(0x7f0000001200)=[{&(0x7f00000000c0)=""/52, 0x34}], 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x3000, 0x1000004, 0x42031, 0xffffffffffffffff, 0x4000000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) open$dir(&(0x7f0000000340)='./file0\x00', 0xa10001, 0x1) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x0, 0x6}}}}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010030bd7000fedbdf2514000000180007"], 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x44) (async) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', 0xfeb3, 0x2) 190.333705ms ago: executing program 0 (id=948): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) socket$packet(0x11, 0x2, 0x300) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x18, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0x7, 0x9}}}}}}}, 0x0) 190.006811ms ago: executing program 3 (id=949): fsopen(&(0x7f0000000000)='bpf\x00', 0x0) (async) socket$alg(0x26, 0x5, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82000) (async, rerun: 64) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x4000000, 0x2, 0x1}}, 0x20) (async) r2 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async, rerun: 32) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) (rerun: 32) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) (rerun: 32) chdir(&(0x7f0000000240)='./file0\x00') (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async, rerun: 32) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000980)='erofs\x00', 0xc, 0x0) (rerun: 32) 185.728619ms ago: executing program 2 (id=950): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x1, 0x8, 0x20, @local, @local, 0x8, 0x7800, 0x9, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001340)={&(0x7f0000000140)=@deltfilter={0x11e0, 0x2d, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0xa, 0xb}, {0xa, 0x5}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x43c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0xb}}, @TCA_MATCHALL_ACT={0x1b4, 0x2, [@m_xt={0x7c, 0xf, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x30, 0x6, "0fe3f7f908b56c1eeccdf101bc6ab24d70d0bc7a79557575e34cb26aad596fdd9f400ccfc300ba0b4ffbf95e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x134, 0x3, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x80}, @TCA_CTINFO_ACT={0x18, 0x3, {0x200, 0xf, 0x0, 0x800, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}]}, {0xdf, 0x6, "0e08861dec24071d67f1d36c394cf481bef78051c381c530b16e9879987d250552f5e3022767190b2b5b75843ea43fda43c3369d319afe800cc689d02a99f2e7d4346994bc33e69f1d582004047a77ecc64076f49d2ed7c03cfb2c88b08aad32ebcef11a43a31d514893821769451d8b97b660f1980aa1a76b8197864bc8a848b5eb23fd4228b411dce3b5425de91edd4867e54677bb0a0eabb2ecc0d8642bd9ed85d3f04ffe88b30405e26bb2979ae1f471d74be0d0e4291088bfe8338675174a5f23ea8edecd06a124246c0b8eecb137c2eb99bb3ef55e5dee6a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_ACT={0x25c, 0x2, [@m_connmark={0x70, 0x7, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc1, 0x40000, 0x10000004, 0x4, 0x4}, 0x5}}]}, {0x24, 0x6, "12bced94942c10e81bf1c92feacf486f5a6774b5dd052a31a8215af77ca0dfce"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x168, 0x1, 0x0, 0x0, {{0xf}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x95}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2d}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x100, 0x5, 0x6, 0xb16, 0x6ed}, 0x2}}]}, {0xd1, 0x6, "112e9d30fd5279e2ff4b321b6a11a0291a842b523866b2bbab18b7c62a65b79faa22b8d3e26d4dfffc64fd2d70e9e7b130e3975e46913df83db4a93d939332a9e6fc20c573b28151180683e39d9c231b3df0185ff507a186f0625a8ff370141e05d49de37dd7a7eba8ae3b88bd40ba9fa4c21dfd2943e3f98c45a21d76b92d6b7910b029d8ac2559c98672a6ace66877f634cfc0e448c93903696f13eb37ca015e82d152fd5c8b673fb911a1d4e05800d5695e0b4d6997bd18971e5eba9f8af3b06809533c040cfeec108b6c37"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x80, 0xb, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1632, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x70b, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2275, 0x10000000}}]}, {0x2f, 0x6, "71526e161ff6448acb860b8fc68a1d0fe9d9f7189033153ba6e6651c89dc7fc406161b5579b4df1f661be0"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0x4}}]}}, @filter_kind_options=@f_route={{0xa}, {0x8c4, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0xe}}, @TCA_ROUTE4_IIF={0x8, 0x4, r0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6}}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd2}, @TCA_ROUTE4_TO={0x8, 0x2, 0x64}, @TCA_ROUTE4_TO={0x8, 0x2, 0xc0}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x9e}, @TCA_ROUTE4_POLICE={0x880, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x545790c8}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7f, 0x8, 0x1, 0x3, 0x1, 0x8, 0x37, 0x2, 0xddc4, 0x7fffffff, 0x0, 0x0, 0x882, 0x7f, 0x8000, 0x4, 0x4, 0x7ff, 0x4, 0xb750, 0x80000001, 0xeec, 0x8a5, 0x3, 0x7, 0x1, 0x5, 0x80, 0x39c983e3, 0x8, 0xfffffff8, 0x6, 0xd0c2, 0x80000001, 0x70aacb71, 0x8, 0x1, 0x80000001, 0xffffffc0, 0x8001, 0x9, 0xe, 0x8, 0xc1b, 0x800, 0x0, 0xb5e, 0x2, 0xbdc5, 0x38000, 0x7, 0x80, 0x3ff, 0x100, 0xa9, 0x7fff, 0xffff, 0x784d, 0x7fff, 0x2, 0x1000, 0xb, 0x13078626, 0x31e, 0x3, 0x800, 0xe0b, 0xa3e9, 0x0, 0x5f0, 0x3, 0x80, 0x0, 0x9, 0x7, 0x977b435, 0x8, 0x7, 0x3, 0xffffffff, 0xffff, 0x0, 0x2, 0x5, 0x300000, 0xffff0001, 0xc, 0x2, 0xffffff84, 0x8, 0x8, 0xffffffff, 0xe854, 0x23, 0x5, 0x7, 0x7, 0x2, 0x4, 0x1ff, 0x6, 0x4, 0x0, 0x856, 0x2, 0x4, 0x80, 0x2624, 0x6, 0x4, 0xfffffff7, 0x4, 0xd, 0x9, 0x7, 0xffffffc0, 0xe4, 0x2, 0x7fff, 0x1, 0x7, 0x2, 0xd7, 0x6, 0x6, 0xffffff99, 0x2, 0x6, 0x7, 0x5, 0x1, 0x3, 0x8, 0x80000001, 0x3, 0x5, 0x8, 0xa8, 0x6, 0x7, 0x4, 0x8202, 0x5, 0x1c00, 0x5, 0xfffffffa, 0x6, 0x43b1, 0x3ff, 0x2, 0x250d, 0xb, 0x2, 0x8, 0x9, 0x3, 0x10001, 0xa5e, 0x8, 0x9, 0x9, 0x4, 0x2, 0x8001, 0x1, 0xc, 0x8, 0x6, 0xb0, 0x101, 0x1cd, 0xffffffff, 0x3, 0x1000, 0x3ff, 0x2, 0x4, 0x2, 0xd, 0x9, 0x6, 0xffff, 0x3, 0x10, 0x3, 0x10, 0x6, 0xffff, 0x7fffffff, 0x8000, 0x2, 0x3, 0x3, 0x9, 0x1, 0x1, 0x6, 0xb5f4, 0xc60, 0x7f77, 0x9, 0x1c, 0x0, 0x9, 0x1, 0x80, 0x861, 0x4, 0x0, 0x4, 0x7fff, 0x7fffffff, 0xffff, 0x6, 0x81, 0x3, 0x6, 0x6, 0x0, 0xffff, 0x5, 0x7, 0x6, 0xba, 0x6, 0xea9, 0x4, 0x1000, 0xfffffffd, 0x2, 0x7, 0x4, 0x10001, 0x8001, 0x6, 0xff, 0xc, 0x4, 0xfffffff8, 0x4e20bcfe, 0x3, 0x80, 0xe, 0x7, 0x9, 0x3, 0x6, 0x9, 0x6, 0x7, 0xc, 0xfffffff7, 0x474550f7, 0xffff, 0x915]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffb}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x8, 0x0, 0x0, 0x5, 0x7, 0x6e0c, 0xb, 0x3, 0x8001, 0x7, 0x6, 0xdf, 0x27, 0x8001, 0x6, 0x2, 0x1, 0xa, 0x8, 0x0, 0x1000, 0x3, 0xfff, 0x3, 0x1, 0x2, 0x8, 0x7, 0x7, 0xfff, 0x79d, 0xc04, 0xffffff81, 0x3, 0x44, 0x5, 0x7fff, 0x7beb, 0x7, 0x7b2, 0x5, 0x7, 0x7, 0x3, 0x4, 0x7ff, 0xeb, 0x800, 0x80, 0x721, 0x8, 0x5, 0x9, 0xe, 0xffff, 0x2, 0x4, 0x7, 0x8001, 0x0, 0xefd8, 0x7, 0x9, 0x1, 0x1de, 0x6, 0x3, 0x4, 0x7f, 0x4, 0x2, 0x8, 0x4, 0x1ff, 0x7000000, 0xf, 0x7fff, 0x4, 0x3, 0x7fffffff, 0xffff, 0x5e, 0x4, 0x9, 0x0, 0x3, 0x69, 0x9, 0x4, 0x7, 0x4, 0x8, 0x6, 0x0, 0x70, 0xa2d1, 0x5, 0xfd3, 0xb, 0x200, 0x726603cd, 0x8, 0x0, 0xfffffffa, 0x1c373b81, 0x8, 0x3, 0x8000, 0x1, 0x3, 0x1, 0x6, 0x10000, 0x2, 0x6, 0x3, 0x4, 0x9, 0x6, 0x0, 0x0, 0x63b, 0x6, 0x7, 0x3dd, 0x8, 0x8, 0x1, 0x4, 0xa, 0x8, 0x100, 0x3, 0x400, 0x6, 0x6, 0xfff, 0x2, 0xb3, 0x8, 0x2, 0x6, 0x7, 0xc, 0x2, 0x5, 0x6, 0x6, 0x80000001, 0xcf, 0x3, 0xfffffeff, 0x7, 0x2c593ed4, 0xa3e3, 0x8, 0xc07a, 0xff, 0x101, 0x0, 0xfffffff9, 0xfffffffb, 0x80000001, 0xe2, 0x2c8e, 0x80000000, 0x1, 0x0, 0x4, 0xd, 0x9, 0x136, 0x8001, 0x4, 0x1c0, 0x9, 0x1, 0x7, 0x5, 0x4, 0x4, 0x7, 0xfffffffd, 0x1, 0x10, 0x3, 0xfffffbff, 0xfff, 0x3, 0x3, 0xfffffff3, 0xfff, 0x4, 0x8001, 0x2, 0xa, 0x7, 0x8001, 0x3, 0x2, 0x21569fa, 0x5, 0x8, 0x3, 0x7, 0x1, 0x1000, 0x7f, 0x1, 0x8, 0x1, 0x81, 0x5, 0x1cd6, 0x2, 0x8, 0x8, 0x3, 0x5, 0x5, 0x0, 0x81, 0x7fffffff, 0x4, 0x6, 0x7, 0x0, 0x7, 0x6b8692d9, 0xffffffac, 0x6, 0x1, 0x7, 0x2, 0x88, 0x9, 0x400, 0x3, 0x2, 0x1d25, 0x3, 0x400, 0xcd8, 0xffffffff, 0x0, 0x1, 0x2, 0x10, 0x0, 0x3, 0x401, 0x4, 0x2, 0x6, 0x10001]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0xd02, 0x69dc, 0xc5, {0x0, 0x1, 0x9, 0x4, 0xa, 0x53}, {0x1c, 0x1, 0x400, 0xf62, 0x5, 0xd7}, 0x400, 0x7, 0x4}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x81f}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x59}]}}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x6, 0x6}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x5}}, @TCA_U32_LINK={0x8, 0x3, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @filter_kind_options=@f_fw={{0x7}, {0x46c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'team_slave_0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xe, 0xc}}, @TCA_FW_POLICE={0x428, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc65}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x70, 0x4, 0x2, 0xa, 0xfffffffe, 0x127, 0x5, 0x1, 0x2, 0x7, 0x6, 0x70cdde03, 0x19ba, 0x8000000, 0xc, 0x9, 0x7, 0x8, 0x2, 0x3, 0x3, 0x40, 0xffff, 0xffffff7c, 0x7, 0x80000001, 0xa5, 0x3, 0x1, 0x0, 0x8, 0x5, 0x10001, 0xfffffffb, 0x9, 0x3, 0x100, 0x3, 0x1, 0x4, 0x1, 0x80, 0xd04, 0x5, 0x10000, 0x1000, 0x4, 0xb5f, 0x6, 0xfffffffb, 0xffffffff, 0x1, 0x6, 0x4, 0x9, 0x3, 0x7d88, 0x5, 0x5d, 0xfffffffd, 0x8, 0x7, 0xf, 0x3, 0xb1ca0000, 0xd, 0x1ff, 0x7fff, 0x8, 0x9, 0x800, 0x7, 0x0, 0x5, 0x2, 0x2, 0x9, 0x6, 0x5, 0x8, 0xb741, 0x6, 0x1, 0xfffff75b, 0x3, 0x0, 0x7fff, 0x3, 0x5, 0x9, 0x10000, 0x8, 0x7, 0x401, 0x80000000, 0x11b, 0x80, 0xfffffffe, 0x3, 0x400, 0x4, 0x1, 0x4, 0x3, 0x28000000, 0x1, 0x4, 0x4, 0x8d50, 0x3, 0x9, 0x982, 0x2d, 0x7, 0x428, 0x9f9, 0x1, 0x1, 0xc, 0xf7, 0x0, 0x3, 0xf, 0x7ff, 0x9, 0xa9, 0x80000001, 0x9, 0x8, 0x31, 0x80000001, 0x80000001, 0x3, 0x8, 0xd6, 0x2, 0x1, 0x9, 0xfff, 0x1, 0xfffffff8, 0x6ea0, 0x604, 0x4, 0x6, 0x1000, 0x0, 0x8bc1, 0x4c3, 0x3, 0xff, 0x9e, 0xb5, 0x4, 0xa, 0x80000000, 0x0, 0xfffffffe, 0x2d, 0x2307, 0x2, 0x3a, 0x2, 0x8, 0x3, 0xa, 0x7f08, 0x3, 0x5, 0x0, 0x9, 0x400, 0xffffffc9, 0x4b0d5446, 0x7, 0x7, 0x8, 0xfffffffd, 0x88, 0x9, 0xff, 0xfd, 0x3ff, 0x4, 0x6b, 0xfffffff9, 0x1, 0x1, 0xf, 0xffffffff, 0x169, 0xe, 0x2, 0xf90, 0x0, 0x6, 0xea6f, 0x2, 0x4, 0x3, 0x7, 0x6, 0x71, 0x9, 0x8, 0x200, 0xffffffff, 0x1, 0x6, 0x2146, 0xe198, 0x5, 0x1, 0x2, 0x9, 0x4, 0xa, 0x4, 0x6, 0x5b8a, 0x7, 0xfffffffa, 0x7, 0x48, 0x0, 0x7cf48a83, 0xb2, 0xfa1, 0x9, 0x8, 0x6, 0x0, 0x298, 0xff, 0x7f, 0xfffffffe, 0x1, 0x2, 0x8000, 0x5, 0x2, 0xfffffffb, 0x9, 0x1, 0xaf, 0x7, 0x6307, 0xff, 0x9, 0x1, 0xd095, 0x400, 0x0, 0x6, 0x1000]}]}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x800}]}]}}]}, 0x11e0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40851) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x165802) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001400)={0x73, 0x2, 0x1, 'queue0\x00', 0x7}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000014c0)={0x2, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e20, @multicast2}}}, 0x108) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = add_key$keyring(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r5, 0x3cf) r6 = add_key$keyring(&(0x7f0000001700), &(0x7f0000001740)={'syz', 0x0}, 0x0, 0x0, r5) r7 = add_key(&(0x7f0000001680)='trusted\x00', &(0x7f00000016c0)={'syz', 0x3}, 0x0, 0x0, r6) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001780)={0x0, 0x2e, "4ebb0ef014b1ebe0718700903ed8ada17b0f85d775bd4f4e1215550669d4d051254efac30c44f8efdbbc73b57686"}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000001840)={r9, 0x5, 0x20, 0x1, 0x1d7}, &(0x7f0000001880)=0x18) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000028c0), 0x80, 0x0) ioctl$TCSBRK(r10, 0x5409, 0x7) write$sndseq(r2, &(0x7f0000002900)=[{0xe, 0x4, 0x4, 0x3, @time={0x7fffffff, 0x9}, {0xc, 0x9f}, {0x2, 0x5c}, @connect={{0x9, 0x8}, {0x8e, 0x1}}}, {0x1, 0x8, 0x7a, 0x5, @time={0x4, 0x6a}, {0xa, 0x3}, {0x8, 0x55}, @control={0x2, 0x1, 0xce}}], 0x38) keyctl$invalidate(0x15, r7) r11 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000002940)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1c4f, 0x59, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0xd7, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x5e2, 0x4, 0x1, {0x22, 0x3a7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x9, 0xe6}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x5, 0x5, 0x80}}]}}}]}}]}}, &(0x7f0000002c40)={0xa, &(0x7f0000002980)={0xa, 0x6, 0x201, 0x8, 0x2, 0x3, 0x40, 0x2}, 0x19, &(0x7f00000029c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xbc, "cb0019236f37ee6c4b900eaf5345b857"}]}, 0x7, [{0x4, &(0x7f0000002a00)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000002a40)=@string={0x4, 0x3, "08e1"}}, {0x4, &(0x7f0000002a80)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x439}}, {0x65, &(0x7f0000002b00)=@string={0x65, 0x3, "625a29d5b809b29878d5fc78fcf52aaa88cc84ab108f1491f70928b951a1c34c316d3beed0e03d34d127dcedb8f01b5978bb607c52d0a986fdf8133f0168d200439d15be5caf2702d6d31f2c1742de41d0f86b4aabf89308efcf685e273a395f836cb9"}}, {0x4, &(0x7f0000002b80)=@lang_id={0x4, 0x3, 0x810}}, {0x6e, &(0x7f0000002bc0)=@string={0x6e, 0x3, "aa338b72119cbac2244021571c670c953383a5f07262d2e0587823df816410ea5c6a21b920ef9d1c45bf4189f29a621644998059b48ab29907b7efe328f39f4eefe5b123c3f1fa515dff60abeb9c94615ecfb45841e4988271bd093abb23ac74d265b8d29f04ba112111990f"}}]}) syz_usb_control_io$hid(r11, &(0x7f0000002dc0)={0x24, &(0x7f0000002cc0)={0x394bfe3bff5889d5, 0x6, 0xb, {0xb, 0x8, "64ac2a31bc7e8f42cc"}}, &(0x7f0000002d00)={0x0, 0x3, 0xb, @string={0xb, 0x3, "13d927e5dab98b9068"}}, &(0x7f0000002d40), &(0x7f0000002d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0xb0, 0x1, {0x22, 0xb66}}}}, &(0x7f00000030c0)={0x2c, &(0x7f0000002e00)={0x20, 0x16, 0xda, "0914b5aa358969c34c6b9c145b0613334551c16a5d6bd7c0bb96f82d5b5b2c8b5db71509c084a6a66d559fa9d5ae622ab6254006d27dbe9f4d3590758bae8c616abf6282aeee66fe13a5df10e349cce5e609aa90933c77c44920858c8becd4f79b95f66e388390ad9a16e0d76228ef080d36c6979a76a5557c27d22f5d6e0d4d0ba7e16d0d17ecc3c25b33a30d5313714abcadac3d9986de0655f7f8cbd8b8cd9b9f46c970658c61bb80e0b990eb4683f707b09ce092f6055f2bec652e479df94b35903ffa2c96880149dc37ebbe4f7bfd31532b3dbab464e90a"}, &(0x7f0000002f00)={0x0, 0xa, 0x1, 0x61}, &(0x7f0000002f40)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000002f80)={0x20, 0x1, 0xcf, "bb158b5e66f94dc03bc40bd7f5b3b8e2b612565800fe11b6bd7e5df9ed511179758223982781aa4eadd8fa3bd7e7a46ab66678fda9497ba7833a9f43ebf836643c50b97c27844b0566e0b74d71e75e38098b006e2ef39f4b53bb184a2bbb20137a100d7b4f7613a6f78fb76546a35c15b708d3b7eae7c4646354b10211a0e504a73473ee669ff4367ca3ed9c7eb3d7a6c504c76ae6ed9a714ac5829469b1702e667997b79f7475fde65422e9966c0391bfcd1a56f9e1f419f8c333b188826adc74738fc0df68218ccc99f6ee0385aa"}, &(0x7f0000003080)={0x20, 0x3, 0x1, 0x72}}) socket$inet6_sctp(0xa, 0x1, 0x84) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003100), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r12, 0x80045301, &(0x7f0000003140)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000003180), 0x40800, 0x0) add_key$user(&(0x7f00000031c0), &(0x7f0000003200)={'syz', 0x1}, &(0x7f0000003240)="a3125879c0f00533f35397fc1b6f3309e3e738dd3cad8558e77024776a990dfba3cc07993d2cb8ab4e6b6e1ea7", 0x2d, r7) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000003340)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x20, 0x4, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x20008004) 91.988023ms ago: executing program 1 (id=951): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x4040850) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x521002, 0x0) read(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00002a3000/0x2000)=nil, 0x2000, 0x19) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0x7) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5000001, 0x13, r5, 0xd2a6a000) socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x44}, 0x1, 0x2}, 0x4040844) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000000023d89fccf0653a8abfa200000000000007020000f8ffffffb703000008000000b70400000002000085"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x40, '\x00', r6, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00\x00c\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) 91.763239ms ago: executing program 3 (id=952): r0 = fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_NMI(r1, 0xae9a) lsm_set_self_attr(0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000080)={0x7, 0x1d, 0x3, 0x7bd0, "b5c559625bcd5e44407984cbde3ff5baa935e6e48bf342879a6a9184997a4574"}) 71.396064ms ago: executing program 0 (id=953): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008880}, 0x4008040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0xd) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000}, 0x40080) 0s ago: executing program 3 (id=954): socket$kcm(0x11, 0x200000000000007, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'veth1_to_team\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x9, 0x1, [0xd45d]}, 0xa) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req3={0x101, 0x0, 0x7fffffff, 0x7760, 0x9, 0x67, 0xffffffff}, 0x1c) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000005dc0)={0x0, r6}, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f0000000e00), 0x12) bind$x25(r5, &(0x7f0000000080), 0x12) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000700)={'bond0\x00'}) kernel console output (not intermixed with test programs): 4562][ T7787] netlink: 'syz.3.524': attribute type 29 has an invalid length. [ 201.736407][ T7787] sctp: [Deprecated]: syz.3.524 (pid 7787) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.736407][ T7787] Use struct sctp_sack_info instead [ 201.811501][ T901] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 201.821372][ T901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.831480][ T901] usb 2-1: config 0 descriptor?? [ 202.171590][ T7792] bridge0: port 3(erspan0) entered blocking state [ 202.178061][ T7792] bridge0: port 3(erspan0) entered disabled state [ 202.184600][ T7792] erspan0: entered allmulticast mode [ 202.190674][ T7792] erspan0: entered promiscuous mode [ 202.196133][ T7792] bridge0: port 3(erspan0) entered blocking state [ 202.202599][ T7792] bridge0: port 3(erspan0) entered forwarding state [ 202.251846][ T901] usb 2-1: Cannot read MAC address [ 202.257188][ T901] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 202.493661][ T5909] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 202.629209][ T5897] usb 2-1: USB disconnect, device number 25 [ 202.793097][ T5909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.822846][ T5909] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 202.853127][ T5909] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 202.870958][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.891867][ T5909] usb 1-1: config 0 descriptor?? [ 202.899466][ T5909] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 203.043056][ T5909] dvb-usb: bulk message failed: -22 (3/0) [ 203.053594][ T5909] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 203.336935][ T5909] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 203.344349][ T5909] usb 1-1: media controller created [ 203.354962][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.387319][ T7815] blktrace: Concurrent blktraces are not allowed on sg0 [ 203.407483][ T5909] dvb-usb: bulk message failed: -22 (6/0) [ 203.414135][ T5909] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 203.441376][ T5909] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 203.469351][ T5909] dvb-usb: schedule remote query interval to 150 msecs. [ 203.476588][ T5909] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 203.494134][ T5909] usb 1-1: USB disconnect, device number 17 [ 203.593469][ T5909] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 206.292578][ T7852] ufs: Invalid option: "GPL" or missing value [ 206.299668][ T7852] ufs: wrong mount options [ 206.702965][ T7856] netlink: 'syz.2.543': attribute type 29 has an invalid length. [ 206.747852][ T7856] sctp: [Deprecated]: syz.2.543 (pid 7856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.747852][ T7856] Use struct sctp_sack_info instead [ 206.990153][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 206.990171][ T29] audit: type=1400 audit(1733925688.971:1264): avc: denied { create } for pid=7861 comm="syz.3.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 207.016474][ T29] audit: type=1400 audit(1733925688.971:1265): avc: denied { setopt } for pid=7861 comm="syz.3.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 207.285049][ T7867] netlink: 72 bytes leftover after parsing attributes in process `syz.0.546'. [ 207.657177][ T7866] xt_CT: No such helper "pptp" [ 207.777597][ T29] audit: type=1400 audit(1733925689.211:1266): avc: denied { setopt } for pid=7857 comm="syz.0.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 208.158740][ T29] audit: type=1400 audit(1733925689.301:1267): avc: denied { getopt } for pid=7857 comm="syz.0.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 208.214343][ T29] audit: type=1400 audit(1733925689.321:1268): avc: denied { write } for pid=7857 comm="syz.0.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 208.888417][ T29] audit: type=1400 audit(1733925690.891:1269): avc: denied { accept } for pid=7873 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.948147][ T29] audit: type=1400 audit(1733925690.891:1270): avc: denied { read write } for pid=7873 comm="syz.0.549" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 208.973482][ T29] audit: type=1400 audit(1733925690.891:1271): avc: denied { open } for pid=7873 comm="syz.0.549" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 208.998052][ T29] audit: type=1400 audit(1733925690.901:1272): avc: denied { ioctl } for pid=7873 comm="syz.0.549" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 209.022530][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.045605][ T29] audit: type=1400 audit(1733925691.061:1273): avc: denied { open } for pid=7885 comm="syz.3.553" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 210.583556][ T7907] netlink: 'syz.1.558': attribute type 10 has an invalid length. [ 210.617086][ T7907] team0: Device hsr_slave_0 failed to register rx_handler [ 210.715886][ T7915] netlink: 'syz.1.563': attribute type 29 has an invalid length. [ 210.727826][ T7915] sctp: [Deprecated]: syz.1.563 (pid 7915) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.727826][ T7915] Use struct sctp_sack_info instead [ 210.901490][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 211.712362][ T7933] netlink: 'syz.0.568': attribute type 4 has an invalid length. [ 211.826316][ T7937] FAULT_INJECTION: forcing a failure. [ 211.826316][ T7937] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 212.040668][ T7942] netlink: 72 bytes leftover after parsing attributes in process `syz.4.567'. [ 212.052971][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 212.053004][ T29] audit: type=1400 audit(1733925694.051:1333): avc: denied { getopt } for pid=7925 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 212.249954][ T7937] CPU: 0 UID: 0 PID: 7937 Comm: syz.2.570 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 212.260587][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 212.270648][ T7937] Call Trace: [ 212.273929][ T7937] [ 212.276862][ T7937] dump_stack_lvl+0x16c/0x1f0 [ 212.281553][ T7937] should_fail_ex+0x497/0x5b0 [ 212.286239][ T7937] ? fs_reclaim_acquire+0xae/0x150 [ 212.291370][ T7937] should_fail_alloc_page+0xe7/0x130 [ 212.296664][ T7937] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 212.302837][ T7937] __alloc_pages_noprof+0x190/0x25b0 [ 212.308134][ T7937] ? hlock_class+0x4e/0x130 [ 212.312649][ T7937] ? mark_lock+0xb5/0xc60 [ 212.316989][ T7937] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 212.319370][ T29] audit: type=1400 audit(1733925694.071:1334): avc: denied { write } for pid=7925 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 212.322881][ T7937] ? __pfx_mark_lock+0x10/0x10 [ 212.323006][ T7937] ? mas_next_node+0x7c1/0xf40 [ 212.323030][ T7937] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 212.357686][ T7937] ? hlock_class+0x4e/0x130 [ 212.362215][ T7937] ? hlock_class+0x4e/0x130 [ 212.366739][ T7937] ? hlock_class+0x4e/0x130 [ 212.371260][ T7937] ? mark_lock+0xb5/0xc60 [ 212.375605][ T7937] ? __pfx_mark_lock+0x10/0x10 [ 212.376803][ T7940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.568'. [ 212.380369][ T7937] ? hlock_class+0x4e/0x130 [ 212.380400][ T7937] ? __lock_acquire+0xcc5/0x3c40 [ 212.380418][ T7937] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 212.380443][ T7937] ? policy_nodemask+0xea/0x4e0 [ 212.380469][ T7937] alloc_pages_mpol_noprof+0x2c9/0x610 [ 212.414920][ T7937] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 212.415950][ T29] audit: type=1400 audit(1733925694.151:1335): avc: denied { ioctl } for pid=7926 comm="syz.1.566" path="socket:[17164]" dev="sockfs" ino=17164 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 212.420918][ T7937] folio_alloc_mpol_noprof+0x36/0xd0 [ 212.420952][ T7937] vma_alloc_folio_noprof+0xee/0x1b0 [ 212.420977][ T7937] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 212.421002][ T7937] ? find_held_lock+0x2d/0x110 [ 212.421035][ T7937] do_pte_missing+0x2017/0x3e00 [ 212.471536][ T7937] __handle_mm_fault+0x103c/0x2a40 [ 212.476679][ T7937] ? find_held_lock+0x2d/0x110 [ 212.481477][ T7937] ? __pfx___handle_mm_fault+0x10/0x10 [ 212.485128][ T29] audit: type=1400 audit(1733925694.201:1336): avc: denied { bind } for pid=7926 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 212.486935][ T7937] ? follow_page_pte+0x3c3/0x1b20 [ 212.486962][ T7937] ? __pfx_lock_release+0x10/0x10 [ 212.516092][ T7937] ? follow_page_pte+0x3f7/0x1b20 [ 212.521140][ T7937] handle_mm_fault+0x3fa/0xaa0 [ 212.525921][ T7937] __get_user_pages+0x8d9/0x3b50 [ 212.530875][ T7937] ? __pfx_mt_find+0x10/0x10 [ 212.535465][ T7937] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 212.541096][ T7937] ? __pfx___get_user_pages+0x10/0x10 [ 212.546467][ T7937] ? __mm_populate+0x21d/0x380 [ 212.551234][ T7937] populate_vma_page_range+0x27f/0x3a0 [ 212.556690][ T7937] ? __pfx_populate_vma_page_range+0x10/0x10 [ 212.562667][ T7937] ? __pfx_find_vma_intersection+0x10/0x10 [ 212.568477][ T7937] ? do_mlock+0x340/0x7d0 [ 212.572809][ T7937] __mm_populate+0x1d6/0x380 [ 212.577395][ T7937] ? __pfx___mm_populate+0x10/0x10 [ 212.582504][ T7937] ? up_write+0x1b2/0x520 [ 212.586834][ T7937] do_mlock+0x40a/0x7d0 [ 212.590988][ T7937] ? __fget_files+0x206/0x3a0 [ 212.595659][ T7937] ? __pfx_do_mlock+0x10/0x10 [ 212.600338][ T7937] ? fput+0x67/0x440 [ 212.604231][ T7937] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 212.610388][ T7937] ? syscall_user_dispatch+0x7a/0x130 [ 212.615765][ T7937] __x64_sys_mlock+0x59/0x80 [ 212.620354][ T7937] do_syscall_64+0xcd/0x250 [ 212.624859][ T7937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.630749][ T7937] RIP: 0033:0x7f2300f7ff19 [ 212.635157][ T7937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.654758][ T7937] RSP: 002b:00007f2301d0a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 212.663166][ T7937] RAX: ffffffffffffffda RBX: 00007f2301145fa0 RCX: 00007f2300f7ff19 [ 212.671130][ T7937] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020000000 [ 212.679090][ T7937] RBP: 00007f2301d0a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 212.687051][ T7937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.695012][ T7937] R13: 0000000000000000 R14: 00007f2301145fa0 R15: 00007fffa6a9d3c8 [ 212.702985][ T7937] [ 212.706111][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.713501][ T7939] xt_CT: No such helper "pptp" [ 212.723658][ T29] audit: type=1400 audit(1733925694.361:1337): avc: denied { create } for pid=7929 comm="syz.0.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 212.760120][ T29] audit: type=1400 audit(1733925694.391:1338): avc: denied { write } for pid=7929 comm="syz.0.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 212.780143][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.800326][ T29] audit: type=1400 audit(1733925694.391:1339): avc: denied { nlmsg_write } for pid=7929 comm="syz.0.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 212.822584][ T29] audit: type=1400 audit(1733925694.411:1340): avc: denied { ioctl } for pid=7929 comm="syz.0.568" path="socket:[17523]" dev="sockfs" ino=17523 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 212.848125][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.854954][ T29] audit: type=1400 audit(1733925694.421:1341): avc: denied { setopt } for pid=7926 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 212.874936][ T29] audit: type=1400 audit(1733925694.491:1342): avc: denied { write } for pid=7926 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 212.915653][ T7950] netlink: 'syz.4.574': attribute type 10 has an invalid length. [ 212.924046][ T7950] team0: Device hsr_slave_0 failed to register rx_handler [ 213.249170][ T5860] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 213.263118][ T7960] nbd: nbd4 already in use [ 214.007223][ T5860] usb 1-1: Using ep0 maxpacket: 32 [ 214.042570][ T5860] usb 1-1: config 1 has an invalid descriptor of length 187, skipping remainder of the config [ 214.208441][ T5860] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 214.239692][ T5860] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.321257][ T7963] 9pnet_virtio: no channels available for device 127.0.0.1 [ 214.333758][ T5860] usb 1-1: config 1 interface 1 has no altsetting 0 [ 214.389964][ T5860] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.407076][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.426880][ T5860] usb 1-1: Product: У [ 214.441053][ T5860] usb 1-1: Manufacturer: ࠚ [ 214.446089][ T5860] usb 1-1: SerialNumber:  [ 214.730508][ T5898] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 214.881530][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.896005][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.910159][ T5863] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 215.035664][ T5898] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 215.071104][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.224584][ T5863] usb 2-1: No LPM exit latency info found, disabling LPM. [ 215.258542][ T5863] usb 2-1: config 1 interface 0 altsetting 215 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 215.313377][ T5863] usb 2-1: config 1 interface 0 altsetting 215 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 215.658315][ T5898] usb 5-1: config 0 descriptor?? [ 215.674149][ T5863] usb 2-1: config 1 interface 0 has no altsetting 0 [ 215.696744][ T5863] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.40 [ 215.707668][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.715775][ T5863] usb 2-1: Product: ј [ 215.736095][ T5863] usb 2-1: Manufacturer:  [ 215.752358][ T5863] usb 2-1: SerialNumber: й [ 215.780573][ T7974] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 215.787957][ T7974] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 215.948732][ T7984] netlink: 'syz.2.583': attribute type 4 has an invalid length. [ 216.068974][ T7986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.583'. [ 216.210338][ T825] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 216.224580][ T5863] usbhid 2-1:1.0: can't add hid device: -71 [ 216.236774][ T5863] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 216.261727][ T5863] usb 2-1: USB disconnect, device number 26 [ 216.400208][ T825] usb 4-1: device descriptor read/64, error -71 [ 216.417903][ T5898] lg-g15 0003:046D:C222.0009: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 216.623228][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.634478][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.719020][ T825] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 216.727496][ T5860] usb 1-1: 0:2 : does not exist [ 216.740839][ T5860] usb 1-1: USB disconnect, device number 18 [ 216.797967][ T7990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.584'. [ 216.821662][ T7990] netlink: 104 bytes leftover after parsing attributes in process `syz.0.584'. [ 216.843943][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 216.870257][ T825] usb 4-1: device descriptor read/64, error -71 [ 216.980641][ T825] usb usb4-port1: attempt power cycle [ 217.400193][ T825] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 217.407871][ T5860] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 217.439311][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 217.450475][ T825] usb 4-1: device descriptor read/8, error -71 [ 217.618870][ T8010] 9pnet_virtio: no channels available for device 127.0.0.1 [ 217.857848][ T5898] usb 5-1: USB disconnect, device number 13 [ 217.897150][ T5860] usb 1-1: Using ep0 maxpacket: 16 [ 217.905805][ T5860] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 217.917947][ T5860] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.927197][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.935447][ T5860] usb 1-1: Product: syz [ 217.939671][ T5860] usb 1-1: Manufacturer: syz [ 217.944407][ T5860] usb 1-1: SerialNumber: syz [ 217.993530][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 217.993548][ T29] audit: type=1400 audit(1733925700.011:1379): avc: denied { read write } for pid=8011 comm="syz.4.591" name="sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 218.027375][ T29] audit: type=1400 audit(1733925700.011:1380): avc: denied { open } for pid=8011 comm="syz.4.591" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 218.060567][ T825] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 218.062850][ T29] audit: type=1400 audit(1733925700.011:1381): avc: denied { ioctl } for pid=8011 comm="syz.4.591" path="/dev/sg0" dev="devtmpfs" ino=744 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 218.102592][ T29] audit: type=1400 audit(1733925700.111:1382): avc: denied { setopt } for pid=8011 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 218.103167][ T825] usb 4-1: device descriptor read/8, error -71 [ 218.453158][ T825] usb usb4-port1: unable to enumerate USB device [ 218.705095][ T29] audit: type=1400 audit(1733925700.711:1383): avc: denied { write } for pid=7999 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 219.072081][ T29] audit: type=1400 audit(1733925700.931:1384): avc: denied { create } for pid=8016 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 219.115491][ T29] audit: type=1400 audit(1733925700.941:1385): avc: denied { setopt } for pid=8016 comm="syz.2.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 220.768148][ T5860] cdc_ncm 1-1:1.0: bind() failure [ 220.776745][ T5860] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 220.784161][ T5860] cdc_ncm 1-1:1.1: bind() failure [ 220.792506][ T5860] usb 1-1: USB disconnect, device number 19 [ 220.939204][ T29] audit: type=1400 audit(1733925702.951:1386): avc: denied { read write } for pid=8028 comm="syz.0.595" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 220.971072][ T8033] netlink: 'syz.4.597': attribute type 4 has an invalid length. [ 220.982989][ T8032] input: syz0 as /devices/virtual/input/input24 [ 220.995299][ T8032] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 221.934392][ T29] audit: type=1400 audit(1733925702.951:1387): avc: denied { open } for pid=8028 comm="syz.0.595" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 221.934433][ T29] audit: type=1400 audit(1733925703.001:1388): avc: denied { read } for pid=8028 comm="syz.0.595" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 222.387728][ T8041] netlink: 72 bytes leftover after parsing attributes in process `syz.2.594'. [ 222.918884][ T8048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.597'. [ 222.928791][ T8037] xt_CT: No such helper "pptp" [ 223.080185][ T901] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 223.110144][ T5898] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 223.166178][ T8057] netlink: 'syz.4.602': attribute type 29 has an invalid length. [ 223.211119][ T901] usb 4-1: device descriptor read/64, error -71 [ 223.240599][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'. [ 223.274720][ T5898] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 223.295482][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.383215][ T8057] sctp: [Deprecated]: syz.4.602 (pid 8057) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.383215][ T8057] Use struct sctp_sack_info instead [ 223.421937][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 223.421973][ T29] audit: type=1400 audit(1733925705.401:1405): avc: denied { setopt } for pid=8056 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 223.447425][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.770684][ T8059] syz.0.603: attempt to access beyond end of device [ 223.770684][ T8059] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 223.784403][ T8059] syz.0.603: attempt to access beyond end of device [ 223.784403][ T8059] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 223.797218][ T8059] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 223.806796][ T8059] syz.0.603: attempt to access beyond end of device [ 223.806796][ T8059] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 223.819908][ T8059] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 223.829569][ T8059] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 223.837157][ T8059] UDF-fs: Scanning with blocksize 512 failed [ 223.844355][ T8059] syz.0.603: attempt to access beyond end of device [ 223.844355][ T8059] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 223.857327][ T8059] syz.0.603: attempt to access beyond end of device [ 223.857327][ T8059] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 223.870299][ T8059] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 223.874411][ T8065] overlay: ./file0 is not a directory [ 223.880019][ T8059] syz.0.603: attempt to access beyond end of device [ 223.880019][ T8059] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 223.898048][ T8059] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 223.907537][ T8059] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 223.915243][ T8059] UDF-fs: Scanning with blocksize 1024 failed [ 223.921660][ T8059] syz.0.603: attempt to access beyond end of device [ 223.921660][ T8059] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 223.934473][ T8059] syz.0.603: attempt to access beyond end of device [ 223.934473][ T8059] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 223.978835][ T8059] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 223.988428][ T8059] syz.0.603: attempt to access beyond end of device [ 223.988428][ T8059] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 224.001453][ T8059] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 224.010920][ T8059] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 224.018617][ T8059] UDF-fs: Scanning with blocksize 2048 failed [ 224.024923][ T8059] syz.0.603: attempt to access beyond end of device [ 224.024923][ T8059] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 224.037811][ T8059] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 224.047385][ T8059] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 224.056849][ T8059] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 224.064386][ T8059] UDF-fs: Scanning with blocksize 4096 failed [ 224.070457][ T8059] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 224.088019][ T5898] usb 2-1: config 0 descriptor?? [ 224.100207][ T29] audit: type=1400 audit(1733925705.821:1406): avc: denied { append } for pid=8058 comm="syz.0.603" name="nbd0" dev="devtmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.140199][ T901] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 224.158303][ T5898] usb 2-1: can't set config #0, error -71 [ 224.164885][ T29] audit: type=1400 audit(1733925705.891:1407): avc: denied { mount } for pid=8058 comm="syz.0.603" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 224.246044][ T5898] usb 2-1: USB disconnect, device number 27 [ 224.692240][ T8072] netlink: 852 bytes leftover after parsing attributes in process `syz.3.607'. [ 224.717013][ T29] audit: type=1400 audit(1733925706.141:1408): avc: denied { connect } for pid=8056 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 224.958692][ T29] audit: type=1400 audit(1733925706.141:1409): avc: denied { setopt } for pid=8056 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 225.210163][ T29] audit: type=1400 audit(1733925707.211:1410): avc: denied { create } for pid=8082 comm="syz.3.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 225.275121][ T8090] netlink: 'syz.4.612': attribute type 4 has an invalid length. [ 225.277350][ T8087] xt_connbytes: Forcing CT accounting to be enabled [ 225.296207][ T8087] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 225.517989][ T8094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.612'. [ 225.995411][ T29] audit: type=1400 audit(1733925708.011:1411): avc: denied { open } for pid=8082 comm="syz.3.609" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 226.030208][ T825] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 226.101857][ T5860] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 226.180676][ T825] usb 2-1: Using ep0 maxpacket: 16 [ 226.204804][ T825] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 226.240826][ T825] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.256460][ T825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.272961][ T5860] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 226.283988][ T825] usb 2-1: Product: syz [ 226.288209][ T825] usb 2-1: Manufacturer: syz [ 226.293377][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.302147][ T825] usb 2-1: SerialNumber: syz [ 226.311615][ T5860] usb 1-1: config 0 descriptor?? [ 226.720158][ T9] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 227.129644][ T5860] usb 1-1: Cannot read MAC address [ 227.322429][ T5860] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 227.341371][ T9] usb 5-1: No LPM exit latency info found, disabling LPM. [ 227.352430][ T5860] usb 1-1: USB disconnect, device number 20 [ 227.359601][ T9] usb 5-1: config 1 interface 0 altsetting 215 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 227.382345][ T9] usb 5-1: config 1 interface 0 altsetting 215 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 227.393632][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 227.452017][ T9] usb 5-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.40 [ 227.461191][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.469239][ T9] usb 5-1: Product: ј [ 227.478621][ T9] usb 5-1: Manufacturer:  [ 227.490067][ T9] usb 5-1: SerialNumber: й [ 227.504099][ T8101] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 227.513551][ T8101] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 228.187586][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 228.200587][ T825] cdc_ncm 2-1:1.0: bind() failure [ 228.208535][ T825] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 228.220236][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 228.250337][ T9] usb 5-1: USB disconnect, device number 14 [ 228.265534][ T825] cdc_ncm 2-1:1.1: bind() failure [ 228.678119][ T825] usb 2-1: USB disconnect, device number 28 [ 228.810596][ T29] audit: type=1400 audit(1733925710.821:1412): avc: denied { create } for pid=8121 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 228.829994][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.910992][ T29] audit: type=1400 audit(1733925710.821:1413): avc: denied { write } for pid=8121 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 228.930285][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.946278][ T29] audit: type=1400 audit(1733925710.891:1414): avc: denied { setopt } for pid=8121 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.689407][ T8133] 9pnet_virtio: no channels available for device 127.0.0.1 [ 229.753177][ T8136] FAULT_INJECTION: forcing a failure. [ 229.753177][ T8136] name failslab, interval 1, probability 0, space 0, times 0 [ 229.796623][ T8136] CPU: 0 UID: 0 PID: 8136 Comm: syz.4.622 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 229.807249][ T8136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.817306][ T8136] Call Trace: [ 229.820584][ T8136] [ 229.823518][ T8136] dump_stack_lvl+0x16c/0x1f0 [ 229.828203][ T8136] should_fail_ex+0x497/0x5b0 [ 229.832889][ T8136] ? fs_reclaim_acquire+0xae/0x150 [ 229.838026][ T8136] should_failslab+0xc2/0x120 [ 229.842721][ T8136] __kmalloc_noprof+0xcb/0x510 [ 229.847482][ T8136] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 229.853119][ T8136] tomoyo_realpath_from_path+0xb9/0x720 [ 229.858663][ T8136] ? tomoyo_path_number_perm+0x235/0x590 [ 229.864289][ T8136] ? tomoyo_path_number_perm+0x235/0x590 [ 229.869918][ T8136] tomoyo_path_number_perm+0x248/0x590 [ 229.875376][ T8136] ? tomoyo_path_number_perm+0x235/0x590 [ 229.881004][ T8136] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 229.886998][ T8136] ? __pfx_lock_release+0x10/0x10 [ 229.892020][ T8136] ? trace_lock_acquire+0x14e/0x1f0 [ 229.897222][ T8136] ? lock_acquire+0x2f/0xb0 [ 229.901718][ T8136] ? __fget_files+0x40/0x3a0 [ 229.906307][ T8136] ? __fget_files+0x206/0x3a0 [ 229.910980][ T8136] security_file_ioctl+0x9b/0x240 [ 229.916004][ T8136] __x64_sys_ioctl+0xb7/0x200 [ 229.920682][ T8136] do_syscall_64+0xcd/0x250 [ 229.925183][ T8136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.931071][ T8136] RIP: 0033:0x7f4b66f7ff19 [ 229.935478][ T8136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.955075][ T8136] RSP: 002b:00007f4b67e36058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.963482][ T8136] RAX: ffffffffffffffda RBX: 00007f4b67146080 RCX: 00007f4b66f7ff19 [ 229.971443][ T8136] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 229.979402][ T8136] RBP: 00007f4b67e360a0 R08: 0000000000000000 R09: 0000000000000000 [ 229.987364][ T8136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.995324][ T8136] R13: 0000000000000000 R14: 00007f4b67146080 R15: 00007ffec814ce58 [ 230.003299][ T8136] [ 230.042956][ T8136] ERROR: Out of memory at tomoyo_realpath_from_path. [ 230.072428][ T8143] netlink: 'syz.1.624': attribute type 4 has an invalid length. [ 230.461314][ T8147] blktrace: Concurrent blktraces are not allowed on sg0 [ 230.936499][ T29] audit: type=1400 audit(1733925712.341:1415): avc: denied { append } for pid=8141 comm="syz.3.625" name="sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 231.146888][ T8140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.624'. [ 231.208051][ T29] audit: type=1400 audit(1733925712.381:1416): avc: denied { bind } for pid=8141 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 231.374273][ T29] audit: type=1400 audit(1733925712.381:1417): avc: denied { name_bind } for pid=8141 comm="syz.3.625" src=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 231.448071][ T29] audit: type=1400 audit(1733925712.381:1418): avc: denied { node_bind } for pid=8141 comm="syz.3.625" saddr=::ffff:127.0.0.1 src=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 231.483003][ T29] audit: type=1400 audit(1733925712.391:1419): avc: denied { write } for pid=8141 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 231.570125][ T29] audit: type=1400 audit(1733925712.391:1420): avc: denied { connect } for pid=8141 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 231.589795][ T29] audit: type=1400 audit(1733925712.391:1421): avc: denied { name_connect } for pid=8141 comm="syz.3.625" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 232.150219][ T5909] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 232.642624][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.652927][ T5909] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 232.659896][ T8174] netlink: 'syz.0.633': attribute type 29 has an invalid length. [ 232.678502][ T5909] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 232.678654][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.701150][ T5909] usb 5-1: config 0 descriptor?? [ 232.708193][ T9] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 232.748115][ T8175] sctp: [Deprecated]: syz.0.633 (pid 8175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.748115][ T8175] Use struct sctp_sack_info instead [ 232.802860][ T5909] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 232.838135][ T5909] dvb-usb: bulk message failed: -22 (3/0) [ 232.865349][ T5909] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 232.907131][ T5909] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 232.932459][ T5909] usb 5-1: media controller created [ 232.947345][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.960630][ T8178] netlink: 'syz.2.634': attribute type 29 has an invalid length. [ 233.028288][ T5909] dvb-usb: bulk message failed: -22 (6/0) [ 233.029715][ T8178] sctp: [Deprecated]: syz.2.634 (pid 8178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 233.029715][ T8178] Use struct sctp_sack_info instead [ 233.045380][ T5909] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 233.078611][ T5909] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 233.100300][ T9] usb 4-1: No LPM exit latency info found, disabling LPM. [ 233.105818][ T5909] dvb-usb: schedule remote query interval to 150 msecs. [ 233.117043][ T9] usb 4-1: config 1 interface 0 altsetting 215 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 233.143155][ T9] usb 4-1: config 1 interface 0 altsetting 215 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 233.149970][ T5909] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 233.159198][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 233.209988][ T9] usb 4-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.40 [ 233.233283][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.266815][ T5909] usb 5-1: USB disconnect, device number 15 [ 233.275840][ T9] usb 4-1: Product: ј [ 233.280451][ T9] usb 4-1: Manufacturer:  [ 233.313694][ T9] usb 4-1: SerialNumber: й [ 233.456208][ T5909] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 233.700587][ T8168] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 233.842704][ T8168] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 234.204983][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 234.205000][ T29] audit: type=1400 audit(1733925716.221:1429): avc: denied { getopt } for pid=8191 comm="syz.1.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.246403][ T29] audit: type=1400 audit(1733925716.251:1430): avc: denied { mount } for pid=8191 comm="syz.1.637" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 234.310111][ T8194] netlink: 'syz.0.638': attribute type 10 has an invalid length. [ 234.427982][ T9] usbhid 4-1:1.0: can't add hid device: -71 [ 234.434220][ T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 234.475061][ T9] usb 4-1: USB disconnect, device number 23 [ 234.497030][ T8194] team0: Device hsr_slave_0 failed to register rx_handler [ 234.514340][ T29] audit: type=1400 audit(1733925716.511:1431): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 234.807125][ T8202] FAULT_INJECTION: forcing a failure. [ 234.807125][ T8202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.820394][ T8202] CPU: 1 UID: 0 PID: 8202 Comm: syz.1.640 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 234.830996][ T8202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 234.841053][ T8202] Call Trace: [ 234.844323][ T8202] [ 234.847244][ T8202] dump_stack_lvl+0x16c/0x1f0 [ 234.851926][ T8202] should_fail_ex+0x497/0x5b0 [ 234.856604][ T8202] _copy_from_user+0x2e/0xd0 [ 234.861196][ T8202] move_addr_to_kernel+0x68/0x160 [ 234.866221][ T8202] __sys_bind+0x11c/0x260 [ 234.870554][ T8202] ? __pfx___sys_bind+0x10/0x10 [ 234.875403][ T8202] ? __fget_files+0x206/0x3a0 [ 234.880084][ T8202] ? __pfx_ksys_write+0x10/0x10 [ 234.884934][ T8202] __x64_sys_bind+0x72/0xb0 [ 234.889432][ T8202] ? lockdep_hardirqs_on+0x7c/0x110 [ 234.894628][ T8202] do_syscall_64+0xcd/0x250 [ 234.899129][ T8202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.905022][ T8202] RIP: 0033:0x7fdfd417ff19 [ 234.909439][ T8202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.929037][ T8202] RSP: 002b:00007fdfd4f9e058 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 234.937445][ T8202] RAX: ffffffffffffffda RBX: 00007fdfd4345fa0 RCX: 00007fdfd417ff19 [ 234.945408][ T8202] RDX: 0000000000000058 RSI: 0000000020000280 RDI: 0000000000000003 [ 234.953371][ T8202] RBP: 00007fdfd4f9e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 234.961334][ T8202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.969295][ T8202] R13: 0000000000000000 R14: 00007fdfd4345fa0 R15: 00007ffd907b96b8 [ 234.977272][ T8202] [ 234.980347][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.188752][ T8209] sp0: Synchronizing with TNC [ 236.090227][ T5865] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 236.307886][ T29] audit: type=1400 audit(1733925718.321:1432): avc: denied { mounton } for pid=8219 comm="syz.2.646" path="/134" dev="tmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 236.307981][ T8225] 9pnet_fd: Insufficient options for proto=fd [ 236.378155][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 236.442847][ T5865] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 236.794391][ T5865] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.804004][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.815435][ T5865] usb 2-1: Product: syz [ 236.820338][ T5865] usb 2-1: Manufacturer: syz [ 236.825059][ T5865] usb 2-1: SerialNumber: syz [ 237.372739][ T8240] netlink: 72 bytes leftover after parsing attributes in process `syz.4.650'. [ 237.923404][ T8239] xt_CT: No such helper "pptp" [ 238.449168][ T8244] netlink: 'syz.4.651': attribute type 4 has an invalid length. [ 238.573514][ T8247] netlink: 20 bytes leftover after parsing attributes in process `syz.4.651'. [ 238.669223][ T8248] 9pnet_virtio: no channels available for device 127.0.0.1 [ 239.113108][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 239.943513][ T5865] cdc_ncm 2-1:1.0: bind() failure [ 239.955824][ T5865] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 239.969665][ T5865] cdc_ncm 2-1:1.1: bind() failure [ 240.031576][ T5865] usb 2-1: USB disconnect, device number 29 [ 241.889747][ T8279] netlink: 72 bytes leftover after parsing attributes in process `syz.4.659'. [ 242.265386][ T8278] xt_CT: No such helper "pptp" [ 243.521442][ T29] audit: type=1400 audit(1733925725.541:1433): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 243.616948][ T8294] netlink: 'syz.0.663': attribute type 4 has an invalid length. [ 243.643281][ T8296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.664'. [ 243.653205][ T29] audit: type=1400 audit(1733925725.661:1434): avc: denied { getopt } for pid=8295 comm="syz.1.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 243.672824][ T29] audit: type=1400 audit(1733925725.671:1435): avc: denied { ioctl } for pid=8295 comm="syz.1.664" path="socket:[19079]" dev="sockfs" ino=19079 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 243.733640][ T8307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.663'. [ 243.755045][ T29] audit: type=1400 audit(1733925725.741:1436): avc: denied { sys_module } for pid=8295 comm="syz.1.664" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 243.960186][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 244.150120][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 244.217102][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 244.428076][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.450105][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.468328][ T9] usb 4-1: Product: syz [ 244.472596][ T9] usb 4-1: Manufacturer: syz [ 244.477192][ T9] usb 4-1: SerialNumber: syz [ 246.136105][ T29] audit: type=1400 audit(1733925728.151:1437): avc: denied { write } for pid=8337 comm="syz.2.674" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 247.280727][ T9] cdc_ncm 4-1:1.0: bind() failure [ 247.293110][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 247.299906][ T9] cdc_ncm 4-1:1.1: bind() failure [ 247.502165][ T9] usb 4-1: USB disconnect, device number 24 [ 247.612275][ T8358] 9pnet_virtio: no channels available for device 127.0.0.1 [ 248.309853][ T29] audit: type=1400 audit(1733925730.321:1438): avc: denied { bind } for pid=8365 comm="syz.0.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.372422][ T29] audit: type=1400 audit(1733925730.321:1439): avc: denied { setopt } for pid=8365 comm="syz.0.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.510704][ T5897] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 249.395855][ T5897] usb 2-1: No LPM exit latency info found, disabling LPM. [ 249.441818][ T5897] usb 2-1: config 1 interface 0 altsetting 215 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 249.453895][ T5897] usb 2-1: config 1 interface 0 altsetting 215 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 249.464789][ T5897] usb 2-1: config 1 interface 0 has no altsetting 0 [ 249.477136][ T5897] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.40 [ 249.486419][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.494544][ T5897] usb 2-1: Product: ј [ 249.524487][ T5897] usb 2-1: Manufacturer:  [ 249.529113][ T5897] usb 2-1: SerialNumber: й [ 249.614138][ T8364] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 249.622082][ T8364] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 249.672152][ T29] audit: type=1400 audit(1733925731.671:1440): avc: denied { bind } for pid=8386 comm="syz.4.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 249.769607][ T29] audit: type=1400 audit(1733925731.671:1441): avc: denied { node_bind } for pid=8386 comm="syz.4.687" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 249.789820][ T29] audit: type=1400 audit(1733925731.671:1442): avc: denied { read } for pid=8386 comm="syz.4.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 249.826103][ T29] audit: type=1400 audit(1733925731.681:1443): avc: denied { connect } for pid=8384 comm="syz.2.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.888373][ T29] audit: type=1400 audit(1733925731.771:1444): avc: denied { getopt } for pid=8388 comm="syz.0.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 250.075879][ T5897] usbhid 2-1:1.0: can't add hid device: -71 [ 250.082223][ T5897] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 250.098360][ T5897] usb 2-1: USB disconnect, device number 30 [ 250.150211][ T5865] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 250.403734][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.526985][ T8398] blktrace: Concurrent blktraces are not allowed on sg0 [ 250.554985][ T5899] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 250.597341][ T5865] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 250.608100][ T5899] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 250.617710][ T5865] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 250.638879][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.647381][ T5899] usb 3-1: USB disconnect, device number 16 [ 250.767331][ T5865] usb 1-1: config 0 descriptor?? [ 250.914579][ T5865] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 250.951072][ T5865] dvb-usb: bulk message failed: -22 (3/0) [ 250.958556][ T5865] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 250.967651][ T5865] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 250.981041][ T5865] usb 1-1: media controller created [ 250.989869][ T5865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 251.009238][ T5865] dvb-usb: bulk message failed: -22 (6/0) [ 251.015380][ T5865] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 251.024361][ T5865] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input30 [ 251.098405][ T5865] dvb-usb: schedule remote query interval to 150 msecs. [ 251.105825][ T5865] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 251.191340][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 251.275035][ T5865] dvb-usb: bulk message failed: -22 (1/0) [ 251.302386][ T5865] dvb-usb: error while querying for an remote control event. [ 251.580143][ T5865] dvb-usb: bulk message failed: -22 (1/0) [ 251.589479][ T5865] dvb-usb: error while querying for an remote control event. [ 251.672428][ T9] usb 1-1: USB disconnect, device number 21 [ 251.812557][ T8410] tmpfs: Unknown parameter '' [ 251.820717][ T29] audit: type=1400 audit(1733925733.831:1445): avc: denied { mounton } for pid=8409 comm="syz.4.694" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 251.824840][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 251.931146][ T8413] 9pnet_virtio: no channels available for device 127.0.0.1 [ 252.121546][ T29] audit: type=1400 audit(1733925734.131:1446): avc: denied { create } for pid=8409 comm="syz.4.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 252.415734][ T29] audit: type=1400 audit(1733925734.431:1447): avc: denied { ioctl } for pid=8409 comm="syz.4.694" path="socket:[19312]" dev="sockfs" ino=19312 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 252.476462][ T8414] binder_alloc: 8409: binder_alloc_buf size 68856 failed, no address space [ 252.485744][ T8414] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 252.502244][ T29] audit: type=1400 audit(1733925734.471:1448): avc: denied { write } for pid=8409 comm="syz.4.694" path="socket:[19312]" dev="sockfs" ino=19312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 252.614245][ T29] audit: type=1400 audit(1733925734.471:1449): avc: denied { nlmsg_read } for pid=8409 comm="syz.4.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 252.634974][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.168210][ T8433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.698'. [ 253.720175][ T5865] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 253.957328][ T5865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.967661][ T5865] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 254.009575][ T5865] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 254.045738][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.080403][ T5865] usb 3-1: config 0 descriptor?? [ 254.140639][ T8446] netlink: 'syz.0.703': attribute type 29 has an invalid length. [ 254.151381][ T5865] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 254.157377][ T8446] sctp: [Deprecated]: syz.0.703 (pid 8446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.157377][ T8446] Use struct sctp_sack_info instead [ 254.158000][ T5865] dvb-usb: bulk message failed: -22 (3/0) [ 254.243761][ T5865] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 254.294143][ T5865] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 254.339992][ T5865] usb 3-1: media controller created [ 254.346616][ T5865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.374771][ T5865] dvb-usb: bulk message failed: -22 (6/0) [ 254.420124][ T5865] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 254.446409][ T5865] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 254.461757][ T5865] dvb-usb: schedule remote query interval to 150 msecs. [ 254.469389][ T5865] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 254.484136][ T5865] usb 3-1: USB disconnect, device number 17 [ 254.732282][ T5865] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 254.952228][ T8456] blktrace: Concurrent blktraces are not allowed on sg0 [ 255.480240][ T825] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 255.561714][ T8458] netlink: 'syz.0.706': attribute type 29 has an invalid length. [ 255.589646][ T8458] sctp: [Deprecated]: syz.0.706 (pid 8458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.589646][ T8458] Use struct sctp_sack_info instead [ 255.679793][ T825] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.707432][ T825] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 255.724582][ T825] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 255.750172][ T825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.765178][ T825] usb 2-1: config 0 descriptor?? [ 255.783804][ T825] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 255.792984][ T825] dvb-usb: bulk message failed: -22 (3/0) [ 255.813826][ T825] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 255.830588][ T825] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 255.850814][ T825] usb 2-1: media controller created [ 255.856938][ T825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.134373][ T825] dvb-usb: bulk message failed: -22 (6/0) [ 256.171773][ T825] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 256.260929][ T825] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 256.276625][ T8467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.280762][ T825] dvb-usb: schedule remote query interval to 150 msecs. [ 256.292196][ T825] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 256.313848][ T8468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.710'. [ 256.336328][ T8467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.377393][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 256.377410][ T29] audit: type=1400 audit(1733925738.371:1459): avc: denied { write } for pid=8469 comm="syz.2.711" path="socket:[19432]" dev="sockfs" ino=19432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.415506][ T5865] usb 2-1: USB disconnect, device number 31 [ 256.447183][ T29] audit: type=1400 audit(1733925738.371:1460): avc: denied { bind } for pid=8469 comm="syz.2.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.481740][ T5865] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 256.551242][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 256.732367][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 256.950363][ T5865] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 256.980621][ T9] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 256.993689][ T9] usb 5-1: config 0 has no interface number 0 [ 257.025091][ T9] usb 5-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=13.d5 [ 257.034240][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.045960][ T9] usb 5-1: Product: syz [ 257.050645][ T9] usb 5-1: Manufacturer: syz [ 257.056241][ T9] usb 5-1: SerialNumber: syz [ 257.066715][ T9] usb 5-1: config 0 descriptor?? [ 257.097567][ T9] usb 5-1: bad CDC descriptors [ 257.157121][ T5865] usb 1-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 257.166634][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.176108][ T5865] usb 1-1: Product: syz [ 257.180553][ T5865] usb 1-1: Manufacturer: syz [ 257.185236][ T5865] usb 1-1: SerialNumber: syz [ 257.192570][ T5865] usb 1-1: config 0 descriptor?? [ 257.202331][ T5865] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 257.287916][ T8491] [U] [ 257.290958][ T8491] [U] [ 257.294608][ T8491] [U] e] F)A2ay63HGp [ 257.301115][ T8491] [U] 3YϏ8!WcN?o3B'}TտfE `k0`iwM' [ 257.301978][ T5899] usb 5-1: USB disconnect, device number 16 [ 257.309206][ T8491] [U] K\BԨݍΞr2xOEL [ 257.309252][ T8491] [U] ֺ!/0E{@GԔRE i^iejbKW; [ 257.328700][ T8491] [U] [ 257.352743][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.717'. [ 257.374194][ T8491] [U] oc2S%ؗM>"t2ky 6[e/_> 9;m>Y"l [Rz7T}p-3>H2ot뫹JpLֺ寯`nD#^-{ ,=G,KOC>"e~R-éR"s XqB [ 279.610145][ T8763] dump_stack_lvl+0x16c/0x1f0 [ 279.614843][ T8763] should_fail_ex+0x497/0x5b0 [ 279.619533][ T8763] _copy_from_user+0x2e/0xd0 [ 279.624132][ T8763] copy_msghdr_from_user+0x99/0x160 [ 279.629354][ T8763] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 279.635195][ T8763] ? find_held_lock+0x2d/0x110 [ 279.639979][ T8763] ___sys_recvmsg+0xdc/0x1a0 [ 279.644587][ T8763] ? __pfx____sys_recvmsg+0x10/0x10 [ 279.649801][ T8763] ? __fget_files+0x1fc/0x3a0 [ 279.654488][ T8763] ? trace_lock_acquire+0x14e/0x1f0 [ 279.659717][ T8763] ? __fget_files+0x206/0x3a0 [ 279.664410][ T8763] __sys_recvmsg+0x16b/0x220 [ 279.669013][ T8763] ? __pfx___sys_recvmsg+0x10/0x10 [ 279.674151][ T8763] do_syscall_64+0xcd/0x250 [ 279.678671][ T8763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.684582][ T8763] RIP: 0033:0x7fdfd417ff19 [ 279.689004][ T8763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.708709][ T8763] RSP: 002b:00007fdfd4f9e058 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 279.717141][ T8763] RAX: ffffffffffffffda RBX: 00007fdfd4345fa0 RCX: 00007fdfd417ff19 [ 279.725116][ T8763] RDX: 0000000040002002 RSI: 0000000020000000 RDI: 0000000000000004 [ 279.733086][ T8763] RBP: 00007fdfd4f9e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 279.741050][ T8763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.749010][ T8763] R13: 0000000000000000 R14: 00007fdfd4345fa0 R15: 00007ffd907b96b8 [ 279.756988][ T8763] [ 279.760031][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.803399][ T29] audit: type=1400 audit(1733925761.791:1509): avc: denied { read } for pid=8745 comm="syz.3.782" name="/" dev="configfs" ino=1236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 279.834394][ T29] audit: type=1400 audit(1733925761.791:1510): avc: denied { open } for pid=8745 comm="syz.3.782" path="/157/file0" dev="configfs" ino=1236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 280.070530][ T8767] ipvlan0: entered promiscuous mode [ 280.099131][ T8767] ipvlan0: entered allmulticast mode [ 280.119350][ T8767] veth0_vlan: entered allmulticast mode [ 280.242231][ T29] audit: type=1400 audit(1733925762.261:1511): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 280.715026][ T825] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 280.723132][ T29] audit: type=1400 audit(1733925762.721:1512): avc: denied { unlink } for pid=8776 comm="syz.4.792" name="#5" dev="tmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 281.090087][ T8784] blktrace: Concurrent blktraces are not allowed on sg0 [ 281.770291][ T825] usb 3-1: Using ep0 maxpacket: 8 [ 281.781734][ T825] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 281.797661][ T825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.818770][ T825] usb 3-1: Product: syz [ 282.063792][ T8782] 9pnet_virtio: no channels available for device 127.0.0.1 [ 282.439229][ T825] usb 3-1: Manufacturer: syz [ 282.443881][ T825] usb 3-1: SerialNumber: syz [ 282.461459][ T825] usb 3-1: config 0 descriptor?? [ 282.473171][ T29] audit: type=1400 audit(1733925764.371:1513): avc: denied { create } for pid=8787 comm="syz.1.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 282.476080][ T825] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 282.609279][ T29] audit: type=1400 audit(1733925764.391:1514): avc: denied { accept } for pid=8787 comm="syz.1.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 282.680806][ T825] gspca_sonixj: reg_w1 err -71 [ 282.685693][ T825] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 282.704784][ T825] usb 3-1: USB disconnect, device number 20 [ 282.785380][ T29] audit: type=1400 audit(1733925764.801:1515): avc: denied { setopt } for pid=8793 comm="syz.4.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 282.937472][ T8803] overlayfs: failed to get inode (-116) [ 282.944636][ T8803] overlayfs: failed to get inode (-116) [ 282.957016][ T8805] FAULT_INJECTION: forcing a failure. [ 282.957016][ T8805] name failslab, interval 1, probability 0, space 0, times 0 [ 282.970525][ T8805] CPU: 0 UID: 0 PID: 8805 Comm: syz.2.803 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 282.981120][ T8805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 282.991164][ T8805] Call Trace: [ 282.994441][ T8805] [ 282.997364][ T8805] dump_stack_lvl+0x16c/0x1f0 [ 283.002042][ T8805] should_fail_ex+0x497/0x5b0 [ 283.006732][ T8805] ? fs_reclaim_acquire+0xae/0x150 [ 283.011861][ T8805] should_failslab+0xc2/0x120 [ 283.016550][ T8805] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 283.022279][ T8805] ? __d_alloc+0x31/0xaa0 [ 283.026610][ T8805] __d_alloc+0x31/0xaa0 [ 283.030764][ T8805] d_alloc+0x4a/0x1e0 [ 283.034741][ T8805] d_alloc_parallel+0xe9/0x12b0 [ 283.039596][ T8805] ? trace_lock_acquire+0x14e/0x1f0 [ 283.044793][ T8805] ? __pfx_d_alloc_parallel+0x10/0x10 [ 283.050164][ T8805] ? lockdep_init_map_type+0x16d/0x7d0 [ 283.055618][ T8805] ? lock_acquire.part.0+0x11b/0x380 [ 283.060905][ T8805] ? lockdep_init_map_type+0x16d/0x7d0 [ 283.066363][ T8805] __lookup_slow+0x194/0x460 [ 283.070951][ T8805] ? __pfx___lookup_slow+0x10/0x10 [ 283.076064][ T8805] ? walk_component+0x342/0x5b0 [ 283.080920][ T8805] ? lookup_fast+0x155/0x540 [ 283.085509][ T8805] walk_component+0x350/0x5b0 [ 283.090184][ T8805] path_lookupat+0x17f/0x770 [ 283.094769][ T8805] filename_lookup+0x221/0x5f0 [ 283.099524][ T8805] ? __pfx_filename_lookup+0x10/0x10 [ 283.104823][ T8805] ? getname_flags.part.0+0x1c5/0x550 [ 283.110196][ T8805] user_path_at+0x3a/0x60 [ 283.114523][ T8805] __x64_sys_mount+0x1fc/0x320 [ 283.119279][ T8805] ? __pfx___x64_sys_mount+0x10/0x10 [ 283.124563][ T8805] do_syscall_64+0xcd/0x250 [ 283.129060][ T8805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.134949][ T8805] RIP: 0033:0x7f2300f7ff19 [ 283.139351][ T8805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.158948][ T8805] RSP: 002b:00007f2301d0a058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 283.167354][ T8805] RAX: ffffffffffffffda RBX: 00007f2301145fa0 RCX: 00007f2300f7ff19 [ 283.175312][ T8805] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000000 [ 283.183275][ T8805] RBP: 00007f2301d0a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 283.191233][ T8805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.199190][ T8805] R13: 0000000000000000 R14: 00007f2301145fa0 R15: 00007fffa6a9d3c8 [ 283.207162][ T8805] [ 283.210221][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.210227][ T5897] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 283.377607][ T5897] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 283.405797][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.449030][ T5897] usb 4-1: Product: syz [ 283.463919][ T5897] usb 4-1: Manufacturer: syz [ 283.479227][ T5897] usb 4-1: SerialNumber: syz [ 283.558067][ T5897] usb 4-1: config 0 descriptor?? [ 283.575853][ T5897] ch341 4-1:0.0: ch341-uart converter detected [ 284.439183][ T8828] 9pnet_virtio: no channels available for device 127.0.0.1 [ 284.852758][ T29] audit: type=1400 audit(1733925766.871:1516): avc: denied { write } for pid=8797 comm="syz.3.801" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 284.875880][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.020171][ T29] audit: type=1400 audit(1733925766.871:1517): avc: denied { open } for pid=8797 comm="syz.3.801" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 285.054662][ T5897] usb 4-1: failed to send control message: -71 [ 285.061156][ T5897] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 285.078680][ T8838] FAULT_INJECTION: forcing a failure. [ 285.078680][ T8838] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 285.082831][ T29] audit: type=1400 audit(1733925766.901:1518): avc: denied { ioctl } for pid=8797 comm="syz.3.801" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 285.094451][ T5897] usb 4-1: USB disconnect, device number 30 [ 285.123752][ T29] audit: type=1400 audit(1733925766.901:1519): avc: denied { ioctl } for pid=8797 comm="syz.3.801" path="socket:[21138]" dev="sockfs" ino=21138 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 285.123793][ T29] audit: type=1400 audit(1733925767.081:1520): avc: denied { ioctl } for pid=8837 comm="syz.0.813" path="socket:[21159]" dev="sockfs" ino=21159 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 285.201255][ T5897] ch341 4-1:0.0: device disconnected [ 285.238070][ T8838] CPU: 0 UID: 0 PID: 8838 Comm: syz.4.812 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 285.248687][ T8838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 285.258740][ T8838] Call Trace: [ 285.262015][ T8838] [ 285.264940][ T8838] dump_stack_lvl+0x16c/0x1f0 [ 285.269607][ T8838] should_fail_ex+0x497/0x5b0 [ 285.274270][ T8838] ? fs_reclaim_acquire+0xae/0x150 [ 285.279378][ T8838] should_fail_alloc_page+0xe7/0x130 [ 285.280720][ T8840] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 285.284646][ T8838] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 285.299663][ T8838] __alloc_pages_noprof+0x190/0x25b0 [ 285.304957][ T8838] ? __pfx_mark_lock+0x10/0x10 [ 285.309726][ T8838] ? __pfx___lock_acquire+0x10/0x10 [ 285.314925][ T8838] ? hlock_class+0x4e/0x130 [ 285.319428][ T8838] ? mark_lock+0xb5/0xc60 [ 285.323750][ T8838] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 285.329463][ T8838] ? hlock_class+0x4e/0x130 [ 285.333975][ T8838] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 285.339873][ T8838] ? policy_nodemask+0xea/0x4e0 [ 285.344719][ T8838] alloc_pages_mpol_noprof+0x2c9/0x610 [ 285.350181][ T8838] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 285.356162][ T8838] ? find_held_lock+0x2d/0x110 [ 285.360931][ T8838] __pmd_alloc+0x3f/0x860 [ 285.365257][ T8838] __handle_mm_fault+0x94a/0x2a40 [ 285.370281][ T8838] ? __pfx___handle_mm_fault+0x10/0x10 [ 285.375731][ T8838] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 285.381369][ T8838] ? find_vma+0xc0/0x140 [ 285.385611][ T8838] ? __pfx_find_vma+0x10/0x10 [ 285.390286][ T8838] ? hlock_class+0x4e/0x130 [ 285.394787][ T8838] handle_mm_fault+0x3fa/0xaa0 [ 285.399547][ T8838] do_user_addr_fault+0x7a3/0x13f0 [ 285.404655][ T8838] exc_page_fault+0x5c/0xc0 [ 285.409327][ T8838] asm_exc_page_fault+0x26/0x30 [ 285.414170][ T8838] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 285.419976][ T8838] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 285.439578][ T8838] RSP: 0018:ffffc9000ed77dd0 EFLAGS: 00050212 [ 285.445640][ T8838] RAX: 0000000067599b87 RBX: 0000000000000010 RCX: 0000000000000010 [ 285.453600][ T8838] RDX: fffff52001daefc8 RSI: ffffc9000ed77e30 RDI: 0000000020000100 [ 285.461563][ T8838] RBP: 0000000020000100 R08: 0000000000000000 R09: fffff52001daefc7 [ 285.469523][ T8838] R10: ffffc9000ed77e3f R11: 0000000000000000 R12: ffffc9000ed77e30 [ 285.477488][ T8838] R13: 0000000020000110 R14: 00007ffffffff000 R15: 0000000000000000 [ 285.485460][ T8838] _copy_to_user+0xbb/0xd0 [ 285.489886][ T8838] put_timespec64+0xb6/0x120 [ 285.494467][ T8838] ? __pfx_put_timespec64+0x10/0x10 [ 285.499665][ T8838] __x64_sys_clock_gettime+0x1d5/0x270 [ 285.505119][ T8838] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 285.511111][ T8838] do_syscall_64+0xcd/0x250 [ 285.515620][ T8838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.521514][ T8838] RIP: 0033:0x7f4b66f7ff19 [ 285.525932][ T8838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.545534][ T8838] RSP: 002b:00007f4b67e57058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 285.553940][ T8838] RAX: ffffffffffffffda RBX: 00007f4b67145fa0 RCX: 00007f4b66f7ff19 [ 285.561905][ T8838] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000000 [ 285.569866][ T8838] RBP: 00007f4b67e570a0 R08: 0000000000000000 R09: 0000000000000000 [ 285.577829][ T8838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.585794][ T8838] R13: 0000000000000000 R14: 00007f4b67145fa0 R15: 00007ffec814ce58 [ 285.593772][ T8838] [ 285.597764][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.597963][ T5899] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 285.921929][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 285.949808][ T5899] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 285.959209][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.990469][ T5899] usb 2-1: config 0 descriptor?? [ 286.001770][ T5899] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 286.510361][ T5899] gspca_nw80x: reg_w err -110 [ 286.515240][ T5899] nw80x 2-1:0.0: probe with driver nw80x failed with error -110 [ 286.613866][ T8854] netlink: 124 bytes leftover after parsing attributes in process `syz.4.818'. [ 286.980588][ T29] audit: type=1326 audit(1733925768.991:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8870 comm="syz.4.823" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b66f7ff19 code=0x0 [ 288.272875][ T5899] usb 2-1: USB disconnect, device number 33 [ 288.690956][ T8896] FAULT_INJECTION: forcing a failure. [ 288.690956][ T8896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.720242][ T8896] CPU: 1 UID: 0 PID: 8896 Comm: syz.1.831 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 288.730864][ T8896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 288.740932][ T8896] Call Trace: [ 288.744221][ T8896] [ 288.747163][ T8896] dump_stack_lvl+0x16c/0x1f0 [ 288.751860][ T8896] should_fail_ex+0x497/0x5b0 [ 288.756562][ T8896] _copy_from_user+0x2e/0xd0 [ 288.761176][ T8896] ____sys_sendmsg+0x590/0xc90 [ 288.765959][ T8896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.771258][ T8896] ? __lock_acquire+0xcc5/0x3c40 [ 288.776226][ T8896] ___sys_sendmsg+0x135/0x1e0 [ 288.780927][ T8896] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.786154][ T8896] ? trace_lock_acquire+0x14e/0x1f0 [ 288.791387][ T8896] __sys_sendmmsg+0x201/0x420 [ 288.796083][ T8896] ? __pfx___sys_sendmmsg+0x10/0x10 [ 288.801315][ T8896] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 288.807316][ T8896] ? fput+0x67/0x440 [ 288.811223][ T8896] ? ksys_write+0x1ba/0x250 [ 288.815737][ T8896] ? __pfx_ksys_write+0x10/0x10 [ 288.820600][ T8896] __x64_sys_sendmmsg+0x9c/0x100 [ 288.825544][ T8896] ? lockdep_hardirqs_on+0x7c/0x110 [ 288.830725][ T8896] do_syscall_64+0xcd/0x250 [ 288.835216][ T8896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.841093][ T8896] RIP: 0033:0x7fdfd417ff19 [ 288.845487][ T8896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.865086][ T8896] RSP: 002b:00007fdfd4f9e058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 288.873496][ T8896] RAX: ffffffffffffffda RBX: 00007fdfd4345fa0 RCX: 00007fdfd417ff19 [ 288.881474][ T8896] RDX: 0000000000000001 RSI: 00000000200017c0 RDI: 0000000000000003 [ 288.889458][ T8896] RBP: 00007fdfd4f9e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 288.897415][ T8896] R10: 0000000004040880 R11: 0000000000000246 R12: 0000000000000001 [ 288.905375][ T8896] R13: 0000000000000000 R14: 00007fdfd4345fa0 R15: 00007ffd907b96b8 [ 288.913357][ T8896] [ 289.305116][ T5899] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 289.551142][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 289.566550][ T8918] FAULT_INJECTION: forcing a failure. [ 289.566550][ T8918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.569729][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.591383][ T8918] CPU: 0 UID: 0 PID: 8918 Comm: syz.4.840 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 289.601404][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.601970][ T8918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 289.601985][ T8918] Call Trace: [ 289.601992][ T8918] [ 289.602001][ T8918] dump_stack_lvl+0x16c/0x1f0 [ 289.617884][ T5899] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 289.621710][ T8918] should_fail_ex+0x497/0x5b0 [ 289.621745][ T8918] _copy_from_iter+0x2a1/0x1560 [ 289.651108][ T8918] ? trace_lock_acquire+0x14e/0x1f0 [ 289.651143][ T8918] ? __pfx__copy_from_iter+0x10/0x10 [ 289.651168][ T8918] ? __virt_addr_valid+0x1a4/0x590 [ 289.651195][ T8918] ? __virt_addr_valid+0x5e/0x590 [ 289.651220][ T8918] ? __phys_addr+0xc6/0x150 [ 289.651244][ T8918] ? __phys_addr_symbol+0x30/0x80 [ 289.651268][ T8918] ? __check_object_size+0x488/0x710 [ 289.651295][ T8918] netlink_sendmsg+0x813/0xd70 [ 289.651325][ T8918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.651357][ T8918] sock_write_iter+0x4fe/0x5b0 [ 289.651381][ T8918] ? __pfx_sock_write_iter+0x10/0x10 [ 289.651411][ T8918] ? bpf_lsm_file_permission+0x9/0x10 [ 289.651435][ T8918] ? security_file_permission+0x71/0x210 [ 289.651463][ T8918] vfs_write+0x5ae/0x1150 [ 289.651481][ T8918] ? __pfx_sock_write_iter+0x10/0x10 [ 289.651504][ T8918] ? __pfx_vfs_write+0x10/0x10 [ 289.651522][ T8918] ? __fget_files+0x40/0x3a0 [ 289.651551][ T8918] ksys_write+0x207/0x250 [ 289.651568][ T8918] ? __pfx_ksys_write+0x10/0x10 [ 289.651591][ T8918] do_syscall_64+0xcd/0x250 [ 289.651615][ T8918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.651636][ T8918] RIP: 0033:0x7f4b66f7ff19 [ 289.651651][ T8918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.651668][ T8918] RSP: 002b:00007f4b67e57058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 289.651686][ T8918] RAX: ffffffffffffffda RBX: 00007f4b67145fa0 RCX: 00007f4b66f7ff19 [ 289.651699][ T8918] RDX: 000000000000fe33 RSI: 0000000020000240 RDI: 0000000000000003 [ 289.651711][ T8918] RBP: 00007f4b67e570a0 R08: 0000000000000000 R09: 0000000000000000 [ 289.651722][ T8918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.651734][ T8918] R13: 0000000000000000 R14: 00007f4b67145fa0 R15: 00007ffec814ce58 [ 289.651756][ T8918] [ 289.681034][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.682688][ T5899] usb 2-1: config 0 descriptor?? [ 290.533120][ T29] audit: type=1326 audit(1733925772.531:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b66f7ff19 code=0x7ffc0000 [ 290.614032][ T29] audit: type=1326 audit(1733925772.531:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b66f7ff19 code=0x7ffc0000 [ 290.689408][ T5899] usbhid 2-1:0.0: can't add hid device: -71 [ 290.716213][ T5899] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 290.736785][ T29] audit: type=1326 audit(1733925772.531:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b66f7ff19 code=0x7ffc0000 [ 290.790244][ T5899] usb 2-1: USB disconnect, device number 34 [ 290.805909][ T8938] geneve2: entered promiscuous mode [ 290.827820][ T8938] geneve2: entered allmulticast mode [ 290.928247][ T29] audit: type=1326 audit(1733925772.531:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b66f7ff19 code=0x7ffc0000 [ 290.952234][ T29] audit: type=1326 audit(1733925772.531:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b66f7ff19 code=0x7ffc0000 [ 290.975623][ T29] audit: type=1326 audit(1733925772.531:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b66f7ff19 code=0x7ffc0000 [ 290.999918][ T29] audit: type=1326 audit(1733925772.531:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b66f7ff19 code=0x7ffc0000 [ 291.025070][ T29] audit: type=1326 audit(1733925772.541:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4b66f7ff19 code=0x7ffc0000 [ 291.053093][ T29] audit: type=1326 audit(1733925772.541:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b66f7ff19 code=0x7ffc0000 [ 291.077051][ T29] audit: type=1326 audit(1733925772.541:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b66f7ff19 code=0x7ffc0000 [ 291.189642][ T8950] ax25_connect(): syz.1.846 uses autobind, please contact jreuter@yaina.de [ 291.706630][ T8949] 9pnet_virtio: no channels available for device 127.0.0.1 [ 291.864883][ T8954] FAULT_INJECTION: forcing a failure. [ 291.864883][ T8954] name failslab, interval 1, probability 0, space 0, times 0 [ 291.882341][ T8954] CPU: 1 UID: 0 PID: 8954 Comm: syz.1.848 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 291.892951][ T8954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 291.903009][ T8954] Call Trace: [ 291.906295][ T8954] [ 291.909233][ T8954] dump_stack_lvl+0x16c/0x1f0 [ 291.913924][ T8954] should_fail_ex+0x497/0x5b0 [ 291.918614][ T8954] ? fs_reclaim_acquire+0xae/0x150 [ 291.923735][ T8954] should_failslab+0xc2/0x120 [ 291.928395][ T8954] __kmalloc_node_noprof+0xd1/0x510 [ 291.933576][ T8954] ? __vmalloc_node_range_noprof+0x3d8/0x1530 [ 291.939622][ T8954] __vmalloc_node_range_noprof+0x3d8/0x1530 [ 291.945499][ T8954] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 291.951045][ T8954] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 291.957353][ T8954] ? __pfx___lock_acquire+0x10/0x10 [ 291.962528][ T8954] ? __schedule+0xe60/0x5ad0 [ 291.967107][ T8954] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 291.972633][ T8954] __vmalloc_noprof+0x6d/0x90 [ 291.977288][ T8954] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 291.982811][ T8954] bpf_prog_alloc_no_stats+0x54/0x620 [ 291.988161][ T8954] ? security_capable+0x7e/0x260 [ 291.993086][ T8954] bpf_prog_alloc+0x3b/0x230 [ 291.997654][ T8954] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 292.003529][ T8954] bpf_prog_load+0x1b3f/0x2660 [ 292.008282][ T8954] ? __pfx_bpf_prog_load+0x10/0x10 [ 292.013376][ T8954] ? avc_has_perm_noaudit+0x143/0x3a0 [ 292.018739][ T8954] ? selinux_bpf+0xde/0x130 [ 292.023241][ T8954] __sys_bpf+0x4043/0x49c0 [ 292.027679][ T8954] ? __pfx___sys_bpf+0x10/0x10 [ 292.032446][ T8954] ? lockdep_hardirqs_on+0x7c/0x110 [ 292.037629][ T8954] ? __schedule+0x3d6c/0x5ad0 [ 292.042288][ T8954] ? __pfx___schedule+0x10/0x10 [ 292.047134][ T8954] __x64_sys_bpf+0x78/0xc0 [ 292.051538][ T8954] ? lockdep_hardirqs_on+0x7c/0x110 [ 292.056727][ T8954] do_syscall_64+0xcd/0x250 [ 292.061225][ T8954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.067111][ T8954] RIP: 0033:0x7fdfd417ff19 [ 292.071507][ T8954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.091097][ T8954] RSP: 002b:00007fdfd4f9e058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.099494][ T8954] RAX: ffffffffffffffda RBX: 00007fdfd4345fa0 RCX: 00007fdfd417ff19 [ 292.107446][ T8954] RDX: 0000000000000094 RSI: 0000000020000500 RDI: 0000000000000005 [ 292.115401][ T8954] RBP: 00007fdfd4f9e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 292.123352][ T8954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.131304][ T8954] R13: 0000000000000001 R14: 00007fdfd4345fa0 R15: 00007ffd907b96b8 [ 292.139331][ T8954] [ 292.203820][ T8954] syz.1.848: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 292.227414][ T8954] CPU: 1 UID: 0 PID: 8954 Comm: syz.1.848 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 292.238026][ T8954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 292.248090][ T8954] Call Trace: [ 292.251376][ T8954] [ 292.254314][ T8954] dump_stack_lvl+0x16c/0x1f0 [ 292.259007][ T8954] warn_alloc+0x24d/0x3a0 [ 292.263349][ T8954] ? __pfx_warn_alloc+0x10/0x10 [ 292.268200][ T8954] ? dump_stack_lvl+0x1a1/0x1f0 [ 292.273038][ T8954] ? rcu_is_watching+0x12/0xc0 [ 292.277786][ T8954] ? trace_kmalloc+0x2d/0xd0 [ 292.282361][ T8954] ? __kmalloc_node_noprof+0x23d/0x510 [ 292.287805][ T8954] __vmalloc_node_range_noprof+0x1105/0x1530 [ 292.293769][ T8954] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 292.299296][ T8954] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 292.305690][ T8954] ? __pfx___lock_acquire+0x10/0x10 [ 292.310866][ T8954] ? __schedule+0xe60/0x5ad0 [ 292.315438][ T8954] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 292.320969][ T8954] __vmalloc_noprof+0x6d/0x90 [ 292.325624][ T8954] ? bpf_prog_alloc_no_stats+0x54/0x620 [ 292.331147][ T8954] bpf_prog_alloc_no_stats+0x54/0x620 [ 292.336495][ T8954] ? security_capable+0x7e/0x260 [ 292.341420][ T8954] bpf_prog_alloc+0x3b/0x230 [ 292.345985][ T8954] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 292.351863][ T8954] bpf_prog_load+0x1b3f/0x2660 [ 292.356612][ T8954] ? __pfx_bpf_prog_load+0x10/0x10 [ 292.361703][ T8954] ? avc_has_perm_noaudit+0x143/0x3a0 [ 292.367066][ T8954] ? selinux_bpf+0xde/0x130 [ 292.371553][ T8954] __sys_bpf+0x4043/0x49c0 [ 292.375952][ T8954] ? __pfx___sys_bpf+0x10/0x10 [ 292.380696][ T8954] ? lockdep_hardirqs_on+0x7c/0x110 [ 292.385874][ T8954] ? __schedule+0x3d6c/0x5ad0 [ 292.390528][ T8954] ? __pfx___schedule+0x10/0x10 [ 292.395370][ T8954] __x64_sys_bpf+0x78/0xc0 [ 292.399768][ T8954] ? lockdep_hardirqs_on+0x7c/0x110 [ 292.404942][ T8954] do_syscall_64+0xcd/0x250 [ 292.409427][ T8954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.415299][ T8954] RIP: 0033:0x7fdfd417ff19 [ 292.419694][ T8954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.439282][ T8954] RSP: 002b:00007fdfd4f9e058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.447670][ T8954] RAX: ffffffffffffffda RBX: 00007fdfd4345fa0 RCX: 00007fdfd417ff19 [ 292.455616][ T8954] RDX: 0000000000000094 RSI: 0000000020000500 RDI: 0000000000000005 [ 292.463562][ T8954] RBP: 00007fdfd4f9e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 292.471506][ T8954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.479453][ T8954] R13: 0000000000000001 R14: 00007fdfd4345fa0 R15: 00007ffd907b96b8 [ 292.487410][ T8954] [ 292.496797][ T8954] Mem-Info: [ 292.501419][ T8954] active_anon:9387 inactive_anon:2 isolated_anon:0 [ 292.501419][ T8954] active_file:15649 inactive_file:38557 isolated_file:0 [ 292.501419][ T8954] unevictable:768 dirty:252 writeback:0 [ 292.501419][ T8954] slab_reclaimable:11434 slab_unreclaimable:99226 [ 292.501419][ T8954] mapped:36435 shmem:7183 pagetables:717 [ 292.501419][ T8954] sec_pagetables:0 bounce:0 [ 292.501419][ T8954] kernel_misc_reclaimable:0 [ 292.501419][ T8954] free:1313105 free_pcp:3778 free_cma:0 [ 292.547739][ T8954] Node 0 active_anon:37448kB inactive_anon:8kB active_file:57900kB inactive_file:154152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141340kB dirty:1004kB writeback:0kB shmem:27196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10792kB pagetables:2768kB sec_pagetables:0kB all_unreclaimable? no [ 292.580713][ T8954] Node 1 active_anon:0kB inactive_anon:0kB active_file:4696kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 292.619425][ T8954] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 292.647479][ T8954] lowmem_reserve[]: 0 2459 2459 0 0 [ 292.658136][ T8954] Node 0 DMA32 free:1355276kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:30148kB inactive_anon:8kB active_file:57900kB inactive_file:154060kB unevictable:1536kB writepending:1004kB present:3129332kB managed:2547148kB mlocked:0kB bounce:0kB free_pcp:1116kB local_pcp:1024kB free_cma:0kB [ 292.696213][ T8954] lowmem_reserve[]: 0 0 0 0 0 [ 292.702389][ T8954] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 292.742268][ T8954] lowmem_reserve[]: 0 0 0 0 0 [ 292.747423][ T8954] Node 1 Normal free:3894072kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4696kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:9492kB local_pcp:0kB free_cma:0kB [ 292.786698][ T8954] lowmem_reserve[]: 0 0 0 0 0 [ 292.791869][ T8954] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 292.828254][ T8954] Node 0 DMA32: 213*4kB (UME) 87*8kB (UME) 235*16kB (UME) 105*32kB (UME) 194*64kB (UME) 40*128kB (UM) 33*256kB (UM) 24*512kB (UM) 18*1024kB (UM) 6*2048kB (ME) 312*4096kB (UM) = 1355612kB [ 292.848706][ T8954] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 292.860736][ T8954] Node 1 Normal: 37*4kB (UM) 102*8kB (UME) 65*16kB (UME) 219*32kB (UME) 120*64kB (UME) 38*128kB (UME) 24*256kB (UME) 12*512kB (UM) 10*1024kB (UME) 8*2048kB (UME) 936*4096kB (M) = 3894324kB [ 292.880599][ T8954] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.890338][ T8954] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 292.900147][ T8954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.909824][ T8954] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 292.926591][ T8954] 58523 total pagecache pages [ 292.932071][ T8954] 2 pages in swap cache [ 292.936226][ T8954] Free swap = 124292kB [ 292.940425][ T8954] Total swap = 124996kB [ 292.958459][ T8954] 2097051 pages RAM [ 292.985146][ T8954] 0 pages HighMem/MovableOnly [ 293.005402][ T8954] 428606 pages reserved [ 293.009720][ T8954] 0 pages cma reserved [ 293.470117][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 293.651740][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 294.068279][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 294.180154][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.188558][ T9] usb 5-1: Product: syz [ 294.195050][ T9] usb 5-1: Manufacturer: syz [ 294.199854][ T9] usb 5-1: SerialNumber: syz [ 294.290601][ T9] usb 5-1: config 0 descriptor?? [ 294.770222][ T5897] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 294.779541][ T9016] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 294.930213][ T5897] usb 4-1: device descriptor read/64, error -71 [ 294.960120][ T9021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.869'. [ 295.132528][ T9] usb write operation failed. (-71) [ 295.137848][ T9] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 295.147087][ T9] usb 5-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 295.168766][ T9] usb 5-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 295.180390][ T5897] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 295.338318][ T5897] usb 4-1: device descriptor read/64, error -71 [ 295.470489][ T5897] usb usb4-port1: attempt power cycle [ 295.810113][ T5897] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 295.833461][ T5897] usb 4-1: device descriptor read/8, error -71 [ 295.925870][ T9038] 9pnet_virtio: no channels available for device 127.0.0.1 [ 295.982470][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 295.982487][ T29] audit: type=1400 audit(1733925777.991:1539): avc: denied { connect } for pid=9039 comm="syz.4.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 296.015126][ T29] audit: type=1400 audit(1733925777.991:1540): avc: denied { read } for pid=9039 comm="syz.4.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 296.070200][ T5897] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 296.111064][ T5897] usb 4-1: device descriptor read/8, error -71 [ 296.156465][ T29] audit: type=1400 audit(1733925778.171:1541): avc: denied { getopt } for pid=9041 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 296.190077][ T29] audit: type=1400 audit(1733925778.191:1542): avc: denied { setopt } for pid=9041 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 296.220834][ T5897] usb usb4-port1: unable to enumerate USB device [ 296.942888][ T9062] mkiss: ax0: crc mode is auto. [ 297.096989][ T9073] netlink: 'syz.2.883': attribute type 4 has an invalid length. [ 297.108701][ T9074] netlink: 'syz.0.884': attribute type 4 has an invalid length. [ 297.242368][ T9077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.883'. [ 297.265697][ T9078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.884'. [ 298.000179][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 298.006613][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 298.380456][ T5897] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 298.583799][ T5897] usb 4-1: device descriptor read/64, error -71 [ 298.645377][ T29] audit: type=1400 audit(1733925780.661:1543): avc: denied { name_bind } for pid=9097 comm="syz.4.892" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 298.790218][ T9099] mmap: syz.4.893 (9099): VmData 37597184 exceed data ulimit 11. Update limits or use boot option ignore_rlimit_data. [ 298.860170][ T5897] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 299.001664][ T5897] usb 4-1: device descriptor read/64, error -71 [ 299.029142][ T29] audit: type=1400 audit(1733925781.041:1544): avc: denied { ioctl } for pid=9106 comm="syz.0.896" path="socket:[23766]" dev="sockfs" ino=23766 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 299.110342][ T5897] usb usb4-port1: attempt power cycle [ 299.171221][ T9113] netlink: 'syz.0.898': attribute type 4 has an invalid length. [ 299.195736][ T9114] 9pnet_virtio: no channels available for device 127.0.0.1 [ 299.590637][ T5897] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 299.661268][ T5897] usb 4-1: device descriptor read/8, error -71 [ 299.669552][ T9117] netlink: 20 bytes leftover after parsing attributes in process `syz.0.898'. [ 299.940131][ T5897] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 299.980935][ T5897] usb 4-1: device descriptor read/8, error -71 [ 300.101500][ T5897] usb usb4-port1: unable to enumerate USB device [ 300.497849][ T9123] netlink: 40 bytes leftover after parsing attributes in process `syz.2.899'. [ 300.617771][ T29] audit: type=1400 audit(1733925782.631:1545): avc: denied { block_suspend } for pid=9121 comm="syz.2.899" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 300.670668][ T29] audit: type=1400 audit(1733925782.681:1546): avc: denied { create } for pid=9131 comm="syz.0.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 301.188175][ T29] audit: type=1400 audit(1733925783.201:1547): avc: denied { read } for pid=9131 comm="syz.0.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 301.196167][ T9143] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.231785][ T9145] FAULT_INJECTION: forcing a failure. [ 301.231785][ T9145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.245342][ T9145] CPU: 1 UID: 0 PID: 9145 Comm: syz.3.907 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 301.255949][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 301.266010][ T9145] Call Trace: [ 301.269291][ T9145] [ 301.272227][ T9145] dump_stack_lvl+0x16c/0x1f0 [ 301.276920][ T9145] should_fail_ex+0x497/0x5b0 [ 301.281617][ T9145] _copy_from_user+0x2e/0xd0 [ 301.286222][ T9145] kstrtouint_from_user+0xd7/0x1c0 [ 301.291343][ T9145] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 301.297080][ T9145] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 301.302722][ T9145] proc_fail_nth_write+0x84/0x250 [ 301.307755][ T9145] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 301.313386][ T9145] ? ksys_write+0x12b/0x250 [ 301.317887][ T9145] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 301.323518][ T9145] vfs_write+0x24c/0x1150 [ 301.327843][ T9145] ? __fget_files+0x1fc/0x3a0 [ 301.332513][ T9145] ? __pfx___mutex_lock+0x10/0x10 [ 301.337533][ T9145] ? __pfx_vfs_write+0x10/0x10 [ 301.342296][ T9145] ? __fget_files+0x206/0x3a0 [ 301.346972][ T9145] ksys_write+0x12b/0x250 [ 301.351291][ T9145] ? __pfx_ksys_write+0x10/0x10 [ 301.356140][ T9145] do_syscall_64+0xcd/0x250 [ 301.360640][ T9145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.366528][ T9145] RIP: 0033:0x7f74d7b7e9cf [ 301.370933][ T9145] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 301.390531][ T9145] RSP: 002b:00007f74d89f2050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 301.398934][ T9145] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f74d7b7e9cf [ 301.406895][ T9145] RDX: 0000000000000001 RSI: 00007f74d89f20b0 RDI: 0000000000000004 [ 301.414857][ T9145] RBP: 00007f74d89f20a0 R08: 0000000000000000 R09: 0000000000000000 [ 301.422815][ T9145] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 301.430778][ T9145] R13: 0000000000000000 R14: 00007f74d7d45fa0 R15: 00007ffe602de0e8 [ 301.438753][ T9145] [ 301.493870][ T29] audit: type=1400 audit(1733925783.511:1548): avc: denied { append } for pid=9149 comm="syz.3.909" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 301.520096][ T5897] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 302.205745][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 302.216123][ T5897] usb 2-1: config 1 has an invalid descriptor of length 187, skipping remainder of the config [ 302.226432][ T5897] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 302.235401][ T5897] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 302.251448][ T5897] usb 2-1: config 1 interface 1 has no altsetting 0 [ 302.259784][ T5897] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.300098][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.339694][ T5897] usb 2-1: Product: У [ 302.350067][ T5897] usb 2-1: Manufacturer: ࠚ [ 302.354691][ T5897] usb 2-1: SerialNumber:  [ 302.712624][ T9156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.910'. [ 302.967649][ T9156] hsr_slave_1 (unregistering): left promiscuous mode [ 304.724532][ T9177] batadv0: entered promiscuous mode [ 304.941146][ T9179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.965760][ T29] audit: type=1400 audit(1733925786.981:1549): avc: denied { connect } for pid=9180 comm="syz.3.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 305.057279][ T29] audit: type=1400 audit(1733925787.071:1550): avc: denied { execute_no_trans } for pid=9185 comm="syz.3.919" path="/174/file0" dev="tmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 305.159282][ T9190] 9pnet_virtio: no channels available for device 127.0.0.1 [ 305.436707][ T5897] usb 2-1: 0:2 : does not exist [ 305.498854][ T5897] usb 2-1: USB disconnect, device number 35 [ 305.857245][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035d9a400: rx timeout, send abort [ 305.867456][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035d9a400: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 305.960092][ T5897] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 306.323904][ T9212] dvmrp5: entered allmulticast mode [ 306.671748][ T825] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 306.822913][ T5897] usb 2-1: No LPM exit latency info found, disabling LPM. [ 307.001632][ T9224] xt_CT: You must specify a L4 protocol and not use inversions on it [ 307.070489][ T5897] usb 2-1: config 1 interface 0 altsetting 215 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 307.073749][ T825] usb 3-1: Using ep0 maxpacket: 32 [ 307.081478][ T5897] usb 2-1: config 1 interface 0 altsetting 215 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 307.081556][ T5897] usb 2-1: config 1 interface 0 has no altsetting 0 [ 307.380900][ T825] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 307.403143][ T825] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 307.418387][ T825] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 307.437118][ T825] usb 3-1: Product: syz [ 307.448163][ T825] usb 3-1: Manufacturer: syz [ 307.448218][ T5897] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.40 [ 307.453837][ T825] usb 3-1: SerialNumber: syz [ 307.462031][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.468142][ T825] usb 3-1: config 0 descriptor?? [ 307.490377][ T5897] usb 2-1: Product: ј [ 307.494515][ T5897] usb 2-1: Manufacturer:  [ 307.499322][ T5897] usb 2-1: SerialNumber: й [ 307.517779][ T9197] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 307.523874][ T9218] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 307.525084][ T9197] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 307.559613][ T9219] libceph: resolve '0.0' (ret=-3): failed [ 308.136082][ T825] usb 3-1: USB disconnect, device number 21 [ 308.299111][ T5897] usbhid 2-1:1.0: can't add hid device: -71 [ 308.305986][ T5897] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 308.325673][ T5897] usb 2-1: USB disconnect, device number 36 [ 308.630478][ T825] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 308.790641][ T825] usb 3-1: Using ep0 maxpacket: 32 [ 308.795705][ T9251] : renamed from bond0 (while UP) [ 308.796175][ T29] audit: type=1400 audit(1733925790.811:1551): avc: denied { ioctl } for pid=9246 comm="syz.4.937" path="socket:[23985]" dev="sockfs" ino=23985 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 309.131260][ T825] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 309.151713][ T825] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 309.161601][ T825] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 309.170090][ T825] usb 3-1: Product: syz [ 309.175291][ T825] usb 3-1: Manufacturer: syz [ 309.180641][ T825] usb 3-1: SerialNumber: syz [ 309.187261][ T825] usb 3-1: config 0 descriptor?? [ 309.236756][ T9218] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 309.478369][ T9264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.939'. [ 309.493456][ T9264] sch_fq: defrate 2 ignored. [ 310.458439][ T5899] usb 3-1: USB disconnect, device number 22 [ 310.680697][ T9279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.943'. [ 310.938433][ T9281] FAULT_INJECTION: forcing a failure. [ 310.938433][ T9281] name failslab, interval 1, probability 0, space 0, times 0 [ 310.988156][ T9281] CPU: 0 UID: 0 PID: 9281 Comm: syz.3.945 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 310.998776][ T9281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 311.008844][ T9281] Call Trace: [ 311.012127][ T9281] [ 311.015061][ T9281] dump_stack_lvl+0x16c/0x1f0 [ 311.019753][ T9281] should_fail_ex+0x497/0x5b0 [ 311.024450][ T9281] ? fs_reclaim_acquire+0xae/0x150 [ 311.029581][ T9281] should_failslab+0xc2/0x120 [ 311.034270][ T9281] __kmalloc_node_noprof+0xd1/0x510 [ 311.039478][ T9281] ? lock_acquire+0x2f/0xb0 [ 311.043993][ T9281] ? __might_fault+0xe3/0x190 [ 311.048681][ T9281] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 311.054147][ T9281] ? __might_fault+0xe3/0x190 [ 311.058836][ T9281] __kvmalloc_node_noprof+0xad/0x1a0 [ 311.064125][ T9281] xt_alloc_table_info+0x3e/0xa0 [ 311.069059][ T9281] do_ip6t_set_ctl+0x59d/0xc40 [ 311.073813][ T9281] ? __mutex_lock+0x1cc/0xa60 [ 311.078486][ T9281] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 311.083762][ T9281] ? __mutex_unlock_slowpath+0x164/0x690 [ 311.089392][ T9281] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 311.095378][ T9281] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 311.101358][ T9281] nf_setsockopt+0x8a/0xf0 [ 311.105767][ T9281] ipv6_setsockopt+0x135/0x170 [ 311.110522][ T9281] udpv6_setsockopt+0x7d/0xd0 [ 311.115193][ T9281] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 311.121077][ T9281] do_sock_setsockopt+0x222/0x480 [ 311.126093][ T9281] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 311.131630][ T9281] ? lock_acquire+0x2f/0xb0 [ 311.136138][ T9281] __sys_setsockopt+0x1a0/0x230 [ 311.140991][ T9281] __x64_sys_setsockopt+0xbd/0x160 [ 311.146096][ T9281] ? do_syscall_64+0x91/0x250 [ 311.150765][ T9281] ? lockdep_hardirqs_on+0x7c/0x110 [ 311.155958][ T9281] do_syscall_64+0xcd/0x250 [ 311.160456][ T9281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.166343][ T9281] RIP: 0033:0x7f74d7b7ff19 [ 311.170746][ T9281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.190340][ T9281] RSP: 002b:00007f74d89f2058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 311.198747][ T9281] RAX: ffffffffffffffda RBX: 00007f74d7d45fa0 RCX: 00007f74d7b7ff19 [ 311.206709][ T9281] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 311.214671][ T9281] RBP: 00007f74d89f20a0 R08: 0000000000000358 R09: 0000000000000000 [ 311.222632][ T9281] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 311.230591][ T9281] R13: 0000000000000000 R14: 00007f74d7d45fa0 R15: 00007ffe602de0e8 [ 311.238563][ T9281] [ 311.299598][ T9286] vivid-003: disconnect [ 311.675967][ T9286] vivid-003: reconnect [ 311.942530][ T9309] sp0: Synchronizing with TNC [ 311.952950][ T6574] [ 311.955266][ T6574] ===================================================== [ 311.962163][ T6574] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 311.969583][ T6574] 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 Not tainted [ 311.976659][ T6574] ----------------------------------------------------- [ 311.983556][ T6574] kworker/u8:14/6574 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 311.991416][ T6574] ffffffff8f334eb8 (disc_data_lock#3){.+.+}-{3:3}, at: sp_get+0x18/0xf0 [ 311.999739][ T6574] [ 311.999739][ T6574] and this task is already holding: [ 312.007070][ T6574] ffffffff9ab0b738 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 312.015732][ T6574] which would create a new lock dependency: [ 312.021588][ T6574] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#3){.+.+}-{3:3} [ 312.029394][ T6574] [ 312.029394][ T6574] but this new dependency connects a HARDIRQ-irq-safe lock: [ 312.038809][ T6574] (&port_lock_key){-.-.}-{3:3} [ 312.038824][ T6574] [ 312.038824][ T6574] ... which became HARDIRQ-irq-safe at: [ 312.051311][ T6574] lock_acquire.part.0+0x11b/0x380 [ 312.056483][ T6574] _raw_spin_lock_irqsave+0x3a/0x60 [ 312.061739][ T6574] serial8250_handle_irq+0x95/0xc80 [ 312.066995][ T6574] serial8250_default_handle_irq+0x9a/0x210 [ 312.072949][ T6574] serial8250_interrupt+0x103/0x210 [ 312.078207][ T6574] __handle_irq_event_percpu+0x229/0x7d0 [ 312.083899][ T6574] handle_irq_event+0xab/0x1e0 [ 312.088723][ T6574] handle_edge_irq+0x263/0xd10 [ 312.093548][ T6574] __common_interrupt+0xdf/0x250 [ 312.098548][ T6574] common_interrupt+0xba/0xe0 [ 312.103287][ T6574] asm_common_interrupt+0x26/0x40 [ 312.108370][ T6574] _raw_spin_unlock_irqrestore+0x31/0x80 [ 312.114071][ T6574] uart_write+0x2a4/0xb30 [ 312.118470][ T6574] n_tty_write+0x419/0x1140 [ 312.123042][ T6574] file_tty_write.constprop.0+0x506/0x9a0 [ 312.128831][ T6574] redirected_tty_write+0xcc/0x140 [ 312.134008][ T6574] vfs_write+0x5ae/0x1150 [ 312.138399][ T6574] ksys_write+0x12b/0x250 [ 312.142796][ T6574] do_syscall_64+0xcd/0x250 [ 312.147372][ T6574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.153354][ T6574] [ 312.153354][ T6574] to a HARDIRQ-irq-unsafe lock: [ 312.160344][ T6574] (disc_data_lock#3){.+.+}-{3:3} [ 312.160366][ T6574] [ 312.160366][ T6574] ... which became HARDIRQ-irq-unsafe at: [ 312.173206][ T6574] ... [ 312.173212][ T6574] lock_acquire.part.0+0x11b/0x380 [ 312.180947][ T6574] _raw_read_lock+0x5f/0x70 [ 312.185685][ T6574] sp_get+0x18/0xf0 [ 312.189553][ T6574] sixpack_receive_buf+0x59/0x1c80 [ 312.194726][ T6574] tty_ldisc_receive_buf+0x153/0x190 [ 312.200076][ T6574] tty_port_default_receive_buf+0x70/0xb0 [ 312.205852][ T6574] flush_to_ldisc+0x264/0x780 [ 312.210591][ T6574] process_one_work+0x9c5/0x1ba0 [ 312.215587][ T6574] worker_thread+0x6c8/0xf00 [ 312.220236][ T6574] kthread+0x2c1/0x3a0 [ 312.224374][ T6574] ret_from_fork+0x45/0x80 [ 312.228850][ T6574] ret_from_fork_asm+0x1a/0x30 [ 312.233681][ T6574] [ 312.233681][ T6574] other info that might help us debug this: [ 312.233681][ T6574] [ 312.243878][ T6574] Possible interrupt unsafe locking scenario: [ 312.243878][ T6574] [ 312.252165][ T6574] CPU0 CPU1 [ 312.257508][ T6574] ---- ---- [ 312.262841][ T6574] lock(disc_data_lock#3); [ 312.267337][ T6574] local_irq_disable(); [ 312.274084][ T6574] lock(&port_lock_key); [ 312.280911][ T6574] lock(disc_data_lock#3); [ 312.287913][ T6574] [ 312.291341][ T6574] lock(&port_lock_key); [ 312.295822][ T6574] [ 312.295822][ T6574] *** DEADLOCK *** [ 312.295822][ T6574] [ 312.303935][ T6574] 6 locks held by kworker/u8:14/6574: [ 312.309273][ T6574] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 312.320377][ T6574] #1: ffffc9001bf7fd80 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 312.331399][ T6574] #2: ffff888025808ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x31/0x780 [ 312.340444][ T6574] #3: ffff8880248230a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 312.349743][ T6574] #4: ffffffff9ab0b738 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 312.358856][ T6574] #5: ffff8880248230a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 312.368135][ T6574] [ 312.368135][ T6574] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 312.378774][ T6574] -> (&port_lock_key){-.-.}-{3:3} { [ 312.383972][ T6574] IN-HARDIRQ-W at: [ 312.387923][ T6574] lock_acquire.part.0+0x11b/0x380 [ 312.394660][ T6574] _raw_spin_lock_irqsave+0x3a/0x60 [ 312.401494][ T6574] serial8250_handle_irq+0x95/0xc80 [ 312.408320][ T6574] serial8250_default_handle_irq+0x9a/0x210 [ 312.415837][ T6574] serial8250_interrupt+0x103/0x210 [ 312.422662][ T6574] __handle_irq_event_percpu+0x229/0x7d0 [ 312.429937][ T6574] handle_irq_event+0xab/0x1e0 [ 312.436347][ T6574] handle_edge_irq+0x263/0xd10 [ 312.442751][ T6574] __common_interrupt+0xdf/0x250 [ 312.449347][ T6574] common_interrupt+0xba/0xe0 [ 312.455654][ T6574] asm_common_interrupt+0x26/0x40 [ 312.462306][ T6574] _raw_spin_unlock_irqrestore+0x31/0x80 [ 312.469587][ T6574] uart_write+0x2a4/0xb30 [ 312.475540][ T6574] n_tty_write+0x419/0x1140 [ 312.481667][ T6574] file_tty_write.constprop.0+0x506/0x9a0 [ 312.489015][ T6574] redirected_tty_write+0xcc/0x140 [ 312.495754][ T6574] vfs_write+0x5ae/0x1150 [ 312.501706][ T6574] ksys_write+0x12b/0x250 [ 312.507657][ T6574] do_syscall_64+0xcd/0x250 [ 312.513786][ T6574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.521309][ T6574] IN-SOFTIRQ-W at: [ 312.525264][ T6574] lock_acquire.part.0+0x11b/0x380 [ 312.532015][ T6574] _raw_spin_lock_irqsave+0x3a/0x60 [ 312.538836][ T6574] serial8250_handle_irq+0x95/0xc80 [ 312.545673][ T6574] serial8250_default_handle_irq+0x9a/0x210 [ 312.553204][ T6574] serial8250_interrupt+0x103/0x210 [ 312.560037][ T6574] __handle_irq_event_percpu+0x229/0x7d0 [ 312.567322][ T6574] handle_irq_event+0xab/0x1e0 [ 312.573723][ T6574] handle_edge_irq+0x263/0xd10 [ 312.580124][ T6574] __common_interrupt+0xdf/0x250 [ 312.586695][ T6574] common_interrupt+0x61/0xe0 [ 312.593003][ T6574] asm_common_interrupt+0x26/0x40 [ 312.599656][ T6574] handle_softirqs+0x1da/0x8f0 [ 312.606048][ T6574] __irq_exit_rcu+0x109/0x170 [ 312.612448][ T6574] irq_exit_rcu+0x9/0x30 [ 312.618313][ T6574] common_interrupt+0xbf/0xe0 [ 312.624616][ T6574] asm_common_interrupt+0x26/0x40 [ 312.631957][ T6574] acpi_safe_halt+0x1a/0x20 [ 312.638259][ T6574] acpi_idle_enter+0xc5/0x160 [ 312.644567][ T6574] cpuidle_enter_state+0xaa/0x4f0 [ 312.651212][ T6574] cpuidle_enter+0x4e/0xa0 [ 312.657252][ T6574] do_idle+0x310/0x3f0 [ 312.662945][ T6574] cpu_startup_entry+0x4f/0x60 [ 312.669334][ T6574] start_secondary+0x222/0x2b0 [ 312.675740][ T6574] common_startup_64+0x13e/0x148 [ 312.682320][ T6574] INITIAL USE at: [ 312.686189][ T6574] lock_acquire.part.0+0x11b/0x380 [ 312.692962][ T6574] _raw_spin_lock_irqsave+0x3a/0x60 [ 312.699697][ T6574] serial8250_do_set_termios+0x307/0x16f0 [ 312.706953][ T6574] serial8250_set_termios+0x6e/0x80 [ 312.713699][ T6574] uart_set_options+0x31b/0x5f0 [ 312.720097][ T6574] serial8250_console_setup+0x18a/0x460 [ 312.727184][ T6574] univ8250_console_setup+0x1d4/0x2c0 [ 312.734100][ T6574] try_enable_preferred_console+0x2fd/0x530 [ 312.741549][ T6574] register_console+0x3ac/0x1170 [ 312.748051][ T6574] univ8250_console_init+0x5f/0x90 [ 312.754711][ T6574] console_init+0x154/0x690 [ 312.760760][ T6574] start_kernel+0x29a/0x4d0 [ 312.766808][ T6574] x86_64_start_reservations+0x18/0x30 [ 312.773808][ T6574] x86_64_start_kernel+0xb2/0xc0 [ 312.780287][ T6574] common_startup_64+0x13e/0x148 [ 312.786789][ T6574] } [ 312.789260][ T6574] ... key at: [] port_lock_key+0x0/0x40 [ 312.796874][ T6574] [ 312.796874][ T6574] the dependencies between the lock to be acquired [ 312.796880][ T6574] and HARDIRQ-irq-unsafe lock: [ 312.810340][ T6574] -> (disc_data_lock#3){.+.+}-{3:3} { [ 312.815700][ T6574] HARDIRQ-ON-R at: [ 312.819651][ T6574] lock_acquire.part.0+0x11b/0x380 [ 312.826387][ T6574] _raw_read_lock+0x5f/0x70 [ 312.832513][ T6574] sp_get+0x18/0xf0 [ 312.837945][ T6574] sixpack_receive_buf+0x59/0x1c80 [ 312.844682][ T6574] tty_ldisc_receive_buf+0x153/0x190 [ 312.851593][ T6574] tty_port_default_receive_buf+0x70/0xb0 [ 312.858933][ T6574] flush_to_ldisc+0x264/0x780 [ 312.865240][ T6574] process_one_work+0x9c5/0x1ba0 [ 312.871804][ T6574] worker_thread+0x6c8/0xf00 [ 312.878016][ T6574] kthread+0x2c1/0x3a0 [ 312.883711][ T6574] ret_from_fork+0x45/0x80 [ 312.889749][ T6574] ret_from_fork_asm+0x1a/0x30 [ 312.896139][ T6574] SOFTIRQ-ON-R at: [ 312.900090][ T6574] lock_acquire.part.0+0x11b/0x380 [ 312.906825][ T6574] _raw_read_lock+0x5f/0x70 [ 312.912949][ T6574] sp_get+0x18/0xf0 [ 312.918380][ T6574] sixpack_receive_buf+0x59/0x1c80 [ 312.925116][ T6574] tty_ldisc_receive_buf+0x153/0x190 [ 312.932029][ T6574] tty_port_default_receive_buf+0x70/0xb0 [ 312.939369][ T6574] flush_to_ldisc+0x264/0x780 [ 312.945673][ T6574] process_one_work+0x9c5/0x1ba0 [ 312.952232][ T6574] worker_thread+0x6c8/0xf00 [ 312.958446][ T6574] kthread+0x2c1/0x3a0 [ 312.964140][ T6574] ret_from_fork+0x45/0x80 [ 312.970177][ T6574] ret_from_fork_asm+0x1a/0x30 [ 312.976568][ T6574] INITIAL USE at: [ 312.980431][ T6574] lock_acquire.part.0+0x11b/0x380 [ 312.987079][ T6574] _raw_write_lock_irq+0x36/0x50 [ 312.993551][ T6574] sixpack_close+0x1e/0x2f0 [ 312.999593][ T6574] tty_ldisc_close+0x111/0x1a0 [ 313.005896][ T6574] tty_ldisc_kill+0x8e/0x150 [ 313.012025][ T6574] tty_ldisc_release+0x116/0x2a0 [ 313.018525][ T6574] tty_release_struct+0x23/0xe0 [ 313.024915][ T6574] tty_release+0xe25/0x1410 [ 313.030951][ T6574] __fput+0x3f8/0xb60 [ 313.036471][ T6574] task_work_run+0x14e/0x250 [ 313.042595][ T6574] do_exit+0xadd/0x2d70 [ 313.048291][ T6574] do_group_exit+0xd3/0x2a0 [ 313.054351][ T6574] get_signal+0x24ed/0x26c0 [ 313.060391][ T6574] arch_do_signal_or_restart+0x90/0x7e0 [ 313.067477][ T6574] irqentry_exit_to_user_mode+0x13f/0x280 [ 313.074733][ T6574] asm_exc_general_protection+0x26/0x30 [ 313.081816][ T6574] INITIAL READ USE at: [ 313.086116][ T6574] lock_acquire.part.0+0x11b/0x380 [ 313.093196][ T6574] _raw_read_lock+0x5f/0x70 [ 313.099671][ T6574] sp_get+0x18/0xf0 [ 313.105450][ T6574] sixpack_receive_buf+0x59/0x1c80 [ 313.112533][ T6574] tty_ldisc_receive_buf+0x153/0x190 [ 313.119792][ T6574] tty_port_default_receive_buf+0x70/0xb0 [ 313.127494][ T6574] flush_to_ldisc+0x264/0x780 [ 313.134144][ T6574] process_one_work+0x9c5/0x1ba0 [ 313.141052][ T6574] worker_thread+0x6c8/0xf00 [ 313.147627][ T6574] kthread+0x2c1/0x3a0 [ 313.153671][ T6574] ret_from_fork+0x45/0x80 [ 313.160056][ T6574] ret_from_fork_asm+0x1a/0x30 [ 313.166794][ T6574] } [ 313.169264][ T6574] ... key at: [] disc_data_lock+0x18/0xfe0 [ 313.177143][ T6574] ... acquired at: [ 313.180926][ T6574] lock_acquire.part.0+0x11b/0x380 [ 313.186199][ T6574] _raw_read_lock+0x5f/0x70 [ 313.190856][ T6574] sp_get+0x18/0xf0 [ 313.194822][ T6574] sixpack_write_wakeup+0x20/0x390 [ 313.200085][ T6574] tty_wakeup+0xe5/0x120 [ 313.204480][ T6574] tty_port_default_wakeup+0x2a/0x40 [ 313.209912][ T6574] serial8250_tx_chars+0x68e/0x860 [ 313.215171][ T6574] __start_tx+0x3e9/0x4a0 [ 313.219643][ T6574] serial8250_start_tx+0x363/0x530 [ 313.224900][ T6574] __uart_start+0x292/0x4c0 [ 313.229569][ T6574] uart_write+0x218/0xb30 [ 313.234045][ T6574] sixpack_receive_buf+0x3d7/0x1c80 [ 313.239391][ T6574] tty_ldisc_receive_buf+0x153/0x190 [ 313.244828][ T6574] tty_port_default_receive_buf+0x70/0xb0 [ 313.250691][ T6574] flush_to_ldisc+0x264/0x780 [ 313.255521][ T6574] process_one_work+0x9c5/0x1ba0 [ 313.260624][ T6574] worker_thread+0x6c8/0xf00 [ 313.265363][ T6574] kthread+0x2c1/0x3a0 [ 313.269583][ T6574] ret_from_fork+0x45/0x80 [ 313.274143][ T6574] ret_from_fork_asm+0x1a/0x30 [ 313.279059][ T6574] [ 313.281355][ T6574] [ 313.281355][ T6574] stack backtrace: [ 313.287231][ T6574] CPU: 1 UID: 0 PID: 6574 Comm: kworker/u8:14 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0 [ 313.298132][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 313.308161][ T6574] Workqueue: events_unbound flush_to_ldisc [ 313.313948][ T6574] Call Trace: [ 313.317200][ T6574] [ 313.320108][ T6574] dump_stack_lvl+0x116/0x1f0 [ 313.324776][ T6574] check_irq_usage+0xf22/0x1290 [ 313.329602][ T6574] ? __pfx_check_irq_usage+0x10/0x10 [ 313.334859][ T6574] ? hlock_conflict+0x58/0x200 [ 313.339620][ T6574] ? __bfs+0x2fa/0x670 [ 313.343666][ T6574] ? __pfx_hlock_conflict+0x10/0x10 [ 313.348843][ T6574] ? hlock_conflict+0x58/0x200 [ 313.353589][ T6574] ? lockdep_lock+0xc6/0x200 [ 313.358160][ T6574] ? __pfx_lockdep_lock+0x10/0x10 [ 313.363162][ T6574] ? __lock_acquire+0x24b4/0x3c40 [ 313.368160][ T6574] __lock_acquire+0x24b4/0x3c40 [ 313.372988][ T6574] ? __pfx___lock_acquire+0x10/0x10 [ 313.378161][ T6574] ? lock_acquire.part.0+0x11b/0x380 [ 313.383420][ T6574] lock_acquire.part.0+0x11b/0x380 [ 313.388507][ T6574] ? sp_get+0x18/0xf0 [ 313.392466][ T6574] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 313.398071][ T6574] ? rcu_is_watching+0x12/0xc0 [ 313.402813][ T6574] ? trace_lock_acquire+0x14e/0x1f0 [ 313.407989][ T6574] ? sp_get+0x18/0xf0 [ 313.411947][ T6574] ? lock_acquire+0x2f/0xb0 [ 313.416421][ T6574] ? sp_get+0x18/0xf0 [ 313.420377][ T6574] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 313.426071][ T6574] _raw_read_lock+0x5f/0x70 [ 313.430564][ T6574] ? sp_get+0x18/0xf0 [ 313.434522][ T6574] sp_get+0x18/0xf0 [ 313.438308][ T6574] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 313.444001][ T6574] sixpack_write_wakeup+0x20/0x390 [ 313.449089][ T6574] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 313.454783][ T6574] tty_wakeup+0xe5/0x120 [ 313.459003][ T6574] tty_port_default_wakeup+0x2a/0x40 [ 313.464266][ T6574] serial8250_tx_chars+0x68e/0x860 [ 313.469356][ T6574] __start_tx+0x3e9/0x4a0 [ 313.473659][ T6574] serial8250_start_tx+0x363/0x530 [ 313.478742][ T6574] __uart_start+0x292/0x4c0 [ 313.483238][ T6574] uart_write+0x218/0xb30 [ 313.487539][ T6574] sixpack_receive_buf+0x3d7/0x1c80 [ 313.492712][ T6574] ? ldsem_down_read_trylock+0x121/0x180 [ 313.498316][ T6574] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 313.504274][ T6574] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 313.509883][ T6574] tty_ldisc_receive_buf+0x153/0x190 [ 313.515147][ T6574] tty_port_default_receive_buf+0x70/0xb0 [ 313.520840][ T6574] flush_to_ldisc+0x264/0x780 [ 313.525497][ T6574] ? lock_acquire+0x2f/0xb0 [ 313.529991][ T6574] ? process_one_work+0x921/0x1ba0 [ 313.535079][ T6574] process_one_work+0x9c5/0x1ba0 [ 313.539991][ T6574] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 313.545595][ T6574] ? __pfx_process_one_work+0x10/0x10 [ 313.550941][ T6574] ? rcu_is_watching+0x12/0xc0 [ 313.555682][ T6574] ? assign_work+0x1a0/0x250 [ 313.560260][ T6574] worker_thread+0x6c8/0xf00 [ 313.564831][ T6574] ? __kthread_parkme+0x148/0x220 [ 313.569848][ T6574] ? __pfx_worker_thread+0x10/0x10 [ 313.574935][ T6574] kthread+0x2c1/0x3a0 [ 313.578979][ T6574] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.584150][ T6574] ? __pfx_kthread+0x10/0x10 [ 313.588716][ T6574] ret_from_fork+0x45/0x80 [ 313.593106][ T6574] ? __pfx_kthread+0x10/0x10 [ 313.597672][ T6574] ret_from_fork_asm+0x1a/0x30 [ 313.602419][ T6574] [ 313.660055][ T5899] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 313.672907][ T29] audit: type=1400 audit(1733925795.681:1552): avc: denied { map } for pid=9300 comm="syz.1.951" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 313.821397][ T5899] usb 3-1: No LPM exit latency info found, disabling LPM. [ 313.829187][ T5899] usb 3-1: config 1 interface 0 altsetting 215 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 313.842091][ T5899] usb 3-1: config 1 interface 0 altsetting 215 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 313.853358][ T5899] usb 3-1: config 1 interface 0 has no altsetting 0 [ 313.862038][ T5899] usb 3-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.40 [ 313.871226][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.879507][ T5899] usb 3-1: Product: ј [ 313.883655][ T5899] usb 3-1: Manufacturer:  [ 313.888239][ T5899] usb 3-1: SerialNumber: й [ 313.893885][ T9293] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 313.901080][ T9293] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 314.314729][ T5899] usbhid 3-1:1.0: can't add hid device: -71 [ 314.320758][ T5899] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 314.331095][ T5899] usb 3-1: USB disconnect, device number 23